last executing test programs: 4m59.44721656s ago: executing program 2 (id=76): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000002580)) 4m59.198599775s ago: executing program 2 (id=81): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 4m58.963536399s ago: executing program 2 (id=85): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, 0x0) 4m58.793269303s ago: executing program 2 (id=89): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x840, &(0x7f0000000800)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@gid}, {@gid}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@keep_last_dots}]}, 0x1, 0x152c, &(0x7f0000001f80)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) 4m58.313140522s ago: executing program 2 (id=96): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000002340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3934392c73686f72746e616d653d77696e39352c616c6c6f775f7574696d653d30303030303030303030303030303030303030323637302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c696f636861727365743d63703934392c6e6f6e756d7461696c3d302c757466383d302c00426fe61eb16a2d32ff10f44037fd3e2352ab0cdc55587ed039ac8eca4d923830ee9ab5d084432fdbe4cb29b9f30c85a767cff90ae156c3b9b7071a3a21181460288f48bf05e35f321b09708092067749da8d5f5ae913ab414dd521f8315943858af9d2effc742386b7c8bb6fa6d0188d84bc81da00bbf0320ce981fb0de609fb8d69bd92a020fa3b3520655c5591263e2f0405b5b674f1f1b6c4e5572323630fafedbe050713fd6c6d22507b7750fb7915a6bce999e96cfa0c51652e553b4248578617c82cd094eb3067874f5cc222fab2b0e9d232f94b00"/419], 0x25, 0x34c, &(0x7f0000001740)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 4m57.788845422s ago: executing program 2 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0xd01, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x36}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4m57.465069398s ago: executing program 32 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0xd01, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x36}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.495079063s ago: executing program 0 (id=3992): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000340)={0x0, 0x78bf, 0x13580, 0xfffffefd, 0x20002b3}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000180)={0x3ff, r0, 0x33, {0x5, 0x2}, 0x2}, 0x1) 4.278614868s ago: executing program 0 (id=3994): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3c}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0dbf) fchown(r0, 0x0, 0xee01) 3.815839377s ago: executing program 0 (id=4000): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e0000006651"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.490182402s ago: executing program 3 (id=4015): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1}, 0xfd}, 0x18) 2.379881734s ago: executing program 3 (id=4018): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x3}, 0x4) 2.245158967s ago: executing program 3 (id=4019): writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)='X', 0x1}], 0x1) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2.10162769s ago: executing program 3 (id=4021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) 1.765271476s ago: executing program 1 (id=4024): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) 1.677076268s ago: executing program 1 (id=4025): ioperm(0x0, 0x1fb, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) 1.56529418s ago: executing program 1 (id=4027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fib={{0x8}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) 1.395144533s ago: executing program 4 (id=4028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x709, 0x0, 0x4, {{0x5}, {@val={0x8, 0x117}, @void}}}, 0x1c}}, 0x0) 1.393878744s ago: executing program 1 (id=4036): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 1.302531745s ago: executing program 1 (id=4029): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x625f, &(0x7f00000072c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x82200, 0x30) 1.294162145s ago: executing program 4 (id=4030): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000380)="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", 0x4ae}], 0x1}}], 0x1, 0x240080e4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700"], 0x1ac}}, 0x0) 1.144752278s ago: executing program 4 (id=4031): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0xc0) fchown(r0, 0x0, 0xee00) 1.03400395s ago: executing program 4 (id=4032): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 884.198713ms ago: executing program 4 (id=4033): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x7, 0x6e153d75, 0x4924924, 0xd235}) 512.71927ms ago: executing program 0 (id=4034): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x4}}, 0x10) shutdown(r0, 0x2) 395.609623ms ago: executing program 4 (id=4035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 369.513193ms ago: executing program 3 (id=4037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x483}]}) 225.927086ms ago: executing program 0 (id=4038): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(r0, 0x11, &(0x7f0000000000)={0x11, 0x0, 0x2}, 0x0) 194.484047ms ago: executing program 1 (id=4039): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) 84.185898ms ago: executing program 3 (id=4040): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80}, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xde}]}, 0x24}}, 0x0) 0s ago: executing program 0 (id=4041): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x5e) kernel console output (not intermixed with test programs): b_submit_urb failed with result -19 [ 273.152957][ T5171] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 274.593366][T11501] loop4: detected capacity change from 0 to 16 [ 274.627898][T11501] erofs: (device loop4): mounted with root inode @ nid 36. [ 274.704315][T11501] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 274.767656][T11501] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 275.083186][T11511] netlink: 'syz.4.2509': attribute type 10 has an invalid length. [ 275.120059][T11511] macvlan0: entered promiscuous mode [ 275.142553][T11511] macvlan0: entered allmulticast mode [ 275.178806][T11511] veth1_vlan: entered allmulticast mode [ 275.226259][T11511] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 275.244580][T11515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2511'. [ 275.909740][T11542] wg1: entered promiscuous mode [ 275.931471][T11542] wg1: entered allmulticast mode [ 276.127464][T11548] netlink: 'syz.0.2523': attribute type 4 has an invalid length. [ 276.210050][T11548] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2523'. [ 276.279346][T11548] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 276.712696][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2532'. [ 276.812934][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 276.861511][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2534'. [ 277.687387][T11607] : renamed from veth0_to_bond (while UP) [ 278.841143][T11648] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2563'. [ 279.348799][T11657] program syz.3.2568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.408351][T11639] loop1: detected capacity change from 0 to 32768 [ 279.518584][T11639] JBD2: Ignoring recovery information on journal [ 279.647272][T11639] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 279.836275][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 279.960789][T11646] loop4: detected capacity change from 0 to 40427 [ 280.019220][T11646] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 280.064811][T11646] F2FS-fs (loop4): invalid crc value [ 280.110828][T11646] F2FS-fs (loop4): Found nat_bits in checkpoint [ 280.129554][T11673] tmpfs: Bad value for 'huge' [ 280.282308][T11646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 280.379537][T11676] loop1: detected capacity change from 0 to 1024 [ 281.161975][T11690] loop1: detected capacity change from 0 to 256 [ 281.287243][T11690] FAT-fs (loop1): Directory bread(block 64) failed [ 281.311741][T11690] FAT-fs (loop1): Directory bread(block 65) failed [ 281.318669][T11690] FAT-fs (loop1): Directory bread(block 66) failed [ 281.352006][T11690] FAT-fs (loop1): Directory bread(block 67) failed [ 281.358750][T11690] FAT-fs (loop1): Directory bread(block 68) failed [ 281.390920][T11690] FAT-fs (loop1): Directory bread(block 69) failed [ 281.416812][T11690] FAT-fs (loop1): Directory bread(block 70) failed [ 281.441587][T11690] FAT-fs (loop1): Directory bread(block 71) failed [ 281.454476][T11690] FAT-fs (loop1): Directory bread(block 72) failed [ 281.461080][T11690] FAT-fs (loop1): Directory bread(block 73) failed [ 281.645301][T11690] syz.1.2583: attempt to access beyond end of device [ 281.645301][T11690] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 281.668657][T11690] syz.1.2583: attempt to access beyond end of device [ 281.668657][T11690] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 281.741429][ T28] audit: type=1800 audit(1757446840.440:64): pid=11690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2583" name="file0" dev="loop1" ino=1048626 res=0 errno=0 [ 283.006134][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 283.034971][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2605'. [ 283.102194][T11745] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 11745 comm: syz.4.2608) [ 283.167345][ T28] audit: type=1800 audit(1757446841.870:65): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2608" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=25956 res=0 errno=0 [ 283.199061][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.429922][T11759] binder: 11758:11759 unknown command 0 [ 283.442507][T11759] binder: 11758:11759 ioctl c0306201 200000000480 returned -22 [ 283.467784][T11760] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 283.522759][T11760] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2613'. [ 283.805013][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 283.852560][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 283.879648][T11774] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2621'. [ 284.381546][ T5790] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 284.604610][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 284.621371][ T5790] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 284.656840][ T5790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 284.691424][ T5790] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 284.724527][ T5790] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 284.741461][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.767624][ T5790] usb 1-1: Product: syz [ 284.772498][ T5790] usb 1-1: Manufacturer: syz [ 284.779542][ T5790] usb 1-1: SerialNumber: syz [ 284.806230][ T5790] usb 1-1: config 0 descriptor?? [ 284.817708][T11798] loop4: detected capacity change from 0 to 8192 [ 284.829976][ T5790] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 284.852211][T11798] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.872303][T11798] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 284.882851][T11798] REISERFS (device loop4): using ordered data mode [ 284.901691][T11798] reiserfs: using flush barriers [ 284.941775][T11798] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.958443][T11806] loop1: detected capacity change from 0 to 4096 [ 284.976046][T11806] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 285.044450][ T5790] scsi host1: usb-storage 1-1:0.0 [ 285.050112][T11798] REISERFS (device loop4): checking transaction log (loop4) [ 285.066364][ T5790] usb 1-1: USB disconnect, device number 10 [ 285.099992][T11798] REISERFS (device loop4): Using rupasov hash to sort names [ 285.356041][T11812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2639'. [ 285.404754][T11806] syz.1.2637 (11806) used greatest stack depth: 20496 bytes left [ 286.460691][T11848] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 286.487593][T11848] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 287.051112][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2667'. [ 287.090417][T11868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2667'. [ 287.127430][T11872] loop1: detected capacity change from 0 to 256 [ 287.163527][T11874] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2670'. [ 287.209341][T11872] FAT-fs (loop1): Directory bread(block 64) failed [ 287.252096][T11872] FAT-fs (loop1): Directory bread(block 65) failed [ 287.273518][T11872] FAT-fs (loop1): Directory bread(block 66) failed [ 287.280127][T11872] FAT-fs (loop1): Directory bread(block 67) failed [ 287.307127][T11872] FAT-fs (loop1): Directory bread(block 68) failed [ 287.329686][T11872] FAT-fs (loop1): Directory bread(block 69) failed [ 287.368234][T11872] FAT-fs (loop1): Directory bread(block 70) failed [ 287.392541][T11872] FAT-fs (loop1): Directory bread(block 71) failed [ 287.399262][T11872] FAT-fs (loop1): Directory bread(block 72) failed [ 287.444211][T11872] FAT-fs (loop1): Directory bread(block 73) failed [ 287.651409][ T5833] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 287.671491][ T5790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 287.851728][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 287.874022][ T5833] usb 1-1: config 0 has an invalid interface number: 108 but max is 0 [ 287.891418][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 287.901504][ T5833] usb 1-1: config 0 has no interface number 0 [ 287.907455][ T5790] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.916031][ T5833] usb 1-1: config 0 interface 108 has no altsetting 0 [ 287.936368][ T5790] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 287.946454][ T5833] usb 1-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 287.946494][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.946515][ T5833] usb 1-1: Product: syz [ 287.946530][ T5833] usb 1-1: Manufacturer: syz [ 287.946544][ T5833] usb 1-1: SerialNumber: syz [ 287.950609][ T5833] usb 1-1: config 0 descriptor?? [ 288.034316][ T5790] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 288.064800][ T5790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.065729][ T5833] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 288.077016][ T5790] usb 4-1: Product: syz [ 288.103634][ T5790] usb 4-1: Manufacturer: syz [ 288.108824][ T5790] usb 4-1: SerialNumber: syz [ 288.220242][T11903] netlink: 772 bytes leftover after parsing attributes in process `syz.4.2680'. [ 288.376494][ T5790] usb 4-1: Invalid number of CPorts: 0 [ 288.391360][ T5790] es2_ap_driver: probe of 4-1:7.0 failed with error -22 [ 288.496807][ T5833] usb 1-1: USB disconnect, device number 11 [ 288.582195][ T5790] usb 4-1: USB disconnect, device number 7 [ 288.597190][T11908] loop4: detected capacity change