last executing test programs: 4.906572709s ago: executing program 0 (id=4973): r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={'\x00', 0x0, 0x0, {0x7f, 0x3}, {0x4, 0x4}, 0xffff, [0x3, 0x4, 0x5dd, 0x80000000, 0x3c71f029, 0xa, 0x4, 0x75d, 0x4, 0x7ff, 0x5, 0xfffffffffffffffa, 0x401, 0x6, 0x3, 0x8]}) 4.094120531s ago: executing program 2 (id=4984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x940c, 0x3002, 0x220, 0x2c0, 0x330, 0x3d8, 0x3d8, 0x330, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xff000000, 0xffffff00], 'wg2\x00', 'ip_vti0\x00', {}, {0xff}, 0x87, 0x2, 0x2, 0x2c}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x538f, 0xff, 0x1, 0x1, 'syz1\x00', 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x22, 0x9, 0x0, 0x9, 0x1, 0x3, 0x6, 0x0, 0x20}, {0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0x0, 0xff, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], 'veth1_vlan\x00', 'macvtap0\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 3.866986133s ago: executing program 2 (id=4986): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.675280433s ago: executing program 2 (id=4989): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 3.332447117s ago: executing program 0 (id=4993): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r0) 2.980660982s ago: executing program 0 (id=4997): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) 2.733858277s ago: executing program 3 (id=5001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000000c0)={0x2c, 0x1d, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0xf3}, @generic={0xff, 0x9b, "1b772d81b1ddbd6aa329a30dc86be3ffce1f0aa74dee85cc79cde66606a9b687fdcde1a3ce16015e844b50b65cb2cfb0259f8ccfb7272a67fb47e43f2e0c0d6b00b6c1393fe017c051b4d75538d34c6ccbf227e3ed0cd8b2873c1a82693ed1815631fe9dec145ae79fde7d23748d19733f61fc3ddea9542e8809bec3e3dea08d915745b92b4a1f70da74f1610f260c248d8d0ed6bcb6886e4eefce"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x9, 0x83, [0x9, 0xfffffffffffffff7, 0xfffffffffffffc01, 0x8000000000000000, 0x4, 0x80000001, 0x5]}}]}, 0xf0) 2.584388122s ago: executing program 3 (id=5003): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 2.346886406s ago: executing program 1 (id=5004): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind(r0, &(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}, 0x80) 1.993964901s ago: executing program 0 (id=5005): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f000001fa40)=0xfffffffe) 1.986647652s ago: executing program 3 (id=5006): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000180)={[{@file_umask={'file_umask', 0x3d, 0x80004}}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@codepage={'codepage', 0x3d, 'cp869'}}, {}, {}]}, 0x1, 0x2fe, &(0x7f0000001100)="$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") open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.729102208s ago: executing program 1 (id=5007): iopl(0x3) io_cancel(0x0, 0x0, 0x0) 1.59703141s ago: executing program 0 (id=5008): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff, 0x1000) 1.409403059s ago: executing program 1 (id=5009): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f0000000140)="ba") 1.224813108s ago: executing program 3 (id=5010): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 1.10462818s ago: executing program 2 (id=5011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x0) 984.540052ms ago: executing program 1 (id=5012): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) 661.076404ms ago: executing program 2 (id=5013): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x8, 0x200) 547.916066ms ago: executing program 3 (id=5014): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007840)=[{&(0x7f0000002900)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000002940)="c6942a", 0x3}], 0x1, &(0x7f0000004a80)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x8ef, 0x1, 0x0, 0xfeb9}}], 0x30, 0x8002}], 0x1, 0x4081) 544.566366ms ago: executing program 1 (id=5015): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a8001600a400014003000000036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 236.752677ms ago: executing program 0 (id=5016): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xc, @vbi={0x38305543, 0x0, 0x9, 0x0, [], [0x1, 0x8000]}}) 236.119317ms ago: executing program 2 (id=5017): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRESHEX], 0x2, 0xa13, &(0x7f0000002180)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 124.529158ms ago: executing program 3 (id=5018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141683089f034d2f87e5440c04ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 0s ago: executing program 1 (id=5019): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) kernel console output (not intermixed with test programs): s = 2 limit=2048 [ 465.769981][T14565] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 465.812704][T14565] Remounting filesystem read-only [ 465.833290][T14565] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 465.846812][T14565] NILFS (loop0): error -5 truncating bmap (ino=16) [ 465.958373][ T5781] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 465.976142][ T5781] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 465.992327][ T5781] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 466.011825][ T5781] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 466.034473][ T5781] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 466.059674][ T5781] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 466.197714][T14590] loop0: detected capacity change from 0 to 256 [ 466.407377][T14594] loop2: detected capacity change from 0 to 256 [ 466.427338][T14594] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 466.676998][T14576] loop3: detected capacity change from 0 to 32768 [ 466.765388][ T788] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 466.791778][T14606] loop2: detected capacity change from 0 to 256 [ 466.885359][T14608] loop0: detected capacity change from 0 to 22 [ 466.903077][T14608] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 466.927920][T14608] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 466.980916][ T788] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.017362][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.047858][T14611] netlink: 'syz.2.3792': attribute type 32 has an invalid length. [ 467.050851][ T788] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.091788][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 467.112756][ T788] usb 2-1: SerialNumber: syz [ 467.277856][T14614] loop2: detected capacity change from 0 to 64 [ 467.358844][ T788] usb 2-1: 0:2 : does not exist [ 467.409399][ T788] usb 2-1: USB disconnect, device number 84 [ 467.494131][T14620] genirq: Flags mismatch irq 9. 00000000 (dt2814) vs. 00000080 (acpi) [ 467.497467][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.425675][T14661] xt_CONNSECMARK: invalid mode: 0 [ 468.998272][T14689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3831'. [ 469.022193][T14689] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3831'. [ 469.032911][T14689] netlink: 'syz.2.3831': attribute type 5 has an invalid length. [ 469.041626][T14689] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3831'. [ 469.063530][ T9] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 469.185780][T14696] netlink: 'syz.0.3835': attribute type 49 has an invalid length. [ 469.255471][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 469.273494][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.297158][ T9] usb 2-1: config 0 descriptor?? [ 469.330057][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 469.342287][T14697] loop2: detected capacity change from 0 to 4096 [ 469.360604][T14697] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 469.365774][T14699] loop3: detected capacity change from 0 to 4096 [ 469.405553][T14699] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 469.469378][T14703] loop0: detected capacity change from 0 to 512 [ 469.479202][T14703] EXT4-fs: Ignoring removed i_version option [ 469.522425][T14703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 469.563264][T14699] ntfs: volume version 3.1. [ 469.587692][T14703] EXT4-fs (loop0): 1 truncate cleaned up [ 469.628669][T14703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.740920][ T9] gp8psk: usb in 137 operation failed. [ 469.762797][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 469.795917][T14703] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 1029 (only 1 groups) [ 469.807180][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 469.835977][ T9] usb 2-1: USB disconnect, device number 85 [ 469.915814][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.276481][T14721] x_tables: duplicate underflow at hook 4 [ 470.412787][T14725] loop3: detected capacity change from 0 to 1024 [ 470.419916][T14727] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 470.560817][ T3506] hfsplus: b-tree write err: -5, ino 4 [ 470.703616][T14736] usb usb8: check_ctrlrecip: process 14736 (syz.1.3854) requesting ep 01 but needs 81 [ 470.727160][T14736] usb usb8: usbfs: process 14736 (syz.1.3854) did not claim interface 0 before use [ 471.387824][T14770] Timeout policy `syz0' can only be used by L3 protocol number 34915 [ 471.618271][T14779] trusted_key: encrypted_key: master key parameter is missing [ 471.876280][T14789] loop0: detected capacity change from 0 to 8 [ 471.955131][T14789] overlayfs: failed to resolve 'fscontext=system_u': -2 [ 472.148938][T14799] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 472.255111][T14771] loop2: detected capacity change from 0 to 32768 [ 472.325162][T14771] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 472.389264][T14813] loop1: detected capacity change from 0 to 64 [ 472.398947][T14813] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 472.464574][T14817] mmap: syz.0.3890 (14817): VmData 37457920 exceed data ulimit 131072. Update limits or use boot option ignore_rlimit_data. [ 472.472354][T14771] XFS (loop2): Ending clean mount [ 472.515594][T14771] XFS (loop2): Quotacheck needed: Please wait. [ 472.624200][T14771] XFS (loop2): Quotacheck: Done. [ 472.703653][ T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 472.785175][ T5784] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 472.841081][T14827] netlink: 'syz.3.3896': attribute type 8 has an invalid length. [ 472.916482][ T9] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 472.933494][ T9] usb 2-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 472.969982][ T9] usb 2-1: config 0 has no interface number 0 [ 472.979074][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 472.997588][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.007283][ T9] usb 2-1: Product: syz [ 473.011891][ T9] usb 2-1: Manufacturer: syz [ 473.020521][ T9] usb 2-1: SerialNumber: syz [ 473.034746][ T9] usb 2-1: config 0 descriptor?? [ 473.233907][ T5852] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 473.263872][ T9] qmi_wwan: probe of 2-1:0.207 failed with error -22 [ 473.288664][ T9] usb 2-1: USB disconnect, device number 86 [ 473.415701][ T5852] usb 4-1: unable to get BOS descriptor or descriptor too short [ 473.428305][ T5852] usb 4-1: not running at top speed; connect to a high speed hub [ 473.441987][ T5852] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 473.451935][ T5852] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 473.463073][ T5852] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 473.473759][ T5852] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64 [ 473.487554][ T5852] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.497685][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.506917][ T5852] usb 4-1: Product: syz [ 473.511243][ T5852] usb 4-1: Manufacturer: syz [ 473.516309][ T5852] usb 4-1: SerialNumber: syz [ 473.619449][T14853] loop0: detected capacity change from 0 to 128 [ 