last executing test programs: 6.55414415s ago: executing program 1 (id=5130): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x345601) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x321, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r5, r6, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(r6, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r7, 0x0, 0x100) ioctl$USBDEVFS_CONTROL(r0, 0x4008550c, &(0x7f0000000100)={0x0, 0x1, 0x7, 0x1, 0x0, 0x7fffffff, 0x0}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) capset(&(0x7f0000000880)={0x19980330}, &(0x7f00000008c0)={0x7, 0xffff, 0x7, 0x80, 0x8, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) 2.930134379s ago: executing program 1 (id=5160): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000240)) 2.602446251s ago: executing program 3 (id=5162): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000001a00)={[{@sys_tz}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@keep_last_dots}, {@errors_continue}, {@gid}, {@discard}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x11, 0x1533, &(0x7f0000001b00)="$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") mknod$loop(&(0x7f0000005f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rename(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') 2.602290192s ago: executing program 1 (id=5163): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) wait4(r3, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000640)=r3, 0x12) 2.406433015s ago: executing program 3 (id=5166): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x100d, 0x1a2d82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x7}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = syz_open_dev$loop(0x0, 0x9ea, 0x100) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0xfffffff7, 0x5, 0x1a, 0x1, "82b36982613231bf822d08228a783b881a0bcdbc64268cea109bbaca0c50ca08bf373ef45965d0e52e4887a189b567db0ba3d2915648ba9e5bc81e0da0137b16", "64a8db7afaa5f3c62bf487c92eeea9c577d2f1649013cfe3ca15f82fd22f830b", [0x7bb, 0x3]}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000840), 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f00000009c0)=0xa4b7, 0x4) r6 = gettid() madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.404139795s ago: executing program 2 (id=5167): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.228983647s ago: executing program 2 (id=5169): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./control\x00', 0x400, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x7fffffff) 2.170693951s ago: executing program 0 (id=5170): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) 2.138427633s ago: executing program 1 (id=5171): r0 = socket(0x2, 0x3, 0xff) r1 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6) r2 = dup(r1) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) 2.025076081s ago: executing program 0 (id=5172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ffff00006dad33", "2607080d7f4f87f6fd4ef2dece6c7ceb", '\x00', "230100"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="478c18", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) 1.766654909s ago: executing program 0 (id=5173): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 1.766539029s ago: executing program 2 (id=5174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.727814962s ago: executing program 1 (id=5175): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x80) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000005e80)) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40010043, 0x0) syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x214001, &(0x7f0000006000), 0x1, 0x5def, &(0x7f0000000000)="$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") 1.555501583s ago: executing program 2 (id=5176): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) 1.406644573s ago: executing program 3 (id=5177): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) 1.356354077s ago: executing program 0 (id=5178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1.291716251s ago: executing program 2 (id=5179): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x22201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) io_setup(0x7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') readlinkat(r6, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000280)=""/144, 0x90) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f00000001c0)) 1.16989778s ago: executing program 3 (id=5180): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) 683.158693ms ago: executing program 3 (id=5181): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)={r1, r1, 0x4, 0x1, &(0x7f00000001c0)="af", 0xc0, 0x4, 0x9339, 0x6, 0xd, 0x2, 0x7, 'syz0\x00'}) 169.907588ms ago: executing program 2 (id=5182): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, &(0x7f0000000500)='file3/file5\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 118.676012ms ago: executing program 1 (id=5183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f442ad796bd667cb12ea9950987390200873103", "0f9dafb4", "e4002cc39425269a"}, 0x38) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 118.483281ms ago: executing program 0 (id=5184): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000440)='.!