from 0 to 4096 [ 288.627924][T11908] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 288.941649][T11901] loop1: detected capacity change from 0 to 32768 [ 289.033340][T11901] __jfs_setxattr: xattr_size = 82, new_size = 12061 [ 289.092453][T11913] netlink: 'syz.0.2682': attribute type 7 has an invalid length. [ 289.273579][T11917] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2686'. [ 289.405493][T11920] loop1: detected capacity change from 0 to 2048 [ 289.505532][T11924] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 289.684764][T11924] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 289.735567][T11924] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 289.849054][T11924] Remounting filesystem read-only [ 289.978746][ T5783] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 290.033394][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=12 [ 290.040246][ T5783] NILFS (loop1): discard dirty block: blocknr=17, size=1024 [ 290.062004][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.096439][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.128084][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.147830][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 290.181495][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.216323][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.241519][ T5783] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 290.271507][ T5783] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 290.293105][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 290.299865][ T5783] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 290.341463][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.359614][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.400854][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.431693][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.443007][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 290.481462][ T5783] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 290.509246][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.539790][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.571453][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.591461][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 290.604437][ T5783] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 290.635186][ T5783] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 290.651360][ T5783] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 290.658721][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.720641][ T5783] NILFS (loop1): discard dirty page: offset=131072, ino=3 [ 290.739425][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.761681][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 290.771056][ T5783] NILFS (loop1): discard dirty block: blocknr=46, size=1024 [ 290.800213][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 291.647404][T11977] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 291.682289][T11977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2711'. [ 291.705521][T11977] ipvlan1: entered promiscuous mode [ 291.721397][ T28] audit: type=1326 audit(1757446850.420:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 291.746522][T11977] ipvlan1: entered allmulticast mode [ 291.761446][T11977] veth0_vlan: entered allmulticast mode [ 291.784100][T11977] bridge0: port 4(ipvlan1) entered blocking state [ 291.792412][T11977] bridge0: port 4(ipvlan1) entered disabled state [ 291.807082][ T28] audit: type=1326 audit(1757446850.420:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 291.843177][T11977] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 291.872718][ T28] audit: type=1326 audit(1757446850.430:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 291.931522][ T28] audit: type=1326 audit(1757446850.430:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 292.011412][ T28] audit: type=1326 audit(1757446850.430:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11979 comm="syz.1.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 292.182529][T11989] veth3: entered allmulticast mode [ 292.191740][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 292.386474][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 292.395976][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 292.408363][T11998] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2721'. [ 292.420829][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.442058][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 292.475899][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.503550][ T23] usb 2-1: config 0 descriptor?? [ 292.523163][ T23] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 292.967731][ T23] gspca_vc032x: reg_w err -71 [ 292.982646][ T23] vc032x: probe of 2-1:0.0 failed with error -71 [ 293.021777][ T23] usb 2-1: USB disconnect, device number 12 [ 293.491670][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 293.681823][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 293.695676][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.700598][T12029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2736'. [ 293.711411][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 293.742991][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.761446][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 293.769672][ T9] usb 1-1: SerialNumber: syz [ 293.795390][ T9] cdc_acm 1-1:1.0: invalid descriptor buffer length [ 293.802307][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 293.810166][ T9] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 293.844810][ T9] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 293.951483][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 294.041542][ T5171] usb 1-1: USB disconnect, device number 12 [ 294.141431][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 294.151869][ T5871] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 294.160991][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.181435][ T5871] usb 2-1: Product: syz [ 294.185679][ T5871] usb 2-1: Manufacturer: syz [ 294.190319][ T5871] usb 2-1: SerialNumber: syz [ 294.215475][ T5871] usb 2-1: config 0 descriptor?? [ 294.232974][ T5871] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 294.278624][ T5871] usb 2-1: Detected FT4233HP [ 294.281056][T12037] loop4: detected capacity change from 0 to 256 [ 294.356799][T12037] FAT-fs (loop4): Directory bread(block 64) failed [ 294.381536][T12037] FAT-fs (loop4): Directory bread(block 65) failed [ 294.400498][T12037] FAT-fs (loop4): Directory bread(block 66) failed [ 294.414817][T12037] FAT-fs (loop4): Directory bread(block 67) failed [ 294.424043][T12037] FAT-fs (loop4): Directory bread(block 68) failed [ 294.430634][T12037] FAT-fs (loop4): Directory bread(block 69) failed [ 294.448274][T12037] FAT-fs (loop4): Directory bread(block 70) failed [ 294.456304][T12037] FAT-fs (loop4): Directory bread(block 71) failed [ 294.468333][T12037] FAT-fs (loop4): Directory bread(block 72) failed [ 294.476552][T12037] FAT-fs (loop4): Directory bread(block 73) failed [ 294.662527][ T5871] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 294.710916][ T5871] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 294.775874][ T5871] usb 2-1: USB disconnect, device number 13 [ 294.818615][ T5871] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 294.850778][ T5871] ftdi_sio 2-1:0.0: device disconnected [ 294.962692][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 295.312191][ T48] hfsplus: b-tree write err: -5, ino 4 [ 295.443561][T12059] loop4: detected capacity change from 0 to 2048 [ 295.511539][T12064] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.693028][T12064] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 295.736027][T12064] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 295.777607][T12064] Remounting filesystem read-only [ 295.915681][ T6113] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 295.945585][T12076] x_tables: unsorted underflow at hook 4 [ 295.966275][T12075] ieee802154 phy0 wpan0: encryption failed: -90 [ 295.974178][ T6113] NILFS (loop4): discard dirty page: offset=0, ino=12 [ 295.981105][ T6113] NILFS (loop4): discard dirty block: blocknr=17, size=1024 [ 295.995597][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.006062][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.019494][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.030257][ T6113] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 296.044957][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.056735][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.108459][ T6113] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 296.141699][ T6113] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 296.163244][ T6113] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 296.169997][ T6113] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 296.223055][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.244910][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.269456][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.279686][ T6113] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 296.301459][ T6113] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 296.308823][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.340706][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.381822][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.412448][ T6113] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 296.419208][ T6113] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 296.457624][ T6113] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 296.481765][ T6113] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 296.501360][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.510384][ T6113] NILFS (loop4): discard dirty page: offset=131072, ino=3 [ 296.542318][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.567530][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.600144][ T6113] NILFS (loop4): discard dirty block: blocknr=46, size=1024 [ 296.641395][ T6113] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 296.830143][T12099] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2762'. [ 297.170934][T12115] loop1: detected capacity change from 0 to 256 [ 297.290622][T12119] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2780'. [ 297.315700][T12115] FAT-fs (loop1): Directory bread(block 64) failed [ 297.341623][T12115] FAT-fs (loop1): Directory bread(block 65) failed [ 297.368042][T12115] FAT-fs (loop1): Directory bread(block 66) failed [ 297.393748][T12115] FAT-fs (loop1): Directory bread(block 67) failed [ 297.410984][T12115] FAT-fs (loop1): Directory bread(block 68) failed [ 297.437695][T12123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.445711][T12115] FAT-fs (loop1): Directory bread(block 69) failed [ 297.467593][T12115] FAT-fs (loop1): Directory bread(block 70) failed [ 297.478719][T12115] FAT-fs (loop1): Directory bread(block 71) failed [ 297.498168][T12125] netlink: 'syz.4.2783': attribute type 16 has an invalid length. [ 297.506668][T12115] FAT-fs (loop1): Directory bread(block 72) failed [ 297.521638][T12115] FAT-fs (loop1): Directory bread(block 73) failed [ 298.011504][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2790'. [ 298.037489][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2790'. [ 298.149943][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'. [ 298.515923][ T5795] Bluetooth: Wrong link type (-22) [ 299.536981][ T23] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.675526][T12193] loop1: detected capacity change from 0 to 512 [ 299.707841][T12193] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.741283][T12193] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2818: bg 0: block 5: invalid block bitmap [ 299.811453][T12193] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 299.857150][ T23] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.903070][T12193] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2818: invalid indirect mapped block 3 (level 2) [ 299.949832][T12193] EXT4-fs (loop1): 2 truncates cleaned up [ 299.966510][T12193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.093928][T12205] bridge2: entered allmulticast mode [ 300.186126][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.380920][T12216] xt_hashlimit: size too large, truncated to 1048576 [ 300.400144][T12216] xt_hashlimit: overflow, try lower: 3/0 [ 300.554396][T12222] ipt_REJECT: TCP_RESET invalid for non-tcp [ 301.711846][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 301.721182][T12224] loop1: detected capacity change from 0 to 32768 [ 301.781881][T12224] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 301.815640][T12224] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 301.943072][T12262] loop4: detected capacity change from 0 to 4096 [ 302.039704][T12224] (syz.1.2831,12224,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 302.062652][T12224] (syz.1.2831,12224,1):ocfs2_search_chain:1761 ERROR: status = -12 [ 302.113253][T12224] (syz.1.2831,12224,1):ocfs2_search_chain:1871 ERROR: status = -12 [ 302.141487][T12224] (syz.1.2831,12224,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 302.202243][T12224] (syz.1.2831,12224,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 302.234165][T12224] (syz.1.2831,12224,1):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 302.276425][T12224] (syz.1.2831,12224,1):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 302.322973][T12224] (syz.1.2831,12224,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 302.351489][T12224] (syz.1.2831,12224,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 302.381473][T12224] (syz.1.2831,12224,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 302.411915][T12224] (syz.1.2831,12224,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 302.443743][T12224] (syz.1.2831,12224,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 302.468126][T12224] (syz.1.2831,12224,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 302.490029][T12224] (syz.1.2831,12224,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 302.532038][T12224] (syz.1.2831,12224,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 302.555076][T12224] (syz.1.2831,12224,1):ocfs2_mknod:357 ERROR: status = -12 [ 302.573735][T12224] (syz.1.2831,12224,1):ocfs2_mknod:502 ERROR: status = -12 [ 302.581027][T12224] (syz.1.2831,12224,1):ocfs2_mkdir:659 ERROR: status = -12 [ 302.800435][ T5783] ocfs2: Unmounting device (7,1) on (node local) [ 303.553513][T12304] xt_l2tp: v2 doesn't support IP mode [ 303.872346][T12317] netlink: 'syz.1.2876': attribute type 10 has an invalid length. [ 