473.642013][T14853] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.656283][T14853] ext4 filesystem being mounted at /994/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.706006][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.767055][ T5852] usb 4-1: 0:2 : does not exist [ 473.782356][T14857] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3910'. [ 473.843070][ T5852] usb 4-1: USB disconnect, device number 94 [ 473.910940][T14857] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3910'. [ 473.911076][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.088042][T14862] loop0: detected capacity change from 0 to 4096 [ 474.127233][T14862] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 474.258390][T14862] ntfs3: loop0: failed to convert "c46c" to cp936 [ 474.801070][T14886] loop3: detected capacity change from 0 to 8 [ 475.011752][T14894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3927'. [ 475.136177][T14898] loop3: detected capacity change from 0 to 1024 [ 475.217895][T14898] hfsplus: keylen 65060 too large [ 475.475296][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3935'. [ 476.027770][T14937] CIFS mount error: No usable UNC path provided in device string! [ 476.027770][T14937] [ 476.084462][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 476.098797][T14937] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 476.250075][T14943] loop2: detected capacity change from 0 to 4096 [ 476.288212][T14943] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 476.400287][T14953] loop1: detected capacity change from 0 to 512 [ 476.423622][T14943] ntfs3: loop2: failed to convert "c46c" to cp936 [ 476.552784][T14953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.567592][T14953] ext4 filesystem being mounted at /986/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.606242][T14953] EXT4-fs error (device loop1): ext4_xattr_block_get:600: inode #15: comm syz.1.3956: corrupted xattr block 13: invalid checksum [ 476.619158][T14960] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 476.658587][ T27] audit: type=1800 audit(2000000032.640:49): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3956" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 476.683580][T14960] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 476.691955][T14960] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 476.724759][T14962] loop0: detected capacity change from 0 to 2048 [ 476.745444][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.757686][T14962] loop0: p1 < > p3 [ 476.762642][T14960] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 476.776732][T14962] loop0: p3 size 134217728 extends beyond EOD, truncated [ 476.812052][T14960] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 476.828380][T14960] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 476.837781][T14960] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 476.877430][T14960] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 476.905665][T14960] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 476.936600][T14960] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 476.946533][ T5781] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 476.951288][ T5965] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 476.959034][ T6077] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 476.971551][ T5965] I/O error, dev loop0, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 476.981911][T14960] ALSA: mixer_oss: invalid OSS volume 'î[' [ 476.981926][T14960] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 476.981942][T14960] ALSA: mixer_oss: invalid OSS volume '·$ffff88805a86f000(4096) [ 509.806243][T16116] cramfs: Error -3 while decompressing! [ 509.823923][T16116] cramfs: ffffffff96fe12f8(16)->ffff88805a86f000(4096) [ 509.831018][ T27] audit: type=1800 audit(2000000065.810:56): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4509" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 510.193298][T16124] loop2: detected capacity change from 0 to 4096 [ 510.223300][T16124] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 510.227310][T16133] loop3: detected capacity change from 0 to 1024 [ 510.271957][T16133] EXT4-fs: Ignoring removed orlov option [ 510.295846][T16130] loop0: detected capacity change from 0 to 4096 [ 510.331463][T16130] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 510.343264][T16124] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 510.384728][T16133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.509704][T16130] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 510.537823][T16130] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 510.601562][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.636748][T16130] ntfs3: loop0: ino=5, "/" directory corrupted [ 510.770030][ T1032] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 510.793717][ T5781] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 510.800294][ T5781] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 510.854145][ T5781] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 510.860904][ T42] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 510.884831][T16147] loop3: detected capacity change from 0 to 512 [ 510.946158][T16147] EXT4-fs (loop3): 1 truncate cleaned up [ 510.957804][T16147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.047282][T16152] syz.1.4526 (16152): drop_caches: 2 [ 511.166141][ T27] audit: type=1800 audit(2000000067.150:57): pid=16147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4520" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 511.275604][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.301548][T16158] loop1: detected capacity change from 0 to 4096 [ 511.364161][T16158] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 511.373120][T16158] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 511.394073][T16158] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 511.431729][T16158] ntfs: volume version 3.1. [ 511.524939][ T5783] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 511.615493][ T23] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 511.836513][ T23] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 511.850600][ T23] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 511.862262][ T23] usb 1-1: config 0 has no interface number 0 [ 511.871661][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 511.903523][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.923499][ T23] usb 1-1: Product: syz [ 511.927903][ T23] usb 1-1: Manufacturer: syz [ 511.943986][ T23] usb 1-1: SerialNumber: syz [ 511.967298][ T23] usb 1-1: config 0 descriptor?? [ 512.140424][T16187] loop2: detected capacity change from 0 to 4096 [ 512.152147][T16187] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 512.186365][T16187] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 512.243526][T16187] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 512.283649][T16187] ntfs: volume version 3.1. [ 512.415678][ T5784] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 512.418989][ T23] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 512.445573][ T23] usb 1-1: No valid video chain found. [ 512.497051][ T23] usb 1-1: USB disconnect, device number 75 [ 512.661445][T16201] loop1: detected capacity change from 0 to 1024 [ 512.669265][T16201] EXT4-fs: inline encryption not supported [ 512.700986][T16201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.825761][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.856134][T16209] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4559'. [ 513.053114][T16210] loop3: detected capacity change from 0 to 4096 [ 513.084150][T16210] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 513.169534][T16210] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 514.073198][T16254] loop0: detected capacity change from 0 to 4096 [ 514.111612][T16254] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 514.169908][T16254] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 514.484179][T16270] loop3: detected capacity change from 0 to 128 [ 515.320967][T16305] xt_nfacct: accounting object `syz1' does not exist [ 515.520214][T16311] loop3: detected capacity change from 0 to 256 [ 515.537869][T16311] exfat: Deprecated parameter 'utf8' [ 515.543573][T16311] exfat: Deprecated parameter 'namecase' [ 515.554320][T16311] exfat: Deprecated parameter 'namecase' [ 515.560130][T16311] exfat: Deprecated parameter 'utf8' [ 515.635139][T16311] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 515.809604][T16316] xt_CT: No such helper "snmp" [ 515.833179][T16299] loop0: detected capacity change from 0 to 32768 [ 515.856580][T16320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4604'. [ 515.888539][T16299] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.4594 (16299) [ 515.934426][T16299] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 515.980792][T16299] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 516.016551][T16299] BTRFS info (device loop0): force zlib compression, level 3 [ 516.043735][T16299] BTRFS info (device loop0): turning off barriers [ 516.050222][T16299] BTRFS info (device loop0): using free space tree [ 516.109418][T16328] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 516.244561][T16346] loop2: detected capacity change from 0 to 1024 [ 516.283520][T16299] BTRFS info (device loop0): auto enabling async discard [ 516.400600][T16352] xt_recent: hitcount (4294967293) is larger than allowed maximum (255) [ 516.561340][ T5781] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 516.721779][ T6077] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop0 scanned by udevd (6077) [ 517.212063][T16381] loop0: detected capacity change from 0 to 16 [ 517.268539][T16381] erofs: (device loop0): mounted with root inode @ nid 36. [ 517.992305][T16408] CIFS mount error: No usable UNC path provided in device string! [ 517.992305][T16408] [ 518.023222][T16408] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 518.177199][T16416] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 518.265157][T16418] Illegal XDP return value 4294967274 on prog (id 257) dev N/A, expect packet loss! [ 518.335958][T16422] loop2: detected capacity change from 0 to 64 [ 518.372348][T16422] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 518.448094][T16422] minix_free_inode: bit 3 already cleared [ 518.451594][T16398] loop3: detected capacity change from 0 to 32768 [ 518.480288][T16398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4633 (16398) [ 518.510043][T16398] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 518.527396][T16398] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 518.537903][T16398] BTRFS info (device loop3): force clearing of disk cache [ 518.549097][T16398] BTRFS info (device loop3): disabling free space tree [ 518.586276][T16398] BTRFS info (device loop3): enabling auto defrag [ 518.594920][T16398] BTRFS info (device loop3): max_inline at 0 [ 518.607195][T16398] BTRFS info (device loop3): enabling disk space caching [ 518.621695][T16398] BTRFS info (device loop3): disk space caching is enabled [ 518.768612][T16398] BTRFS info (device loop3): enabling ssd optimizations [ 518.804801][T16398] BTRFS info (device loop3): auto enabling async discard [ 518.854554][T16398] BTRFS info (device loop3): rebuilding free space tree [ 518.938102][T16398] BTRFS info (device loop3): disabling free space tree [ 518.963601][T16398] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 518.973320][T16398] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 519.152857][T16398] BTRFS info (device loop3: state M): disabling disk space caching [ 519.194822][T16398] BTRFS info (device loop3: state M): cleaning free space cache v1 [ 519.324409][ T5782] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 519.508292][ T6077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 12 /dev/loop3 scanned by udevd (6077) [ 519.552851][T16464] loop2: detected capacity