303.925367][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.934397][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.991728][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.999036][T12317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.006720][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.013988][T12317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.044638][T12317] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 304.641213][T12339] netlink: 'syz.0.2887': attribute type 21 has an invalid length. [ 304.682580][T12339] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2887'. [ 305.890704][T12387] netlink: 'syz.0.2910': attribute type 3 has an invalid length. [ 305.991774][ T5171] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 306.129756][T12394] loop1: detected capacity change from 0 to 512 [ 306.194450][T12394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.204261][ T5171] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.222944][ T5171] usb 5-1: not running at top speed; connect to a high speed hub [ 306.232951][ T5171] usb 5-1: config 56 has an invalid interface number: 129 but max is 0 [ 306.252248][ T5171] usb 5-1: config 56 has no interface number 0 [ 306.258326][T12394] ext4 filesystem being mounted at /724/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.258501][ T5171] usb 5-1: config 56 interface 129 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 306.291990][ T5171] usb 5-1: config 56 interface 129 has no altsetting 0 [ 306.302317][ T5171] usb 5-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=e5.d2 [ 306.311813][ T5171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.319900][ T5171] usb 5-1: Product: syz [ 306.324330][ T5171] usb 5-1: Manufacturer: syz [ 306.328986][ T5171] usb 5-1: SerialNumber: syz [ 306.343908][T12381] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 306.390870][T12401] batadv1: entered allmulticast mode [ 306.398138][T12401] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 306.503772][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.573705][ T5171] option 5-1:56.129: GSM modem (1-port) converter detected [ 306.653746][ T5171] usb 5-1: USB disconnect, device number 12 [ 306.684537][ T5171] option 5-1:56.129: device disconnected [ 307.070296][T12416] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 307.269950][T12425] comedi comedi0: No channels found! [ 307.896966][T12448] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (7), value rounded to 126 ms [ 307.958892][T12448] (unnamed net_device) (uninitialized): peer notification delay (5) is not a multiple of miimon (7), value rounded to 0 ms [ 308.040197][T12448] bond2: entered allmulticast mode [ 308.426431][T12466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.474362][T12468] netlink: 'syz.3.2948': attribute type 10 has an invalid length. [ 308.537941][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.545772][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.619683][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.626980][T12468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.634687][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.641969][T12468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.679898][T12468] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 308.713911][T12474] batadv1: entered allmulticast mode [ 308.753791][T12474] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 309.629412][T12502] loop1: detected capacity change from 0 to 512 [ 309.686005][T12502] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 309.733078][T12507] xt_l2tp: invalid flags combination: 0 [ 309.758357][T12502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.836592][T12502] ext4 filesystem being mounted at /738/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.978669][T12502] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 310.033526][T12502] EXT4-fs (loop1): Remounting filesystem read-only [ 310.205382][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.228367][ T34] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 310.283519][ T34] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 311.199461][T12555] loop1: detected capacity change from 0 to 164 [ 311.262310][T12555] Unable to read rock-ridge attributes [ 311.586142][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.956616][T12579] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 312.828117][T12612] netlink: 'syz.4.3013': attribute type 2 has an invalid length. [ 314.006757][T12645] loop4: detected capacity change from 0 to 512 [ 314.069531][T12645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.178178][T12645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.233542][T12645] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.584663][ T6113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.157662][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3044'. [ 315.191559][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3044'. [ 315.455663][T12693] netlink: 'syz.1.3049': attribute type 12 has an invalid length. [ 315.470148][T12693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3049'. [ 315.730636][T12702] netlink: 'syz.1.3051': attribute type 1 has an invalid length. [ 317.071731][T12749] netlink: 'syz.0.3071': attribute type 10 has an invalid length. [ 317.315665][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.322546][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.340357][T12759] loop1: detected capacity change from 0 to 256 [ 317.478379][T12759] FAT-fs (loop1): Directory bread(block 64) failed [ 317.499814][T12759] FAT-fs (loop1): Directory bread(block 65) failed [ 317.518656][T12759] FAT-fs (loop1): Directory bread(block 66) failed [ 317.559188][T12759] FAT-fs (loop1): Directory bread(block 67) failed [ 317.581768][T12759] FAT-fs (loop1): Directory bread(block 68) failed [ 317.589956][T12759] FAT-fs (loop1): Directory bread(block 69) failed [ 317.600260][T12759] FAT-fs (loop1): Directory bread(block 70) failed [ 317.619553][T12759] FAT-fs (loop1): Directory bread(block 71) failed [ 317.645026][T12759] FAT-fs (loop1): Directory bread(block 72) failed [ 317.665391][T12759] FAT-fs (loop1): Directory bread(block 73) failed [ 318.142088][T12774] overlayfs: missing 'lowerdir' [ 318.501822][T12788] lo: entered promiscuous mode [ 318.506688][T12788] lo: entered allmulticast mode [ 318.532368][T12788] tunl0: entered promiscuous mode [ 318.541874][T12788] tunl0: entered allmulticast mode [ 318.548143][T12788] gre0: entered promiscuous mode [ 318.559764][T12788] gre0: entered allmulticast mode [ 318.573285][T12788] gretap0: entered promiscuous mode [ 318.585370][T12788] gretap0: entered allmulticast mode [ 318.602705][T12788] erspan0: entered promiscuous mode [ 318.615292][T12788] erspan0: entered allmulticast mode [ 318.633879][T12788] ip_vti0: entered promiscuous mode [ 318.650379][T12788] ip_vti0: entered allmulticast mode [ 318.676284][T12788] ip6_vti0: entered promiscuous mode [ 318.701234][T12788] ip6_vti0: entered allmulticast mode [ 318.727402][T12788] sit0: entered promiscuous mode [ 318.738184][T12788] sit0: entered allmulticast mode [ 318.760599][T12788] ip6tnl0: entered promiscuous mode [ 318.766173][T12788] ip6tnl0: entered allmulticast mode [ 318.774712][T12788] ip6gre0: entered promiscuous mode [ 318.780161][T12788] ip6gre0: entered allmulticast mode [ 318.787267][T12788] syz_tun: entered promiscuous mode [ 318.793199][T12788] syz_tun: entered allmulticast mode [ 318.799515][T12788] ip6gretap0: entered promiscuous mode [ 318.805720][T12788] ip6gretap0: entered allmulticast mode [ 318.818707][T12788] bridge0: entered promiscuous mode [ 318.825888][T12788] bridge0: entered allmulticast mode [ 318.868036][T12788] vcan0: entered promiscuous mode [ 318.882463][T12788] vcan0: entered allmulticast mode [ 318.889696][T12788] bond0: entered promiscuous mode [ 318.903546][T12788] bond_slave_0: entered promiscuous mode [ 318.926051][T12788] bond_slave_1: entered promiscuous mode [ 318.939100][T12788] bond0: entered allmulticast mode [ 318.951369][T12788] bond_slave_0: entered allmulticast mode [ 318.965789][T12788] bond_slave_1: entered allmulticast mode [ 318.981517][T12788] dummy0: entered promiscuous mode [ 318.997082][T12788] dummy0: entered allmulticast mode [ 319.011440][T12788] nlmon0: entered promiscuous mode [ 319.021564][T12788] nlmon0: entered allmulticast mode [ 319.035441][T12788] caif0: entered promiscuous mode [ 319.051411][T12788] caif0: entered allmulticast mode [ 319.061056][T12788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.678423][T12819] loop1: detected capacity change from 0 to 512 [ 319.730520][T12819] EXT4-fs (loop1): Test dummy encryption mode enabled [ 319.742590][T12819] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 319.760865][T12819] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 319.824189][T12819] EXT4-fs (loop1): 1 truncate cleaned up [ 319.858672][T12819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.316512][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.553072][T12840] netlink: 'syz.3.3109': attribute type 3 has an invalid length. [ 320.565093][T12840] netlink: 'syz.3.3109': attribute type 3 has an invalid length. [ 320.591634][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 321.531940][T12872] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 321.576301][T12872] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.727801][T12878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.735284][T12878] IPv6: NLM_F_CREATE should be set when creating new route [ 322.025889][T12886] devtmpfs: Unknown parameter 'GPL' [ 323.404209][T12932] lo: entered promiscuous mode [ 323.412016][T12932] lo: entered allmulticast mode [ 323.422921][T12932] tunl0: entered promiscuous mode [ 323.428039][T12932] tunl0: entered allmulticast mode [ 323.452632][T12932] gre0: entered promiscuous mode [ 323.457648][T12932] gre0: entered allmulticast mode [ 323.539277][T12932] gretap0: entered promiscuous mode [ 323.569840][T12932] gretap0: entered allmulticast mode [ 323.582914][T12932] erspan0: entered promiscuous mode [ 323.610432][T12932] erspan0: entered allmulticast mode [ 323.629177][T12932] ip_vti0: entered promiscuous mode [ 323.638921][T12932] ip_vti0: entered allmulticast mode [ 323.646419][T12932] ip6_vti0: entered promiscuous mode [ 323.666464][T12932] ip6_vti0: entered allmulticast mode [ 323.674413][T12932] sit0: entered promiscuous mode [ 323.679517][T12932] sit0: entered allmulticast mode [ 323.709873][T12932] ip6tnl0: entered promiscuous mode [ 323.721601][T12932] ip6tnl0: entered allmulticast mode [ 323.727964][T12932] ip6gre0: entered promiscuous mode [ 323.741392][T12932] ip6gre0: entered allmulticast mode [ 323.747739][T12932] syz_tun: entered promiscuous mode [ 323.779961][T12932] syz_tun: entered allmulticast mode [ 323.807573][T12932] ip6gretap0: entered promiscuous mode [ 323.830042][T12932] ip6gretap0: entered allmulticast mode [ 323.849579][T12932] bridge0: entered promiscuous mode [ 323.865978][T12932] bridge0: entered allmulticast mode [ 323.892245][T12932] vcan0: entered promiscuous mode [ 323.911526][T12932] vcan0: entered allmulticast mode [ 323.940838][T12932] bond0: entered promiscuous mode [ 323.949423][T12932] bond_slave_0: entered promiscuous mode [ 323.961702][T12932] bond_slave_1: entered promiscuous mode [ 323.967863][T12932] bond0: entered allmulticast mode [ 323.976872][T12932] bond_slave_0: entered allmulticast mode [ 323.986483][T12932] bond_slave_1: entered allmulticast mode [ 324.002466][T12932] team0: entered promiscuous mode [ 324.011344][T12932] team_slave_0: entered promiscuous mode [ 324.017343][T12932] team_slave_1: entered promiscuous mode [ 324.040333][T12932] team0: entered allmulticast mode [ 324.067865][T12932] team_slave_0: entered allmulticast mode [ 324.090008][T12932] team_slave_1: entered allmulticast mode [ 324.112928][T12932] dummy0: entered promiscuous mode [ 324.124985][T12932] dummy0: entered allmulticast mode [ 324.138869][T12932] nlmon0: entered promiscuous mode [ 324.148096][T12932] nlmon0: entered allmulticast mode [ 324.160379][T12932] caif0: entered promiscuous mode [ 324.168315][T12932] caif0: entered allmulticast mode [ 324.174152][T12932] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.199120][T12940] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 324.228646][T12940] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 324.247370][T12952] netlink: 'syz.3.3163': attribute type 21 has an invalid length. [ 324.775835][T12972] xt_hashlimit: size too large, truncated to 1048576 [ 324.798942][T12972] xt_hashlimit: max too large, truncated to 1048576 [ 324.984071][T12979] lo: entered promiscuous mode [ 325.000943][T12979] tunl0: entered promiscuous mode [ 325.005381][T12980] kAFS: No cell specified [ 325.008856][T12979] tunl0: entered allmulticast mode [ 325.025240][T12979] gre0: entered promiscuous mode [ 325.030441][T12979] gre0: entered allmulticast mode [ 325.036849][T12979] gretap0: entered promiscuous mode [ 325.048155][T12979] gretap0: entered allmulticast mode [ 325.062246][T12979] erspan0: entered promiscuous mode [ 325.067980][T12979] erspan0: entered allmulticast mode [ 325.085093][T12979] ip_vti0: entered promiscuous mode [ 325.090560][T12979] ip_vti0: entered allmulticast mode [ 325.106388][T12979] ip6_vti0: entered promiscuous mode [ 325.128251][T12979] ip6_vti0: entered allmulticast mode [ 325.136307][T12979] sit0: entered promiscuous mode [ 325.146639][T12979] sit0: entered allmulticast mode [ 325.153407][T12979] ip6tnl0: entered promiscuous mode [ 325.158869][T12979] ip6tnl0: entered allmulticast mode [ 325.170110][T12979] ip6gre0: entered promiscuous mode [ 325.178519][T12979] ip6gre0: entered allmulticast mode [ 325.189176][T12979] syz_tun: entered promiscuous mode [ 325.197940][T12979] syz_tun: entered allmulticast mode [ 325.206525][T12979] ip6gretap0: entered promiscuous mode [ 325.215508][T12979] ip6gretap0: entered allmulticast mode [ 325.222056][T12979] bridge0: entered promiscuous mode [ 325.228802][T12979] bridge0: entered allmulticast mode [ 325.242347][T12979] vcan0: entered promiscuous mode [ 325.248761][T12979] vcan0: entered allmulticast mode [ 325.260832][T12979] bond0: entered promiscuous mode [ 325.271982][T12979] bond_slave_0: entered promiscuous mode [ 325.277947][T12979] bond_slave_1: entered promiscuous mode [ 325.285736][T12979] bond0: entered allmulticast mode [ 325.290969][T12979] bond_slave_0: entered allmulticast mode [ 325.297235][T12979] bond_slave_1: entered allmulticast mode [ 325.304820][T12979] team0: entered promiscuous mode [ 325.309990][T12979] team_slave_0: entered promiscuous mode [ 325.316574][T12979] team_slave_1: entered promiscuous mode [ 325.322904][T12979] team0: entered allmulticast mode [ 325.328796][T12979] team_slave_0: entered allmulticast mode [ 325.335089][T12979] team_slave_1: entered allmulticast mode [ 325.342115][T12979] dummy0: entered promiscuous mode [ 325.347407][T12979] dummy0: entered allmulticast mode [ 325.355584][T12979] nlmon0: entered promiscuous mode [ 325.360879][T12979] nlmon0: entered allmulticast mode [ 325.367616][T12979] caif0: entered promiscuous mode [ 325.377996][T12979] caif0: entered allmulticast mode [ 325.391651][T12979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.413751][T12982] netlink: 'syz.1.3179': attribute type 11 has an invalid length. [ 325.693045][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 325.710515][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3185'. [ 325.950524][T13004] delete_channel: no stack [ 326.142780][T13009] loop4: detected capacity change from 0 to 4096 [ 326.168424][T13009] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 326.291096][T13009] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 326.498866][T13018] xt_HMARK: spi-set and port-set can't be combined [ 326.741449][T13026] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3201'. [ 326.862444][T13030] openvswitch: netlink: Actions may not be safe on all matching packets [ 327.022579][T13036] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 327.102688][T13040] netlink: 'syz.4.3208': attribute type 3 has an invalid length. [ 327.888379][T13066] xt_HMARK: spi-set and port-set can't be combined [ 328.030275][T13069] binder: 13067:13069 unknown command 1074553619 [ 328.047440][T13069] binder: 13067:13069 ioctl c0306201 200000000540 returned -22 [ 328.595967][T13084] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 329.769708][T13127] sctp: [Deprecated]: syz.1.3251 (pid 13127) Use of int in maxseg socket option. [ 329.769708][T13127] Use struct sctp_assoc_value instead [ 329.960388][T13135] loop4: detected capacity change from 0 to 256 [ 330.091818][T13139] loop1: detected capacity change from 0 to 256 [ 330.136106][T13135] FAT-fs (loop4): Directory bread(block 64) failed [ 330.175606][T13135] FAT-fs (loop4): Directory bread(block 65) failed [ 330.221691][T13135] FAT-fs (loop4): Directory bread(block 66) failed [ 330.228293][T13135] FAT-fs (loop4): Directory bread(block 67) failed [ 330.258274][T13135] FAT-fs (loop4): Directory bread(block 68) failed [ 330.285990][T13135] FAT-fs (loop4): Directory bread(block 69) failed [ 330.301733][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3258'. [ 330.306366][T13135] FAT-fs (loop4): Directory bread(block 70) failed [ 330.325053][T13135] FAT-fs (loop4): Directory bread(block 71) failed [ 330.380710][T13135] FAT-fs (loop4): Directory bread(block 72) failed [ 330.399705][T13135] FAT-fs (loop4): Directory bread(block 73) failed [ 331.086148][T13167] netlink: 'syz.4.3271': attribute type 22 has an invalid length. [ 331.110487][T13170] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 331.481610][ T5171] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 331.697232][ T5171] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 331.700983][T13185] loop1: detected capacity change from 0 to 4096 [ 331.711504][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 331.726323][T13185] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 331.732938][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.765615][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 331.789677][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 331.808804][ T5171] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 331.816864][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 331.830809][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.847489][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 331.860856][T13185] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 331.860952][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 331.880421][ T5171] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 331.889618][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 331.930633][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 331.950967][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 331.967189][ T5171] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 331.984036][ T5171] usb 4-1: string descriptor 0 read error: -22 [ 331.990544][ T5171] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 332.003541][T13193] binder: 13192:13193 ioctl c018620b 0 returned -14 [ 332.010313][ T5171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.037397][ T5171] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 332.281581][ T8] usb 4-1: USB disconnect, device number 8 [ 332.472260][T13206] usb usb8: usbfs: process 13206 (syz.1.3287) did not claim interface 0 before use [ 332.696096][T13215] netlink: 'syz.1.3292': attribute type 2 has an invalid length. [ 333.130265][T13228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3297'. [ 333.154958][T13232] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 333.234152][ T28] audit: type=1326 audit(1757446891.940:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.308342][ T28] audit: type=1326 audit(1757446891.940:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.392123][ T28] audit: type=1326 audit(1757446891.940:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.452131][ T28] audit: type=1326 audit(1757446891.940:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.511443][ T28] audit: type=1326 audit(1757446891.940:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.543587][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3304'. [ 333.555954][T13244] (null): rxe_set_mtu: Set mtu to 1024 [ 333.576772][ T28] audit: type=1326 audit(1757446891.940:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.627699][ T28] audit: type=1326 audit(1757446891.940:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.694135][ T28] audit: type=1326 audit(1757446891.940:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 333.762470][ T28] audit: type=1326 audit(1757446891.940:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.1.3300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 334.085030][T13244] infiniband syz!: set active [ 334.107477][T13244] infiniband syz!: added team_slave_0 [ 334.260846][T13244] RDS/IB: syz!: added [ 334.298724][T13244] smc: adding ib device syz! with port count 1 [ 334.313129][T13244] smc: ib device syz! port 1 has pnetid [ 334.325976][T13265] loop4: detected capacity change from 0 to 24 [ 334.339346][T13265] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 334.361546][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 334.371448][T13265] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 334.571368][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 334.592038][ T23] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 334.617031][T13267] loop4: detected capacity change from 0 to 4096 [ 334.623762][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.637357][ T23] usb 4-1: Product: syz [ 334.644752][ T23] usb 4-1: Manufacturer: syz [ 334.667304][ T23] usb 4-1: SerialNumber: syz [ 334.684347][ T23] usb 4-1: config 0 descriptor?? [ 335.120027][ T23] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 335.154355][ T23] peak_usb 4-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 335.224502][ T23] peak_usb: probe of 4-1:0.0 failed with error -71 [ 335.242511][ T23] usb 4-1: USB disconnect, device number 9 [ 335.463735][T13278] bridge_slave_0: left allmulticast mode [ 335.470040][T13278] bridge_slave_0: left promiscuous mode [ 335.495924][T13278] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.513608][T13278] bridge_slave_1: left allmulticast mode [ 335.519479][T13278] bridge_slave_1: left promiscuous mode [ 335.530805][T13278] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.554219][T13278] bond0: (slave bond_slave_0): Releasing backup interface [ 335.570568][T13278] bond_slave_0: left promiscuous mode [ 335.577891][T13278] bond_slave_0: left allmulticast mode [ 335.597571][T13278] bond0: (slave bond_slave_1): Releasing backup interface [ 335.606153][T13278] bond_slave_1: left promiscuous mode [ 335.611893][T13278] bond_slave_1: left allmulticast mode [ 335.626121][T13278] team_slave_0: left promiscuous mode [ 335.632017][T13278] team_slave_0: left allmulticast mode [ 335.658283][T13278] team0: Port device team_slave_0 removed [ 335.666002][T13278] team_slave_1: left promiscuous mode [ 335.673354][T13278] team_slave_1: left allmulticast mode [ 335.688853][T13278] team0: Port device team_slave_1 removed [ 335.696623][T13278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.705504][T13278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.715633][T13278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.723776][T13278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.737815][T13278] bond0: (slave macvlan0): Releasing backup interface [ 335.748767][T13278] veth1_vlan: left allmulticast mode [ 335.981846][T13283] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3324'. [ 336.464268][ T28] audit: type=1400 audit(1757446895.170:80): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=13296 comm="syz.3.3331" [ 336.662279][T13301] syz.3.3333 (13301): drop_caches: 0 [ 336.759847][T13307] netlink: 'syz.4.3336': attribute type 2 has an invalid length. [ 337.019731][T13316] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3340'. [ 337.280060][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 337.300477][T13328] (null): rxe_set_mtu: Set mtu to 1024 [ 337.307019][T13328] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 337.423958][T13333] loop1: detected capacity change from 0 to 16 [ 337.443491][T13333] erofs: (device loop1): mounted with root inode @ nid 36. [ 337.500482][T13333] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 338.304581][T13365] program syz.4.3359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.745491][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3369'. [ 339.399770][T13401] xt_hashlimit: invalid rate [ 339.476700][T13399] loop4: detected capacity change from 0 to 8192 [ 339.499310][T13399] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.635487][T13399] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 339.651698][T13399] FAT-fs (loop4): Filesystem has been set read-only [ 340.206244][T13419] bond0: (slave bridge0): Releasing backup interface [ 340.231799][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.239217][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.248605][T13424] loop1: detected capacity change from 0 to 1024 [ 340.292695][T13419] bridge_slave_0: left allmulticast mode [ 340.298519][T13419] bridge_slave_0: left promiscuous mode [ 340.311172][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.328316][T13419] bridge_slave_1: left allmulticast mode [ 340.344957][T13419] bridge_slave_1: left promiscuous mode [ 340.350829][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.384350][T13419] bond0: (slave bond_slave_0): Releasing backup interface [ 340.408818][T13419] bond0: (slave bond_slave_1): Releasing backup interface [ 340.509894][T13419] team0: Port device team_slave_0 removed [ 340.556448][T13419] team0: Port device team_slave_1 removed [ 340.572393][T13419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.582087][T13419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.603300][T13419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.610881][T13419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.745550][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 343.025179][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3435'. [ 343.182158][T13519] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 343.498096][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3440'. [ 343.531586][T13525] netlink: 'syz.3.3440': attribute type 2 has an invalid length. [ 343.740524][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3442'. [ 343.789642][T13514] loop4: detected capacity change from 0 to 32768 [ 344.016890][T13536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.421508][T13547] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 344.440911][T13547] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.126929][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3460'. [ 345.208399][T13570] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3462'. [ 346.212414][T13606] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 346.251456][T13606] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.466058][T13608] loop4: detected capacity change from 0 to 4096 [ 346.597493][T13608] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 346.697084][T13608] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 346.860193][T13626] netlink: 'syz.0.3490': attribute type 3 has an invalid length. [ 347.111671][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 347.301742][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 347.314759][ T23] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 347.341397][ T23] usb 4-1: config 0 has no interface number 0 [ 347.363061][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 347.387478][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.403468][ T23] usb 4-1: Product: syz [ 347.407694][ T23] usb 4-1: Manufacturer: syz [ 347.427562][ T23] usb 4-1: SerialNumber: syz [ 347.436817][T13636] loop1: detected capacity change from 0 to 4096 [ 347.451019][ T23] usb 4-1: config 0 descriptor?? [ 347.474975][T13642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.494267][ T23] hub 4-1:0.132: bad descriptor, ignoring hub [ 347.511407][ T23] hub: probe of 4-1:0.132 failed with error -5 [ 347.520978][ T23] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input14 [ 348.302213][ T5871] usb 4-1: USB disconnect, device number 10 [ 348.793380][T13673] loop4: detected capacity change from 0 to 4096 [ 348.866082][T13673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.150899][ T6113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.394724][T13687] bridge0: port 3(team0) entered disabled state [ 349.424243][T13689] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3517'. [ 349.450046][T13687] bridge_slave_0: left allmulticast mode [ 349.495901][T13687] bridge_slave_0: left promiscuous mode [ 349.517120][T13687] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.528836][T13671] loop1: detected capacity change from 0 to 32768 [ 349.543770][T13671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3511 (13671) [ 349.560861][T13687] bridge_slave_1: left allmulticast mode [ 349.571531][T13687] bridge_slave_1: left promiscuous mode [ 349.587157][T13687] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.597061][T13671] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 349.615313][T13671] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 349.629337][T13687] bond0: (slave