change from 0 to 2048 [ 519.581278][T16464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.838067][T16473] x_tables: duplicate underflow at hook 3 [ 519.907453][T16475] loop2: detected capacity change from 0 to 256 [ 520.548428][T16498] loop3: detected capacity change from 0 to 64 [ 520.607769][T16498] Trying to free block not in datazone [ 520.613282][T16498] Trying to free block not in datazone [ 520.646721][T16501] QAT: failed to copy from user cfg_data. [ 520.650800][T16498] Trying to free block not in datazone [ 520.703445][T16498] Trying to free block not in datazone [ 520.720988][T16498] Trying to free block not in datazone [ 520.757833][T16498] minix_free_block (loop3:6): bit already cleared [ 520.780238][T16498] Trying to free block not in datazone [ 520.911667][ T27] audit: type=1326 audit(2000000076.890:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 520.983526][ T27] audit: type=1326 audit(2000000076.890:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.097436][ T27] audit: type=1326 audit(2000000076.930:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.120605][T16516] netlink: 'syz.1.4685': attribute type 24 has an invalid length. [ 521.163450][ T27] audit: type=1326 audit(2000000076.930:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.192665][ T27] audit: type=1326 audit(2000000076.950:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.242333][ T27] audit: type=1326 audit(2000000076.950:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.336009][ T27] audit: type=1326 audit(2000000076.950:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.364572][ T27] audit: type=1326 audit(2000000076.950:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 521.462050][ T27] audit: type=1326 audit(2000000076.950:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16511 comm="syz.2.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5bb9f8f6c9 code=0x7ffc0000 [ 522.026386][T16549] netlink: 'syz.2.4700': attribute type 10 has an invalid length. [ 522.079676][T16529] loop1: detected capacity change from 0 to 32768 [ 522.128103][T16549] team0: Port device wlan1 added [ 522.132536][T16529] [ 522.132536][T16529] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.132536][T16529] [ 522.157275][T16553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4701'. [ 522.202597][ T27] audit: type=1800 audit(2000000078.180:67): pid=16529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4689" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 522.300107][ T5783] [ 522.300107][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.300107][ T5783] [ 522.336190][ T5783] [ 522.336190][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.336190][ T5783] [ 523.124943][T16590] loop2: detected capacity change from 0 to 64 [ 523.157976][T16590] hfs: unable to locate alternate MDB [ 523.179103][T16590] hfs: continuing without an alternate MDB [ 523.258608][T16595] loop1: detected capacity change from 0 to 1024 [ 523.353069][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4721'. [ 523.496349][T16602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4723'. [ 523.521937][T16602] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.551225][T16603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.707836][T16611] netlink: 'syz.0.4727': attribute type 3 has an invalid length. [ 523.750009][T16611] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4727'. [ 524.068378][T16626] loop3: detected capacity change from 0 to 2048 [ 524.118006][T16626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.643773][T16622] loop0: detected capacity change from 0 to 32768 [ 524.675917][T16622] (syz.0.4734,16622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 524.734346][T16622] (syz.0.4734,16622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 524.845967][T16622] JBD2: Ignoring recovery information on journal [ 524.956682][T16622] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 525.053985][T16622] (syz.0.4734,16622,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x7dc2e7ff, computed 0x15723f56. Applying ECC. [ 525.206410][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 525.347003][T16666] ipt_REJECT: ECHOREPLY no longer supported. [ 525.355650][T16665] bridge3: entered promiscuous mode [ 525.652742][T16677] loop3: detected capacity change from 0 to 164 [ 525.666536][T16678] loop0: detected capacity change from 0 to 256 [ 525.685698][T16678] exfat: Deprecated parameter 'namecase' [ 525.691423][T16678] exfat: Deprecated parameter 'namecase' [ 525.735090][T16678] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 525.752879][T16681] overlay: Unknown parameter '\' [ 526.223219][T16699] netlink: 'syz.1.4770': attribute type 5 has an invalid length. [ 526.267738][T16699] ip6erspan0: entered allmulticast mode [ 526.312244][T16701] loop3: detected capacity change from 0 to 64 [ 527.178762][T16735] netlink: 'syz.1.4788': attribute type 1 has an invalid length. [ 527.269277][T16739] loop0: detected capacity change from 0 to 164 [ 527.622501][T16727] loop2: detected capacity change from 0 to 32768 [ 527.649263][T16727] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 527.934751][ T6077] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 528.147399][T16762] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 528.187520][T16765] qrtr: Invalid version 0 [ 528.195609][T16762] bond0: (slave netdevsim0): Releasing backup interface [ 528.251013][T16762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 528.270748][T16741] loop1: detected capacity change from 0 to 32768 [ 528.319070][T16741] (syz.1.4791,16741,0):ocfs2_journal_addressable:1991 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 528.319106][T16741] (syz.1.4791,16741,0):ocfs2_check_volume:2488 ERROR: status = -27 [ 528.385823][T16741] (syz.1.4791,16741,1):ocfs2_mount_volume:1820 ERROR: status = -27 [ 528.405402][T16741] (syz.1.4791,16741,1):ocfs2_fill_super:1178 ERROR: status = -27 [ 528.407166][T16770] xt_policy: neither incoming nor outgoing policy selected [ 528.441385][T16741] erofs: (device loop1): erofs_read_superblock: cannot find valid erofs superblock [ 528.865349][T16778] loop2: detected capacity change from 0 to 4096 [ 529.091177][T16786] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4813'. [ 529.438989][T16774] loop0: detected capacity change from 0 to 32768 [ 529.485823][T16774] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 529.489445][T16798] netlink: 'syz.3.4818': attribute type 10 has an invalid length. [ 529.513610][T16798] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4818'. [ 529.675557][ T6077] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 529.772478][T16807] loop2: detected capacity change from 0 to 128 [ 529.790902][T16807] EXT4-fs: Ignoring removed nobh option [ 529.847867][T16807] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 529.879443][T16807] ext4 filesystem being mounted at /1238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 529.936776][T16807] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.4824: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 529.980776][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4826'. [ 530.080134][ T5784] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 530.226782][T16818] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 530.293875][T16816] loop0: detected capacity change from 0 to 4096 [ 530.316203][T16816] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 530.395377][T16816] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 530.411157][T16816] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 530.425726][T16824] __ntfs_error: 10 callbacks suppressed [ 530.425742][T16824] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 530.498456][T16828] xt_ecn: cannot match TCP bits for non-tcp packets [ 530.769164][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4836'. [ 530.798740][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4836'. [ 530.819925][T16836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.928211][T16843] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4840'. [ 531.229114][T16858] loop3: detected capacity change from 0 to 128 [ 531.257948][T16858] FAT-fs (loop3): Directory bread(block 162) failed [ 531.276962][T16858] FAT-fs (loop3): Directory bread(block 163) failed [ 531.296806][T16858] FAT-fs (loop3): Directory bread(block 164) failed [ 531.318480][T16858] FAT-fs (loop3): Directory bread(block 165) failed [ 531.344979][T16858] FAT-fs (loop3): Directory bread(block 166) failed [ 531.360776][T16856] loop1: detected capacity change from 0 to 4096 [ 531.369674][T16858] FAT-fs (loop3): Directory bread(block 167) failed [ 531.380181][T16858] FAT-fs (loop3): Directory bread(block 168) failed [ 531.388601][T16858] FAT-fs (loop3): Directory bread(block 169) failed [ 531.427088][T16858] FAT-fs (loop3): Directory bread(block 162) failed [ 531.451702][T16858] FAT-fs (loop3): Directory bread(block 163) failed [ 531.459057][T16856] ntfs: volume version 3.1. [ 531.475256][T16858] syz.3.4847: attempt to access beyond end of device [ 531.475256][T16858] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 531.526413][T16864] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 531.542439][T16858] syz.3.4847: attempt to access beyond end of device [ 531.542439][T16858] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 531.573259][T16864] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 531.655475][ T27] audit: type=1400 audit(2000000087.640:78): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16865 comm="syz.2.4852" [ 532.775766][T16887] loop2: detected capacity change from 0 to 32768 [ 532.810478][T16887] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 532.810478][T16887] [ 532.871189][T16887] ERROR: (device loop2): remounting filesystem as read-only [ 533.275540][T16921] loop3: detected capacity change from 0 to 8 [ 533.371982][T16921] SQUASHFS error: xz decompression failed, data probably corrupt [ 533.423494][T16921] SQUASHFS error: Failed to read block 0x108: -5 [ 533.429910][T16921] SQUASHFS error: Unable to read metadata cache entry [106] [ 533.483322][T16921] SQUASHFS error: Unable to read inode 0x11f [ 533.737797][T16931] loop1: detected capacity change from 0 to 4096 [ 533.820256][T16939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4887'. [ 533.963746][ T788] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 534.003332][T16943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4888'. [ 534.196339][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 534.219055][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 534.246732][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 534.263962][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 534.294833][ T788] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 534.313674][ T788] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 534.339935][ T788] usb 4-1: Manufacturer: syz [ 534.352195][ T788] usb 4-1: config 0 descriptor?? [ 534.367985][T16921] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 534.378822][ T788] smsusb:smsusb_probe: board id=9, interface number 0 [ 534.407860][ T788] smsusb:siano_media_device_register: media controller created [ 534.426557][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.433917][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.441252][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.448585][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.455917][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.475778][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.493654][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.500981][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.508257][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.515512][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.522750][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.530374][ T788] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 534.539131][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539237][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539322][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539407][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539491][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539582][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539666][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539748][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539831][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.539914][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.612746][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.620044][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.627331][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.634625][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.641903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.649193][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.656486][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.663764][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.671055][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.679822][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.687112][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.694385][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.701662][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.708952][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.716310][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.723576][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.730823][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.738063][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.746872][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.754167][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.761430][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.768710][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.775992][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.781188][T16957] loop0: detected capacity change from 0 to 4096 [ 534.783242][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.797125][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.804425][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.812291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.819862][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.827153][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.834446][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.841722][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.849012][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.856318][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.863618][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.871435][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.878727][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.886079][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.893352][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.900606][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.907838][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.915061][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.922285][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.929508][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.937126][ T788] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 534.944908][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945018][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945103][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945187][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945270][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945353][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945434][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945524][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945607][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 534.945689][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.033666][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.041015][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.048316][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.055621][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.062940][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.070253][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.077586][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.084883][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.092667][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.099973][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.107647][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.114942][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.122207][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.129443][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.136680][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.143914][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.151136][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.158395][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.166387][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.173671][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.181245][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.188527][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.195797][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.203043][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.210285][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.217534][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.224770][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.231997][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.239545][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.246839][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.254121][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.261419][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.268713][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.276007][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.283304][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.290602][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.297894][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.305744][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.313058][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.320347][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.327633][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.334914][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.342192][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.349473][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.356756][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.364035][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.371314][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.379098][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.386370][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.393607][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.400832][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.408057][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.415291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.422517][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.429741][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.436970][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.444603][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.451893][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.459179][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.466468][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.473749][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.481048][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.488364][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.495656][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.502946][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.510756][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.518055][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.525330][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.532602][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.539880][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.547166][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.554445][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.561717][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.568993][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.576275][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.577285][T16947] loop2: detected capacity change from 0 to 32768 [ 535.584268][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.597605][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.603242][T16955] loop1: detected capacity change from 0 to 32768 [ 535.604880][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.604929][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.626169][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.633482][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.640767][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.648046][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.655331][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.662612][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.670788][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.678088][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.685372][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.691123][T16947] (syz.2.4891,16947,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 535.692623][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.713727][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.721033][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.728330][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.735616][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.742913][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.750201][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.774117][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.781456][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.788758][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.796063][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.803531][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.810826][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.818123][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.825426][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.832735][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.840562][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.847870][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.855161][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.862457][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.869733][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.876975][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.884205][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.891437][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.898676][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.906924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.914236][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.921651][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.923325][T16955] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 535.928924][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.928990][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.929041][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.946589][T16947] (syz.2.4891,16947,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 535.952476][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.980399][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 535.988297][ T788] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 535.996052][ T788] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 536.004006][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.011503][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.018798][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.026085][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.033371][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.040661][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.047997][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.055302][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.062693][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.072690][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.080001][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.087303][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.094601][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.101903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.109195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.116502][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.123796][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.131103][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.141016][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.148321][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.155579][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.162808][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.170042][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.177280][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.184517][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.191751][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.198986][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.207144][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.214458][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.221742][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.227545][T16947] JBD2: Ignoring recovery information on journal [ 536.228997][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.242643][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.249906][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.257189][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.264641][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.271882][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.279813][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.287117][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.294490][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.301767][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.309037][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.316332][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.323613][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.330888][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.338155][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.345714][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.353010][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.360306][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.367608][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.374903][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.382218][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.389531][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.396848][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.404135][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.412217][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.419542][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.422347][T16955] XFS (loop1): Ending clean mount [ 536.426821][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.426888][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.426947][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.427004][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.446837][T16955] XFS (loop1): Quotacheck needed: Please wait. [ 536.454059][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.475025][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.477295][T16947] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 536.482329][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.499885][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.507199][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.514489][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.521780][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.529076][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.536442][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.543781][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.551083][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.558384][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.566195][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.573489][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.580782][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.588062][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.595330][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.602585][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.609813][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.617033][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.624264][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.632040][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.632558][T16955] XFS (loop1): Quotacheck: Done. [ 536.639291][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.639336][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.639385][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.665976][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.673256][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.680609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.687894][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.695192][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.703188][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.710509][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.717797][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.725074][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.732446][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.736650][T16974] loop3: detected capacity change from 0 to 64 [ 536.739703][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.753441][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.760729][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.768019][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.775609][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.783600][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.790908][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.798196][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.805490][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.812792][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.820102][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.827411][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.834727][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.842286][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.849599][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.856893][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.864172][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.871470][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.878754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.886051][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.893387][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.900754][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.908607][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.915905][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.923176][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.930466][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.937739][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.945009][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.952293][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.959612][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.966897][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.976343][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.983654][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.990948][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 536.998254][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 537.005559][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 537.012859][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 537.020133][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 537.027379][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 537.034616][ C1] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 537.051229][ T788] smsusb:smsusb_probe: Device initialized with return code -22 [ 537.111556][T16976] netlink: 5064 bytes leftover after parsing attributes in process `syz.0.4899'. [ 537.130027][ T788] smsusb: probe of 4-1:0.0 failed with error -22 [ 537.138979][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 537.144025][ T788] usb 4-1: USB disconnect, device number 97 [ 537.293265][ T5784] ocfs2: Unmounting device (7,2) on (node local) [ 538.017939][T16999] binder: 16998:16999 ioctl 40046205 0 returned -22 [ 538.428625][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4922'. [ 538.432334][T17020] netlink: 'syz.0.4921': attribute type 1 has an invalid length. [ 538.454915][T17020] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4921'. [ 538.559071][T17025] tmpfs: Bad value for 'mpol' [ 538.788054][T17036] cgroup: Name too long [ 538.925588][T17043] loop1: detected capacity change from 0 to 1024 [ 539.038770][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4934'. [ 539.266342][T17056] netlink: 'syz.0.4938': attribute type 1 has an invalid length. [ 539.402907][T17060] loop2: detected capacity change from 0 to 64 [ 539.905156][T17083] SET target dimension over the limit! [ 539.960376][T17086] loop1: detected capacity change from 0 to 64 [ 540.153438][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'. [ 540.190060][ T5869] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 540.403554][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 540.405433][T17104] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 540.415144][ T5869] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 540.435195][ T5869] usb 3-1: config 0 has no interface number 0 [ 540.442272][ T5869] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 540.468629][ T5869] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 540.488287][ T5869] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 540.500506][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 540.517145][ T5869] usb 3-1: Product: syz [ 540.521342][ T5869] usb 3-1: SerialNumber: syz [ 540.550498][ T5869] usb 3-1: config 0 descriptor?? [ 540.561232][ T5869] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 540.579495][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input30 [ 540.689946][T17111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.953592][T17118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4970'. [ 541.048938][T17120] loop0: detected capacity change from 0 to 64 [ 541.087644][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 541.088391][ T788] usb 3-1: USB disconnect, device number 87 [ 541.094629][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19 [ 541.136870][ T788] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 541.344428][T17125] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 541.367142][T17107] loop3: detected capacity change from 0 to 32768 [ 541.441332][T17107] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 541.441332][T17107] [ 541.999101][T17126] loop0: detected capacity change from 0 to 32768 [ 