bond_slave_0): Releasing backup interface [ 349.638852][T13671] BTRFS info (device loop1): using free space tree [ 349.646987][T13687] bond_slave_0: left promiscuous mode [ 349.656892][T13687] bond_slave_0: left allmulticast mode [ 349.721199][T13687] bond0: (slave bond_slave_1): Releasing backup interface [ 349.736400][T13671] BTRFS info (device loop1): enabling ssd optimizations [ 349.751458][T13671] BTRFS info (device loop1): auto enabling async discard [ 349.784846][T13687] bond_slave_1: left promiscuous mode [ 349.811672][T13687] bond_slave_1: left allmulticast mode [ 349.860538][T13687] team_slave_0: left promiscuous mode [ 349.888737][T13687] team_slave_0: left allmulticast mode [ 349.992094][T13687] team0: Port device team_slave_0 removed [ 350.012943][T13687] team_slave_1: left promiscuous mode [ 350.042063][T13687] team_slave_1: left allmulticast mode [ 350.106837][T13687] team0: Port device team_slave_1 removed [ 350.115403][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 350.128299][T13687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.136638][T13687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.159894][T13687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.194167][T13687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.411812][ T23] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.657884][T13719] netlink: 'syz.4.3526': attribute type 3 has an invalid length. [ 350.980070][T13733] usb usb3: usbfs: process 13733 (syz.1.3533) did not claim interface 0 before use [ 351.211546][ T8] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 351.394492][ T5833] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.433755][ T8] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 351.444168][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.476580][ T8] usb 5-1: config 0 descriptor?? [ 351.524368][ T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 351.782034][T13756] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 351.796414][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 351.798992][T13756] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 351.974890][ T8] gp8psk: usb in 128 operation failed. [ 351.994684][ T8] gp8psk: usb in 137 operation failed. [ 352.000255][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 352.044704][ T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 352.081720][ T8] usb 5-1: USB disconnect, device number 13 [ 352.086668][T13762] loop1: detected capacity change from 0 to 1764 [ 352.157380][T13762] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 352.339805][T13771] netlink: 'syz.1.3552': attribute type 13 has an invalid length. [ 353.206982][T13801] netlink: 'syz.0.3565': attribute type 7 has an invalid length. [ 354.647027][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 354.664076][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 354.791916][ T5833] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 355.011894][ T5833] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 355.031552][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 355.092346][ T5833] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.104021][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.132302][ T5833] usb 5-1: Product: syz [ 355.136545][ T5833] usb 5-1: Manufacturer: syz [ 355.141198][ T5833] usb 5-1: SerialNumber: syz [ 355.189536][ T5833] usb 5-1: config 0 descriptor?? [ 355.199519][T13865] vlan0: entered promiscuous mode [ 355.227443][ T5833] usb 5-1: selecting invalid altsetting 0 [ 355.613729][ T5871] usb 5-1: USB disconnect, device number 14 [ 355.759173][ T28] audit: type=1326 audit(1757446914.460:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47978ebe9 code=0x7ffc0000 [ 355.819407][ T28] audit: type=1326 audit(1757446914.460:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47978ebe9 code=0x7ffc0000 [ 355.949842][ T28] audit: type=1326 audit(1757446914.460:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd47978ebe9 code=0x7ffc0000 [ 356.019141][ T28] audit: type=1326 audit(1757446914.460:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47978ebe9 code=0x7ffc0000 [ 356.064314][ T28] audit: type=1326 audit(1757446914.460:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13881 comm="syz.0.3600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd47978ebe9 code=0x7ffc0000 [ 356.106799][T13891] overlay: Unknown parameter '\' [ 356.451611][ T28] audit: type=1400 audit(1757446915.150:86): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13901 comm="syz.4.3611" [ 357.522365][ T28] audit: type=1326 audit(1757446916.230:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 357.544670][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.609896][ T28] audit: type=1326 audit(1757446916.230:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 357.656322][ T28] audit: type=1326 audit(1757446916.280:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 357.770807][ T28] audit: type=1326 audit(1757446916.280:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13939 comm="syz.1.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 357.856009][T13950] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3634'. [ 358.355469][T13962] loop1: detected capacity change from 0 to 512 [ 358.457725][T13962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.535260][T13962] ext4 filesystem being mounted at /920/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.763778][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.809107][T14013] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3663'. [ 359.831408][ T5833] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 360.054590][ T5833] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 360.081563][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.089626][ T5833] usb 4-1: Product: syz [ 360.121498][ T5833] usb 4-1: Manufacturer: syz [ 360.126208][ T5833] usb 4-1: SerialNumber: syz [ 360.429394][ T5833] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 360.470703][ T5833] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 360.501901][ T5833] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 360.528059][ T5833] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 360.571038][ T5833] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 360.605574][ T5833] lan78xx: probe of 4-1:1.0 failed with error -71 [ 360.636204][ T5833] usb 4-1: USB disconnect, device number 11 [ 360.932931][ T55] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 361.121644][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 361.156115][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.218725][ T55] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 361.237901][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.268421][ T55] usb 2-1: Product: syz [ 361.282570][ T55] usb 2-1: Manufacturer: syz [ 361.287258][ T55] usb 2-1: SerialNumber: syz [ 361.293487][T14058] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 361.333024][T14058] overlayfs: missing 'lowerdir' [ 361.339147][ T55] usb 2-1: config 0 descriptor?? [ 361.363983][ T55] cdc_ether: probe of 2-1:0.0 failed with error -22 [ 361.371082][ T55] usb 2-1: unsupported MDLM descriptors [ 361.652294][ T5833] usb 2-1: USB disconnect, device number 14 [ 361.752562][T14073] loop4: detected capacity change from 0 to 256 [ 361.851596][T14075] netlink: 'syz.3.3695': attribute type 21 has an invalid length. [ 361.880660][T14075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3695'. [ 363.382404][T14120] loop4: detected capacity change from 0 to 1024 [ 363.390585][T14123] capability: warning: `syz.1.3718' uses 32-bit capabilities (legacy support in use) [ 363.400400][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.652397][ T3928] hfsplus: b-tree write err: -5, ino 4 [ 364.387927][T14151] loop4: detected capacity change from 0 to 4096 [ 364.448168][T14151] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 364.552501][T14151] ntfs3: loop4: Failed to initialize $Secure (-22). [ 364.613979][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 365.175732][T14181] ipt_ECN: cannot use operation on non-tcp rule [ 365.329385][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3750'. [ 366.265979][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 367.150424][T14248] loop4: detected capacity change from 0 to 4096 [ 367.193021][T14248] __ntfs_warning: 1 callbacks suppressed [ 367.193043][T14248] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 367.277533][T14248] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 367.312008][T14248] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 367.359884][T14248] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 367.431685][T14248] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 367.488510][T14248] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 367.517218][T14248] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 367.611556][T14248] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 367.621223][T14248] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 367.682901][T14248] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 367.743480][T14248] ntfs: volume version 3.1. [ 369.299236][T14315] loop1: detected capacity change from 0 to 4096 [ 369.328761][T14315] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 369.379553][T14320] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 369.421913][T14320] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 369.457290][T14315] ntfs3: loop1: Failed to load $Extend (-22). [ 369.473919][T14315] ntfs3: loop1: Failed to initialize $Extend. [ 369.861503][T14328] delete_channel: no stack [ 370.271245][T14334] loop1: detected capacity change from 0 to 4096 [ 370.431626][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 370.451682][T14346] netlink: 'syz.4.3823': attribute type 2 has an invalid length. [ 370.936732][T14360] loop4: detected capacity change from 0 to 512 [ 370.990473][T14360] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3830: bad orphan inode 15 [ 371.007055][T14360] ext4_test_bit(bit=14, block=5) = 0 [ 371.015676][T14360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.047478][T14360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 371.075234][T14360] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.3830: bit already cleared for inode 13 [ 371.210353][ T6113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.343678][T14374] netlink: 'syz.4.3835': attribute type 9 has an invalid length. [ 371.367240][T14374] netlink: 911 bytes leftover after parsing attributes in process `syz.4.3835'. [ 372.407955][T14414] loop1: detected capacity change from 0 to 8 [ 372.723976][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 373.059943][T14433] netlink: 'syz.1.3860': attribute type 1 has an invalid length. [ 373.081545][T14433] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3860'. [ 373.262144][T14439] netlink: 'syz.4.3863': attribute type 5 has an invalid length. [ 373.561002][T14453] program syz.0.3870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.975861][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3876'. [ 374.535001][T14488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3884'. [ 374.562063][T14488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3884'. [ 374.703967][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 374.703984][ T28] audit: type=1326 audit(1757446933.410:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.3.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24518ebe9 code=0x7ffc0000 [ 374.783623][ T28] audit: type=1326 audit(1757446933.450:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.3.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24518ebe9 code=0x7ffc0000 [ 374.811390][T14497] Unsupported ieee802154 address type: 0 [ 374.836858][T14491] loop4: detected capacity change from 0 to 4096 [ 374.860297][ T28] audit: type=1326 audit(1757446933.450:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.3.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc24518ebe9 code=0x7ffc0000 [ 374.890575][T14491] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 374.938968][ T28] audit: type=1326 audit(1757446933.450:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.3.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24518ebe9 code=0x7ffc0000 [ 374.999421][ T28] audit: type=1326 audit(1757446933.450:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.3.3889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24518ebe9 code=0x7ffc0000 [ 375.111467][ T28] audit: type=1326 audit(1757446933.770:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 375.211426][ T28] audit: type=1326 audit(1757446933.770:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 375.281712][ T28] audit: type=1326 audit(1757446933.810:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 375.352148][ T28] audit: type=1326 audit(1757446933.810:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14502 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b9d8ebe9 code=0x7ffc0000 [ 375.601094][T14514] loop4: detected capacity change from 0 to 4096 [ 375.715810][T14514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.811911][ T6113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.962443][T14527] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 33756 - 0 [ 375.991446][T14527] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33756 - 0 [ 376.051404][T14527] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33756 - 0 [ 376.060284][T14527] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33756 - 0 [ 376.124281][T14527] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 36072 - 0 [ 376.179386][T14527] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 36072 - 0 [ 376.216691][T14527] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 36072 - 0 [ 376.227789][T14527] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 36072 - 0 [ 376.244508][T14527] geneve2: entered promiscuous mode [ 376.250631][T14527] geneve2: entered allmulticast mode [ 376.371563][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 376.491171][ T28] audit: type=1400 audit(1757446935.180:102): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=14541 comm="syz.0.3911" [ 376.615641][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 376.639024][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 376.669505][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 376.697003][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 376.724636][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 376.741342][ T9] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 376.761471][ T9] usb 5-1: Manufacturer: syz [ 376.780810][ T9] usb 5-1: config 0 descriptor?? [ 376.797352][T14531] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 376.808698][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 376.843755][ T9] smsusb:siano_media_device_register: media controller created [ 376.884752][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.892157][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.899511][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.906855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.914196][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.923057][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.930560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.937874][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.945190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.952496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.960427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.967744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.975056][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.982329][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.989575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 376.997640][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.004965][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.012277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.019588][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.026914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.034604][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.041944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.049427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.056738][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.064054][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.081930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.089288][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.096621][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.103960][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.111230][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.119550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.126892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.134213][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.141522][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.148838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.156914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.164228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.171532][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.178850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.187166][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.194555][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.201916][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.209288][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.216660][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.224352][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.231710][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.239044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.246337][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.254232][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.261560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.270598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.277938][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.285250][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.292879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.300231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.307541][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.314849][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.322170][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.329466][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.336791][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.344115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.354249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.361606][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.368933][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.376256][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.385219][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.392567][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.399892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.407219][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.414536][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.421856][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.429186][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.436511][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.444190][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.451541][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.458857][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.466160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.473457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.481630][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.488958][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.496284][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.503602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.510896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.518214][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.525527][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.533007][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.540771][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.548112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.555422][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.562695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.569951][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.577578][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 377.586744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.586855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.586951][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.587045][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.587131][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.587224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.587322][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.587409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.587501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.654267][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.661603][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.668914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.676192][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.683459][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.690714][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.697978][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.705473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.712796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.720519][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.727873][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.735219][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.742540][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.749879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.757193][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.764523][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.772470][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.780271][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.787614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.794928][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.802237][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.809542][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.816852][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.824173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.831925][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.839237][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.846538][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.853929][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.861232][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.868524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.875830][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.883138][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.891084][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.898427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.905733][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.913030][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.920320][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.927641][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.934954][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.942289][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.950127][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.957473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.964788][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.972105][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.979374][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.986626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 377.993872][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.001118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.009313][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.016659][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.023963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.031265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.038607][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.045926][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.053281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.060610][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.068313][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 378.076340][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.076457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.076556][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.076653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.076748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.076842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.076936][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.077032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.135966][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.143368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.150695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.158017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.165442][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.172763][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.180085][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.187399][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.195652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.202977][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.210281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.217593][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.224851][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.232106][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.239358][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.246603][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.254226][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.261559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.268867][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.276176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.283657][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.291744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.299086][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.306409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.313777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.321088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.328395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.335971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.343405][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.350738][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.358601][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.365957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.373305][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.380687][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.388010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.395427][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.402845][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.410187][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.418229][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.425975][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.433307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.440706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.448024][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.455339][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.462660][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.469994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.477329][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.484644][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.492641][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.499978][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.507667][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.515176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.522496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.529802][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.537124][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.544469][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.551786][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.559106][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.566764][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.574088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.581560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.588892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.597009][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.604363][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.611669][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.618982][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.626309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.633629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.640968][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.648551][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.655892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.663642][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.671022][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.678366][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.685636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.692931][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.700218][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.707528][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.714810][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.722690][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.730012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.737407][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.744716][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.752018][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.759307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.766614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.773913][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.781215][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.791018][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.798439][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.805755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.813083][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.820392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.827699][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.835450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.842774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.846719][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.850066][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.862435][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.864034][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.877242][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.884559][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.891852][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.899147][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.907447][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 