542.049344][T17126] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 542.081783][T17126] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 542.114692][T17126] BTRFS info (device loop0): enabling ssd optimizations [ 542.121746][T17126] BTRFS info (device loop0): not using ssd optimizations [ 542.169145][T17126] BTRFS info (device loop0): turning off barriers [ 542.179269][T17145] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.4979' sets config #0 [ 542.190168][T17126] BTRFS info (device loop0): using free space tree [ 542.552937][T17170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.572708][T17174] loop2: detected capacity change from 0 to 8 [ 542.678639][T17174] SQUASHFS error: xz decompression failed, data probably corrupt [ 542.724176][T17174] SQUASHFS error: Failed to read block 0x108: -5 [ 542.730573][T17174] SQUASHFS error: Unable to read metadata cache entry [106] [ 542.758027][T17174] SQUASHFS error: Unable to read inode 0x11f [ 542.796189][ T5781] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 543.276225][ T5869] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 543.529680][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 543.566889][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 543.586456][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 543.621333][ T5869] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 543.634355][ T5869] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 543.636502][T17201] loop3: detected capacity change from 0 to 1024 [ 543.651285][ T5869] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 543.667813][ T5869] usb 3-1: Manufacturer: syz [ 543.677092][T17201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 543.694830][ T5869] usb 3-1: config 0 descriptor?? [ 543.700695][T17174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.747801][T17201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.748704][ T5869] smsusb:smsusb_probe: board id=9, interface number 0 [ 543.785774][ T5869] smsusb:siano_media_device_register: media controller created [ 543.798853][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.806227][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.813549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.820877][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.828205][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.835503][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.840498][T17201] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.5003: missing EA_INODE flag [ 543.841897][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.861115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.868405][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.875654][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.882889][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.890170][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.897524][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.904796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.912035][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.919263][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.926489][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.933715][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.940176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.947475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.954757][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.962033][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.969307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.976650][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.983261][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.990609][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 543.997947][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.002136][T17201] EXT4-fs (loop3): Remounting filesystem read-only [ 544.005262][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.019455][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.026797][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.034131][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.040648][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.047945][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.055235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.062519][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.069798][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.077074][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.084374][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.090971][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.098265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.105545][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.112818][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.120415][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.127693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.135008][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.145929][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.149386][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.153201][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.153259][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.153314][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.153366][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.153418][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.153892][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.206019][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.213275][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.220507][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.227735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.234957][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.242226][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.248723][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.256017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.263296][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.270588][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.277862][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.285140][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.292409][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.299123][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.306428][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.313703][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.320990][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.328275][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.335570][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.342851][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.349261][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.356557][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.363848][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.371124][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.378395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.385664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.392943][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.399686][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.406983][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.414270][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.422449][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.429749][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.437030][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.444303][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.451599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.459012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.466361][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.480661][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.487978][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.495267][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.502555][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.509034][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.516337][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.523629][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.531446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.538741][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.546024][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.553912][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.561091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.568384][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.575653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.582884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.590118][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.597346][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.604630][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.610985][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.618326][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.622500][T17214] loop3: detected capacity change from 0 to 64 [ 544.625644][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.639375][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.646748][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.654063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.661413][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.668441][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.676003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.683299][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.690587][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.697886][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.705181][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.712552][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.719223][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.726535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.733822][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.742224][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.749584][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.756910][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.764238][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.767864][T17216] loop0: detected capacity change from 0 to 512 [ 544.771549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.785309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.792698][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.799353][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.806694][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.814012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.821332][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.828655][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.835943][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.843195][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.850442][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.857021][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.864311][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.871593][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.878879][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.886168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.893446][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.900744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.908064][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.915599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.922906][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.930213][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.937520][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.944812][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.952115][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.959509][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.966792][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.973388][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.980772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.988025][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 