378.916160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916502][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916679][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916873][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.916964][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.983085][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.990413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 378.997728][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.005118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.012609][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.020037][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.027357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.034667][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.042957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.050380][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.057689][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.065094][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.072400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.079709][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.087017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.094325][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.102574][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.109911][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.117217][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.124522][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.131835][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.139142][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.146454][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.153762][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.161592][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.168879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.176137][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.183405][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.190652][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.197904][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.205152][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.213211][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.220536][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.227848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.235160][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.242475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.249799][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.257203][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.264794][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.272113][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.279700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.287046][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.294363][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.301679][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.309000][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.316308][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.323612][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.331671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.339091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.346424][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.353728][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.361049][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.368815][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.376150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.380576][T14581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'. [ 379.383428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.383502][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.407079][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.414418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.422436][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.429759][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.437445][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.444779][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.452088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.459409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.466731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.474046][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.481357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.488760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.496376][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.503690][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.510995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.519006][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.526330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.533644][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.541017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.548295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.555838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.563165][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.570483][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.578041][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.585358][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.592671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.599976][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.607295][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.614802][T14583] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3930'. [ 379.615315][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.631241][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.638551][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.645855][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.653115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.660365][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.667614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.674906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.682728][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.690052][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.697369][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.704693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.712021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.719357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.726692][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.734019][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.742152][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.749486][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.756784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.764111][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.771793][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.779121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.786450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.793776][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.801700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.809728][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.817142][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.824471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.831684][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3931'. [ 379.831848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.840736][T14585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3931'. [ 379.848227][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.864500][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.871831][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.879619][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.886952][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.894278][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.901598][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.908922][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.916585][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.923910][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.931306][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.939342][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.946966][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.954393][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.961726][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.969047][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.975067][T14585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3931'. [ 379.976371][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 379.992856][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.000216][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.007650][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.015766][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.023095][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.030403][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.037697][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.045013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.052263][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.059504][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.066748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.074082][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.081894][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.089231][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.096550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.103879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.111197][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.118688][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.126006][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.133404][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.140701][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.148969][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.156287][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.163594][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.170902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.178206][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.185513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.192817][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.200115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.207835][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.215163][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.222469][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.229783][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.237121][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.244441][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.251746][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.259064][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.267062][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.274432][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.281759][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.289070][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.296384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.303691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.311008][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.318324][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.326460][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.333789][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.341093][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.348773][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.356091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.363400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.370706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.378026][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.385468][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.392784][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.400087][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.407819][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.415197][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.422541][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.429902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.437260][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.444550][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.451831][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.459112][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.467145][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.474465][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.481780][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.489591][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.496932][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.504250][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.511552][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.518879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.526210][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.533571][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.541000][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 380.550015][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.557354][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.564676][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.572004][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.581653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.589048][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.596357][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.603665][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.610981][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.618387][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.626502][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 380.633850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.641181][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.648501][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.655831][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.663537][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.670872][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.678583][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 380.685844][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 380.704202][ T9] smsusb:smsusb_probe: Device initialized with return code -22 [ 380.837846][ T9] smsusb: probe of 5-1:0.0 failed with error -22 [ 380.891158][ T9] usb 5-1: USB disconnect, device number 15 [ 381.202436][T14608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3939'. [ 383.607705][T14692] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 383.924344][T14704] overlayfs: maximum fs stacking depth exceeded [ 384.148225][T14716] loop1: detected capacity change from 0 to 1024 [ 384.527814][T14728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3982'. [ 384.715998][T14732] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3984'. [ 384.769456][T14732] gretap0: left allmulticast mode [ 384.939492][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 385.425073][T14746] loop1: detected capacity change from 0 to 8192 [ 386.190963][T14778] loop4: detected capacity change from 0 to 2048 [ 386.228070][T14778] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.343541][T14778] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 901 [ 386.610479][T14786] nbd: must specify at least one socket [ 386.645746][T14774] loop1: detected capacity change from 0 to 32768 [ 386.735078][T14774] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.926130][T14774] XFS (loop1): Ending clean mount [ 387.135867][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.554587][T14816] loop4: detected capacity change from 0 to 512 [ 387.622166][T14816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.657985][T14816] ext4 filesystem being mounted at /935/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.827377][ T6113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.911675][ T5871] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 388.111816][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 388.122016][ T5871] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 388.134420][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.142710][ T5871] usb 4-1: Product: syz [ 388.148079][ T5871] usb 4-1: Manufacturer: syz [ 388.155530][ T5871] usb 4-1: SerialNumber: syz [ 388.171028][ T5871] r8152-cfgselector 4-1: config 0 descriptor?? [ 388.177537][T14833] IPVS: persistence engine module ip_vs_pe_s not found [ 388.375308][T14842] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4030'. [ 388.631570][ T5871] r8152-cfgselector 4-1: Unknown version 0x0000 [ 388.655164][ T5871] r8152-cfgselector 4-1: USB disconnect, device number 12 [ 388.689696][T14848] overlayfs: maximum fs stacking depth exceeded [ 388.837873][T14850] loop4: detected capacity change from 0 to 1024 [ 388.863938][T14844] loop1: detected capacity change from 0 to 32768 [ 388.884252][T14844] [ 388.884252][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 388.884252][T14844] [ 388.887666][T14850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.911665][T14850] ext4 filesystem being mounted at /942/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.004627][T14844] [ 389.004627][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.004627][T14844] [ 389.076257][T14844] [ 389.076257][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.076257][T14844] [ 389.093594][T14844] [ 389.093594][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.093594][T14844] [ 389.160982][T14844] [ 389.160982][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.160982][T14844] [ 389.231553][T14844] [ 389.231553][T14844] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.231553][T14844] [ 389.273069][ T6113] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.353155][ T112] [ 389.353155][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.353155][ T112] [ 389.501019][ T48] [ 389.501019][ T48] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.501019][ T48] [ 389.530068][ T48] [ 389.530068][ T48] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.530068][ T48] [ 389.570376][ T5783] [ 389.570376][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.570376][ T5783] [ 389.586736][ T112] [ 389.586736][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.586736][ T112] [ 389.598352][ T5783] [ 389.598352][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 389.598352][ T5783] [ 389.651433][ T112] ================================================================== [ 389.659578][ T112] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x520 [ 389.666485][ T112] Write of size 8 at addr ffff888025e3d040 by task jfsCommit/112 [ 389.674261][ T112] [ 389.676653][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 389.683874][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.693973][ T112] Call Trace: [ 389.697284][ T112] [ 389.700245][ T112] dump_stack_lvl+0x16c/0x230 [ 389.704968][ T112] ? __lock_acquire+0x7c80/0x7c80 [ 389.710028][ T112] ? show_regs_print_info+0x20/0x20 [ 389.715269][ T112] ? load_image+0x3b0/0x3b0 [ 389.719808][ T112] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 389.725231][ T112] ? __virt_addr_valid+0x18c/0x540 [ 389.730565][ T112] ? __virt_addr_valid+0x469/0x540 [ 389.735730][ T112] print_report+0xac/0x220 [ 389.740189][ T112] ? txEnd+0x32d/0x520 [ 389.744287][ T112] kasan_report+0x117/0x150 [ 389.748820][ T112] ? txEnd+0x32d/0x520 [ 389.752921][ T112] kasan_check_range+0x288/0x290 [ 389.757889][ T112] txEnd+0x32d/0x520 [ 389.761831][ T112] jfs_lazycommit+0x5a6/0xa60 [ 389.766549][ T112] ? txFreelock+0x5a0/0x5a0 [ 389.771090][ T112] ? do_task_dead+0xd0/0xd0 [ 389.775615][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 389.780607][ T112] kthread+0x2fa/0x390 [ 389.784695][ T112] ? txFreelock+0x5a0/0x5a0 [ 389.789217][ T112] ? kthread_blkcg+0xd0/0xd0 [ 389.793828][ T112] ret_from_fork+0x48/0x80 [ 389.798276][ T112] ? kthread_blkcg+0xd0/0xd0 [ 389.802889][ T112] ret_from_fork_asm+0x11/0x20 [ 389.807709][ T112] [ 389.810746][ T112] [ 389.813104][ T112] Allocated by task 14844: [ 389.817540][ T112] kasan_set_track+0x4e/0x70 [ 389.822164][ T112] __kasan_kmalloc+0x8f/0xa0 [ 389.826778][ T112] lmLogOpen+0x2df/0xfb0 [ 389.831124][ T112] jfs_mount_rw+0xea/0x670 [ 389.835738][ T112] jfs_fill_super+0x592/0xac0 [ 389.840433][ T112] mount_bdev+0x22b/0x2d0 [ 389.844785][ T112] legacy_get_tree+0xea/0x180 [ 389.849657][ T112] vfs_get_tree+0x8c/0x280 [ 389.854096][ T112] do_new_mount+0x24b/0xa40 [ 389.858631][ T112] __se_sys_mount+0x2da/0x3c0 [ 389.863329][ T112] do_syscall_64+0x55/0xb0 [ 389.867772][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.873696][ T112] [ 389.876033][ T112] Freed by task 5783: [ 389.880029][ T112] kasan_set_track+0x4e/0x70 [ 389.884648][ T112] kasan_save_free_info+0x2e/0x50 [ 389.889698][ T112] ____kasan_slab_free+0x126/0x1e0 [ 389.894837][ T112] slab_free_freelist_hook+0x130/0x1b0 [ 389.900337][ T112] __kmem_cache_free+0xba/0x1f0 [ 389.905240][ T112] lmLogClose+0x297/0x520 [ 389.909596][ T112] jfs_umount+0x2ef/0x3c0 [ 389.913955][ T112] jfs_put_super+0x8c/0x190 [ 389.918484][ T112] generic_shutdown_super+0x134/0x2b0 [ 389.923902][ T112] kill_block_super+0x44/0x90 [ 389.928608][ T112] deactivate_locked_super+0x97/0x100 [ 389.934023][ T112] cleanup_mnt+0x429/0x4c0 [ 389.938472][ T112] task_work_run+0x1ce/0x250 [ 389.943104][ T112] exit_to_user_mode_loop+0xe6/0x110 [ 389.948427][ T112] exit_to_user_mode_prepare+0xb1/0x140 [ 389.954008][ T112] syscall_exit_to_user_mode+0x1a/0x50 [ 389.959495][ T112] do_syscall_64+0x61/0xb0 [ 389.963936][ T112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.969864][ T112] [ 389.972206][ T112] The buggy address belongs to the object at ffff888025e3d000 [ 389.972206][ T112] which belongs to the cache kmalloc-1k of size 1024 [ 389.986301][ T112] The buggy address is located 64 bytes inside of [ 389.986301][ T112] freed 1024-byte region [ffff888025e3d000, ffff888025e3d400) [ 390.000134][ T112] [ 390.002483][ T112] The buggy address belongs to the physical page: [ 390.008924][ T112] page:ffffea0000978e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25e38 [ 390.019104][ T112] head:ffffea0000978e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 390.028067][ T112] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 390.036519][ T112] page_type: 0xffffffff() [ 390.040873][ T112] raw: 00fff00000000840 ffff888017841dc0 0000000000000000 dead000000000001 [ 390.049480][ T112] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 390.058075][ T112] page dumped because: kasan: bad access detected [ 390.064511][ T112] page_owner tracks the page as allocated [ 390.070242][ T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11, tgid 11 (kworker/u4:0), ts 86125407441, free_ts 86083912654 [ 390.090610][ T112] post_alloc_hook+0x1cd/0x210 [ 390.095420][ T112] get_page_from_freelist+0x195c/0x19f0 [ 390.101020][ T112] __alloc_pages+0x1e3/0x460 [ 390.105652][ T112] alloc_slab_page+0x5d/0x170 [ 390.110358][ T112] new_slab+0x87/0x2e0 [ 390.114459][ T112] ___slab_alloc+0xc6d/0x1300 [ 390.119174][ T112] __kmem_cache_alloc_node+0x1a2/0x260 [ 390.124674][ T112] __kmalloc+0xa4/0x240 [ 390.125004][ T28] audit: type=1326 audit(1757446948.820:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557318ebe9 code=0x7ffc0000 [ 390.128840][ T112] ieee802_11_parse_elems_full+0xb9/0x2080 [ 390.156959][ T112] ieee80211_ibss_rx_queued_mgmt+0x49b/0x2ac0 [ 390.163064][ T112] ieee80211_iface_work+0x717/0xc70 [ 390.168303][ T112] cfg80211_wiphy_work+0x225/0x260 [ 390.173447][ T112] process_scheduled_works+0xa45/0x15b0 [ 390.179022][ T112] worker_thread+0xa55/0xfc0 [ 390.183650][ T112] kthread+0x2fa/0x390 [ 390.187731][ T112] ret_from_fork+0x48/0x80 [ 390.192164][ T112] page last free stack trace: [ 390.196842][ T112] free_unref_page_prepare+0x7ce/0x8e0 [ 390.202323][ T112] free_unref_page+0x32/0x2e0 [ 390.207027][ T112] __unfreeze_partials+0x1cf/0x210 [ 390.212177][ T112] put_cpu_partial+0x17c/0x250 [ 390.213512][ T28] audit: type=1326 audit(1757446948.820:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557318ebe9 code=0x7ffc0000 [ 390.216963][ T112] __slab_free+0x31d/0x410 [ 390.243790][ T112] qlist_free_all+0x75/0xe0 [ 390.248321][ T112] kasan_quarantine_reduce+0x143/0x160 [ 390.253826][ T112] __kasan_slab_alloc+0x22/0x80 [ 390.258703][ T112] slab_post_alloc_hook+0x6e/0x4d0 [ 390.263844][ T112] kmem_cache_alloc_lru+0x115/0x2e0 [ 390.269074][ T112] shmem_alloc_inode+0x28/0x40 [ 390.273863][ T112] new_inode_pseudo+0x63/0x1d0 [ 390.278672][ T112] new_inode+0x22/0x1b0 [ 390.282852][ T112] shmem_get_inode+0x34f/0xcc0 [ 390.287724][ T112] shmem_mknod+0x60/0x1d0 [ 390.292076][ T112] path_openat+0x1277/0x3190 [ 390.296696][ T112] [ 390.299026][ T112] Memory state around the buggy address: [ 390.304668][ T112] ffff888025e3cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 390.312753][ T112] ffff888025e3cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 390.320833][ T112] >ffff888025e3d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.328933][ T112] ^ [ 390.335109][ T112] ffff888025e3d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.337599][ T28] audit: type=1326 audit(1757446948.820:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f557318ebe9 code=0x7ffc0000 [ 390.343183][ T112] ffff888025e3d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 390.343196][ T112] ================================================================== [ 390.418496][ T28] audit: type=1326 audit(1757446948.820:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557318ebe9 code=0x7ffc0000 [ 390.441083][ T28] audit: type=1326 audit(1757446948.820:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14868 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557318ebe9 code=0x7ffc0000 [ 390.484380][ T112] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 390.491652][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 [ 390.498874][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.508934][ T112] Call Trace: [ 390.512220][ T112] [ 390.515157][ T112] dump_stack_lvl+0x16c/0x230 [ 390.519855][ T112] ? show_regs_print_info+0x20/0x20 [ 390.525069][ T112] ? load_image+0x3b0/0x3b0 [ 390.529589][ T112] panic+0x2c0/0x710 [ 390.533511][ T112] ? bpf_jit_dump+0xd0/0xd0 [ 390.538028][ T112] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 390.543939][ T112] ? _raw_spin_unlock+0x40/0x40 [ 390.548791][ T112] ? print_memory_metadata+0x314/0x400 [ 390.554264][ T112] ? txEnd+0x32d/0x520 [ 390.558339][ T112] check_panic_on_warn+0x84/0xa0 [ 390.563288][ T112] ? txEnd+0x32d/0x520 [ 390.567364][ T112] end_report+0x6f/0x140 [ 390.571611][ T112] kasan_report+0x128/0x150 [ 390.576121][ T112] ? txEnd+0x32d/0x520 [ 390.580197][ T112] kasan_check_range+0x288/0x290 [ 390.585147][ T112] txEnd+0x32d/0x520 [ 390.589045][ T112] jfs_lazycommit+0x5a6/0xa60 [ 390.593815][ T112] ? txFreelock+0x5a0/0x5a0 [ 390.598322][ T112] ? do_task_dead+0xd0/0xd0 [ 390.602831][ T112] ? __kthread_parkme+0x7a/0x1c0 [ 390.607782][ T112] kthread+0x2fa/0x390 [ 390.611871][ T112] ? txFreelock+0x5a0/0x5a0 [ 390.616392][ T112] ? kthread_blkcg+0xd0/0xd0 [ 390.621002][ T112] ret_from_fork+0x48/0x80 [ 390.625437][ T112] ? kthread_blkcg+0xd0/0xd0 [ 390.630038][ T112] ret_from_fork_asm+0x11/0x20 [ 390.634823][ T112] [ 390.638198][ T112] Kernel Offset: disabled [ 390.642536][ T112] Rebooting in 86400 seconds..