544.995270][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.002508][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.009745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.016970][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.024225][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.031424][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.038747][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.046039][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.053422][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.060721][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.068013][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.075305][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.082581][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.089249][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.096614][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.103993][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.111270][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.118553][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.124512][T17220] netlink: 'syz.3.5010': attribute type 7 has an invalid length. [ 545.125915][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.141258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.148590][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.157075][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.164383][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.171683][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.178988][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.186284][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.193576][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.200909][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.201490][T17220] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5010'. [ 545.207461][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.223893][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.226853][T17216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.231175][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.251241][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.258599][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.269966][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.277265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.284545][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.291774][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.299002][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.306276][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.312806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.320107][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.323573][T17216] ext4 filesystem being mounted at /1251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.327373][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.345485][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.351902][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.359197][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.366495][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.373797][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.381058][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.388473][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.395714][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.402989][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.409863][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.417164][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.424450][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.431738][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.439023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.446305][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.453587][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.460920][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.468015][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.475317][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.482958][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.490251][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.497525][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.504767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.511997][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.519287][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.525953][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.533263][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.540549][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.547841][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.555188][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.562487][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.569778][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.577158][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.584837][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.592145][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.599453][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.606744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.614032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.621325][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.628701][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.636027][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.650480][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.657804][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.665108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.672416][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.679720][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.687016][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.694344][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.701108][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.708908][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.716205][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.723506][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.730796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.738045][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.745289][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.752582][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.759117][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.766434][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.773729][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.781036][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.788366][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.794795][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.802080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.803563][T17232] netlink: 'syz.1.5015': attribute type 21 has an invalid length. [ 545.809341][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.824808][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.831338][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.838653][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.846033][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.853330][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.860645][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.867937][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.875228][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.882518][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.891745][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.897969][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.899018][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.915538][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.922842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.930066][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.937314][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.944702][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.951996][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.959587][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.966870][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.974151][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.981421][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.988693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 545.996008][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.004068][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.011387][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.018688][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.025992][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.033300][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.040610][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.047914][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.055251][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.062096][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.069441][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.076755][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.084017][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.091353][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.098620][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.105878][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.113160][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.119460][ T5869] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 546.128693][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.128796][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.128884][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.156160][ T5869] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 546.163302][ T5869] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 546.171165][ T5869] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 546.178945][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.186243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.193518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.200798][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.208081][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.215695][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.222954][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.230197][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.237024][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.244356][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 546.251580][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 546.260486][ T5869] ------------[ cut here ]------------ [ 546.266042][ T5869] ODEBUG: free active (active state 0) object: ffff888021a9a8c8 object type: work_struct hint: do_submit_urb+0x0/0x360 [ 546.278661][ T789] ================================================================== [ 546.286729][ T789] BUG: KASAN: slab-use-after-free in __lock_acquire+0xff/0x7c80 [ 546.294371][ T789] Read of size 8 at addr ffff88807acf3098 by task kworker/0:2/789 [ 546.299869][T17241] loop1: detected capacity change from 0 to 8 [ 546.302159][ T789] [ 546.302168][ T789] CPU: 0 PID: 789 Comm: kworker/0:2 Not tainted syzkaller #0 [ 546.302186][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 546.302196][ T789] Workqueue: events do_submit_urb [ 546.302222][ T789] Call Trace: [ 546.302230][ T789] [ 546.302238][ T789] dump_stack_lvl+0x16c/0x230 [ 546.302262][ T789] ? __lock_acquire+0x7c80/0x7c80 [ 546.302283][ T789] ? show_regs_print_info+0x20/0x20 [ 546.302304][ T789] ? load_image+0x3b0/0x3b0 [ 546.302325][ T789] ? __virt_addr_valid+0x469/0x540 [ 546.302347][ T789] print_report+0xac/0x220 [ 546.302367][ T789] ? __lock_acquire+0xff/0x7c80 [ 546.302385][ T789] kasan_report+0x117/0x150 [ 546.302405][ T789] ? __lock_acquire+0xff/0x7c80 [ 546.302426][ T789] __lock_acquire+0xff/0x7c80 [ 546.302453][ T789] ? mark_lock+0x94/0x320 [ 546.302472][ T789] ? look_up_lock_class+0x75/0x140 [ 546.302489][ T789] ? verify_lock_unused+0x140/0x140 [ 546.311792][T17235] loop2: detected capacity change from 0 to 1764 [ 546.318193][ T789] ? register_lock_class+0xb5/0x890 [ 546.318219][ T789] ? is_dynamic_key+0x260/0x260 [ 546.318236][ T789] ? mark_lock+0x94/0x320 [ 546.318253][ T789] ? __lock_acquire+0x1334/0x7c80 [ 546.318270][ T789] lock_acquire+0x197/0x410 [ 546.432284][ T789] ? smscore_getbuffer+0xa9/0x440 [ 546.437314][ T789] ? read_lock_is_recursive+0x20/0x20 [ 546.442679][ T789] _raw_spin_lock_irqsave+0xa8/0xf0 [ 546.447860][ T789] ? smscore_getbuffer+0xa9/0x440 [ 546.452877][ T789] ? _raw_spin_lock+0x40/0x40 [ 546.457544][ T789] smscore_getbuffer+0xa9/0x440 [ 546.462380][ T789] ? smscore_onresponse+0xf10/0xf10 [ 546.467560][ T789] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 546.473528][ T789] ? read_lock_is_recursive+0x20/0x20 [ 546.478886][ T789] do_submit_urb+0x98/0x360 [ 546.483375][ T789] ? process_scheduled_works+0x957/0x15b0 [ 546.489261][ T789] ? process_scheduled_works+0x957/0x15b0 [ 546.494967][ T789] process_scheduled_works+0xa45/0x15b0 [ 546.500516][ T789] ? assign_work+0x400/0x400 [ 546.505185][ T789] ? assign_work+0x39e/0x400 [ 546.509762][ T789] worker_thread+0xa55/0xfc0 [ 546.514352][ T789] kthread+0x2fa/0x390 [ 546.518415][ T789] ? pr_cont_work+0x560/0x560 [ 546.523090][ T789] ? kthread_blkcg+0xd0/0xd0 [ 546.527661][ T789] ret_from_fork+0x48/0x80 [ 546.532062][ T789] ? kthread_blkcg+0xd0/0xd0 [ 546.536649][ T789] ret_from_fork_asm+0x11/0x20 [ 546.541430][ T789] [ 546.544439][ T789] [ 546.546744][ T789] Allocated by task 5869: [ 546.551055][ T789] kasan_set_track+0x4e/0x70 [ 546.555632][ T789] __kasan_kmalloc+0x8f/0xa0 [ 546.560204][ T789] smscore_register_device+0x63/0x10f0 [ 546.565736][ T789] smsusb_probe+0x1362/0x1da0 [ 546.570401][ T789] usb_probe_interface+0x5a4/0xb00 [ 546.575499][ T789] really_probe+0x25b/0xb40 [ 546.579994][ T789] __driver_probe_device+0x18c/0x330 [ 546.585281][ T789] driver_probe_device+0x4f/0x420 [ 546.590314][ T789] __device_attach_driver+0x2ca/0x520 [ 546.595687][ T789] bus_for_each_drv+0x24b/0x2d0 [ 546.600525][ T789] __device_attach+0x2b5/0x400 [ 546.605273][ T789] bus_probe_device+0x180/0x260 [ 546.610107][ T789] device_add+0x85b/0xc20 [ 546.614423][ T789] usb_set_configuration+0x1a79/0x20c0 [ 546.619870][ T789] usb_generic_driver_probe+0x8d/0x150 [ 546.625320][ T789] usb_probe_device+0x13d/0x280 [ 546.630157][ T789] really_probe+0x25b/0xb40 [ 546.634646][ T789] __driver_probe_device+0x18c/0x330 [ 546.639916][ T789] driver_probe_device+0x4f/0x420 [ 546.644927][ T789] __device_attach_driver+0x2ca/0x520 [ 546.650285][ T789] bus_for_each_drv+0x24b/0x2d0 [ 546.655119][ T789] __device_attach+0x2b5/0x400 [ 546.659871][ T789] bus_probe_device+0x180/0x260 [ 546.664703][ T789] device_add+0x85b/0xc20 [ 546.669021][ T789] usb_new_device+0xa31/0x1630 [ 546.673853][ T789] hub_event+0x2962/0x49c0 [ 546.678265][ T789] process_scheduled_works+0xa45/0x15b0 [ 546.683804][ T789] worker_thread+0xa55/0xfc0 [ 546.688384][ T789] kthread+0x2fa/0x390 [ 546.692444][ T789] ret_from_fork+0x48/0x80 [ 546.696850][ T789] ret_from_fork_asm+0x11/0x20 [ 546.701605][ T789] [ 546.703912][ T789] Freed by task 5869: [ 546.707871][ T789] kasan_set_track+0x4e/0x70 [ 546.712448][ T789] kasan_save_free_info+0x2e/0x50 [ 546.717468][ T789] ____kasan_slab_free+0x126/0x1e0 [ 546.722563][ T789] slab_free_freelist_hook+0x130/0x1b0 [ 546.728102][ T789] __kmem_cache_free+0xba/0x1f0 [ 546.732934][ T789] smscore_unregister_device+0x603/0x6e0 [ 546.738553][ T789] smsusb_term_device+0x18f/0x220 [ 546.743580][ T789] smsusb_probe+0x1708/0x1da0 [ 546.748242][ T789] usb_probe_interface+0x5a4/0xb00 [ 546.753351][ T789] really_probe+0x25b/0xb40 [ 546.757840][ T789] __driver_probe_device+0x18c/0x330 [ 546.763194][ T789] driver_probe_device+0x4f/0x420 [ 546.768202][ T789] __device_attach_driver+0x2ca/0x520 [ 546.773556][ T789] bus_for_each_drv+0x24b/0x2d0 [ 546.778394][ T789] __device_attach+0x2b5/0x400 [ 546.783139][ T789] bus_probe_device+0x180/0x260 [ 546.787973][ T789] device_add+0x85b/0xc20 [ 546.792291][ T789] usb_set_configuration+0x1a79/0x20c0 [ 546.797767][ T789] usb_generic_driver_probe+0x8d/0x150 [ 546.803214][ T789] usb_probe_device+0x13d/0x280 [ 546.808049][ T789] really_probe+0x25b/0xb40 [ 546.812540][ T789] __driver_probe_device+0x18c/0x330 [ 546.817825][ T789] driver_probe_device+0x4f/0x420 [ 546.822836][ T789] __device_attach_driver+0x2ca/0x520 [ 546.828197][ T789] bus_for_each_drv+0x24b/0x2d0 [ 546.833028][ T789] __device_attach+0x2b5/0x400 [ 546.837777][ T789] bus_probe_device+0x180/0x260 [ 546.842612][ T789] device_add+0x85b/0xc20 [ 546.846928][ T789] usb_new_device+0xa31/0x1630 [ 546.851672][ T789] hub_event+0x2962/0x49c0 [ 546.856160][ T789] process_scheduled_works+0xa45/0x15b0 [ 546.861697][ T789] worker_thread+0xa55/0xfc0 [ 546.866286][ T789] kthread+0x2fa/0x390 [ 546.870336][ T789] ret_from_fork+0x48/0x80 [ 546.874749][ T789] ret_from_fork_asm+0x11/0x20 [ 546.879513][ T789] [ 546.881832][ T789] Last potentially related work creation: [ 546.887527][ T789] kasan_save_stack+0x3e/0x60 [ 546.892203][ T789] __kasan_record_aux_stack+0xaf/0xc0 [ 546.897572][ T789] call_rcu+0x158/0x930 [ 546.901713][ T789] netlink_release+0x16b4/0x1a80 [ 546.906637][ T789] sock_close+0xbd/0x230 [ 546.910861][ T789] __fput+0x234/0x970 [ 546.914852][ T789] task_work_run+0x1ce/0x250 [ 546.919430][ T789] exit_to_user_mode_loop+0xe6/0x110 [ 546.924704][ T789] exit_to_user_mode_prepare+0xf6/0x180 [ 546.930235][ T789] syscall_exit_to_user_mode+0x1a/0x50 [ 546.935697][ T789] do_syscall_64+0x61/0xb0 [ 546.940112][ T789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.945993][ T789] [ 546.948302][ T789] The buggy address belongs to the object at ffff88807acf3000 [ 546.948302][ T789] which belongs to the cache kmalloc-2k of size 2048 [ 546.962344][ T789] The buggy address is located 152 bytes inside of [ 546.962344][ T789] freed 2048-byte region [ffff88807acf3000, ffff88807acf3800) [ 546.976210][ T789] [ 546.978519][ T789] The buggy address belongs to the physical page: [ 546.984943][ T789] page:ffffea0001eb3c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7acf0 [ 546.995077][ T789] head:ffffea0001eb3c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 547.003993][ T789] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 547.012398][ T789] page_type: 0xffffffff() [ 547.016713][ T789] raw: 00fff00000000840 ffff888017842000 0000000000000000 dead000000000001 [ 547.025291][ T789] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 547.033858][ T789] page dumped because: kasan: bad access detected [ 547.040262][ T789] page_owner tracks the page as allocated [ 547.045954][ T789] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5784, tgid 5784 (syz-executor), ts 60352865555, free_ts 52771727962 [ 547.067293][ T789] post_alloc_hook+0x1cd/0x210 [ 547.072053][ T789] get_page_from_freelist+0x195c/0x19f0 [ 547.077586][ T789] __alloc_pages+0x1e3/0x460 [ 547.082162][ T789] alloc_slab_page+0x5d/0x170 [ 547.086826][ T789] new_slab+0x87/0x2e0 [ 547.090882][ T789] ___slab_alloc+0xc6d/0x1300 [ 547.095630][ T789] __kmem_cache_alloc_node+0x1a2/0x260 [ 547.101075][ T789] kmalloc_trace+0x2a/0xe0 [ 547.105474][ T789] rtnl_newlink+0xeb/0x2020 [ 547.109962][ T789] rtnetlink_rcv_msg+0x7c7/0xf10 [ 547.114881][ T789] netlink_rcv_skb+0x216/0x480 [ 547.119629][ T789] netlink_unicast+0x751/0x8d0 [ 547.124377][ T789] netlink_sendmsg+0x8c1/0xbe0 [ 547.129124][ T789] __sys_sendto+0x46a/0x620 [ 547.133614][ T789] __x64_sys_sendto+0xde/0xf0 [ 547.138276][ T789] do_syscall_64+0x55/0xb0 [ 547.142678][ T789] page last free stack trace: [ 547.147332][ T789] free_unref_page_prepare+0x7ce/0x8e0 [ 547.152777][ T789] free_unref_page+0x32/0x2e0 [ 547.157438][ T789] __unfreeze_partials+0x1cf/0x210 [ 547.162537][ T789] put_cpu_partial+0x17c/0x250 [ 547.167290][ T789] __slab_free+0x31d/0x410 [ 547.171694][ T789] qlist_free_all+0x75/0xe0 [ 547.176186][ T789] kasan_quarantine_reduce+0x143/0x160 [ 547.181626][ T789] __kasan_slab_alloc+0x22/0x80 [ 547.186456][ T789] slab_post_alloc_hook+0x6e/0x4d0 [ 547.191554][ T789] __kmem_cache_alloc_node+0x13e/0x260 [ 547.197086][ T789] kmalloc_trace+0x2a/0xe0 [ 547.201491][ T789] tomoyo_find_next_domain+0x10ad/0x1a60 [ 547.207109][ T789] tomoyo_bprm_check_security+0x116/0x170 [ 547.212807][ T789] security_bprm_check+0x62/0xa0 [ 547.217727][ T789] bprm_execve+0xa51/0x16f0 [ 547.222219][ T789] do_execveat_common+0x51b/0x6c0 [ 547.227243][ T789] [ 547.229556][ T789] Memory state around the buggy address: [ 547.235171][ T789] ffff88807acf2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 547.243212][ T789] ffff88807acf3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.251253][ T789] >ffff88807acf3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.259290][ T789] ^ [ 547.264120][ T789] ffff88807acf3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.272157][ T789] ffff88807acf3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 547.280200][ T789] ================================================================== [ 547.288253][ T789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 547.295433][ T789] CPU: 0 PID: 789 Comm: kworker/0:2 Not tainted syzkaller #0 [ 547.302784][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.312841][ T789] Workqueue: events do_submit_urb [ 547.317860][ T789] Call Trace: [ 547.321126][ T789] [ 547.324048][ T789] dump_stack_lvl+0x16c/0x230 [ 547.328716][ T789] ? show_regs_print_info+0x20/0x20 [ 547.333902][ T789] ? load_image+0x3b0/0x3b0 [ 547.338394][ T789] panic+0x2c0/0x710 [ 547.342272][ T789] ? bpf_jit_dump+0xd0/0xd0 [ 547.346756][ T789] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 547.352629][ T789] ? _raw_spin_unlock+0x40/0x40 [ 547.357459][ T789] ? print_memory_metadata+0x314/0x400 [ 547.362902][ T789] ? __lock_acquire+0xff/0x7c80 [ 547.367734][ T789] check_panic_on_warn+0x84/0xa0 [ 547.372657][ T789] ? __lock_acquire+0xff/0x7c80 [ 547.377493][ T789] end_report+0x6f/0x140 [ 547.381718][ T789] kasan_report+0x128/0x150 [ 547.386207][ T789] ? __lock_acquire+0xff/0x7c80 [ 547.391057][ T789] __lock_acquire+0xff/0x7c80 [ 547.395724][ T789] ? mark_lock+0x94/0x320 [ 547.400037][ T789] ? look_up_lock_class+0x75/0x140 [ 547.405217][ T789] ? verify_lock_unused+0x140/0x140 [ 547.410402][ T789] ? register_lock_class+0xb5/0x890 [ 547.415585][ T789] ? is_dynamic_key+0x260/0x260 [ 547.420419][ T789] ? mark_lock+0x94/0x320 [ 547.424736][ T789] ? __lock_acquire+0x1334/0x7c80 [ 547.429746][ T789] lock_acquire+0x197/0x410 [ 547.434237][ T789] ? smscore_getbuffer+0xa9/0x440 [ 547.439261][ T789] ? read_lock_is_recursive+0x20/0x20 [ 547.444649][ T789] _raw_spin_lock_irqsave+0xa8/0xf0 [ 547.449863][ T789] ? smscore_getbuffer+0xa9/0x440 [ 547.454901][ T789] ? _raw_spin_lock+0x40/0x40 [ 547.459576][ T789] smscore_getbuffer+0xa9/0x440 [ 547.464425][ T789] ? smscore_onresponse+0xf10/0xf10 [ 547.469619][ T789] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 547.475587][ T789] ? read_lock_is_recursive+0x20/0x20 [ 547.480947][ T789] do_submit_urb+0x98/0x360 [ 547.485447][ T789] ? process_scheduled_works+0x957/0x15b0 [ 547.491151][ T789] ? process_scheduled_works+0x957/0x15b0 [ 547.496853][ T789] process_scheduled_works+0xa45/0x15b0 [ 547.502389][ T789] ? assign_work+0x400/0x400 [ 547.506964][ T789] ? assign_work+0x39e/0x400 [ 547.511540][ T789] worker_thread+0xa55/0xfc0 [ 547.516120][ T789] kthread+0x2fa/0x390 [ 547.520184][ T789] ? pr_cont_work+0x560/0x560 [ 547.524844][ T789] ? kthread_blkcg+0xd0/0xd0 [ 547.529419][ T789] ret_from_fork+0x48/0x80 [ 547.533834][ T789] ? kthread_blkcg+0xd0/0xd0 [ 547.538412][ T789] ret_from_fork_asm+0x11/0x20 [ 547.543174][ T789] [ 547.546462][ T789] Kernel Offset: disabled [ 547.550768][ T789] Rebooting in 86400 seconds..