@*\x00', &(0x7f0000000740)="e5", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG, priority 0 [ 2137.430330][T24775] syzkaller0: entered promiscuous mode [ 2137.467914][T24775] syzkaller0: entered allmulticast mode [ 2137.682723][T24772] tipc: Resetting bearer [ 2137.714418][T24771] tipc: Resetting bearer [ 2137.766756][T24771] tipc: Disabling bearer [ 2137.915418][ T5779] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2138.335667][ T5779] usb 3-1: Using ep0 maxpacket: 16 [ 2138.399377][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.481927][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.675424][ T5779] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2138.822662][ T5779] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2138.857780][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.066415][ T5779] usb 3-1: config 0 descriptor?? [ 2141.214721][T24788] loop0: detected capacity change from 0 to 1024 [ 2141.398742][ T5779] usbhid 3-1:0.0: can't add hid device: -71 [ 2141.432345][ T5779] usbhid: probe of 3-1:0.0 failed with error -71 [ 2141.484414][ T5779] usb 3-1: USB disconnect, device number 51 [ 2141.642380][ T1093] hfsplus: b-tree write err: -5, ino 25 [ 2141.673720][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 2141.699778][ T1093] hfsplus: b-tree write err: -5, ino 2 [ 2145.853941][T24821] syzkaller0: entered promiscuous mode [ 2145.895391][T24821] syzkaller0: entered allmulticast mode [ 2147.585344][ T5779] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2147.785631][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 2147.834323][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.848799][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.860751][ T5779] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2147.876682][ T5779] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2147.889145][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.909774][ T5779] usb 2-1: config 0 descriptor?? [ 2148.722369][ T5779] usbhid 2-1:0.0: can't add hid device: -71 [ 2148.740608][ T5779] usbhid: probe of 2-1:0.0 failed with error -71 [ 2148.801354][ T5779] usb 2-1: USB disconnect, device number 43 [ 2154.497802][T20471] Bluetooth: hci3: command 0x0405 tx timeout [ 2155.462329][T24870] syzkaller0: entered promiscuous mode [ 2155.473594][T24870] syzkaller0: entered allmulticast mode [ 2158.959792][ T5779] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2159.159404][ T5779] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2159.266360][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.370117][ T5779] usb 4-1: config 0 descriptor?? [ 2159.403937][ T5779] cp210x 4-1:0.0: cp210x converter detected [ 2159.826807][ T5779] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2160.156527][ T5779] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2160.175458][ T5779] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 2160.215813][ T5779] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2160.266184][ T5779] usb 4-1: USB disconnect, device number 43 [ 2160.315788][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2160.472609][ T5779] cp210x 4-1:0.0: device disconnected [ 2161.201418][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.263555][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.504550][T24911] syzkaller0: entered promiscuous mode [ 2161.512162][T24911] syzkaller0: entered allmulticast mode [ 2172.409938][T24966] loop3: detected capacity change from 0 to 32768 [ 2172.460225][T24966] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2172.855631][T24966] XFS (loop3): Ending clean mount [ 2173.847286][T24966] XFS (loop3): Quotacheck needed: Please wait. [ 2175.279735][T24966] XFS (loop3): Quotacheck: Done. [ 2175.513580][T16388] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2178.485366][ T786] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2178.494309][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2178.695596][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 2178.705496][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 2178.753708][ T786] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2178.791251][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.854166][ T786] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2178.879959][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2178.924987][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.974475][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2179.034859][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.075147][ T786] usb 3-1: config 0 descriptor?? [ 2179.103890][T22075] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2179.141611][ T786] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2179.152041][ T9] usb 2-1: config 0 descriptor?? [ 2179.164027][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2179.309734][T22075] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2179.322688][T22075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.338363][T22075] usb 1-1: config 0 descriptor?? [ 2179.349706][T22075] cp210x 1-1:0.0: cp210x converter detected [ 2179.983799][T22075] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2180.230401][T22075] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2180.259799][T22075] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 2180.372877][T22075] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2180.386913][T22075] usb 1-1: USB disconnect, device number 62 [ 2180.402664][T22075] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2180.470299][T22075] cp210x 1-1:0.0: device disconnected [ 2181.617926][ T786] usb 2-1: USB disconnect, device number 44 [ 2181.656332][ T5779] usb 3-1: USB disconnect, device number 52 [ 2182.791135][T25038] loop2: detected capacity change from 0 to 1024 [ 2183.136666][T18702] hfsplus: b-tree write err: -5, ino 25 [ 2183.142782][T18702] hfsplus: b-tree write err: -5, ino 4 [ 2183.150667][T18702] hfsplus: b-tree write err: -5, ino 2 [ 2183.186958][T25042] loop3: detected capacity change from 0 to 256 [ 2183.983174][T25042] FAT-fs (loop3): Directory bread(block 64) failed [ 2183.990252][T25042] FAT-fs (loop3): Directory bread(block 65) failed [ 2183.997520][T25042] FAT-fs (loop3): Directory bread(block 66) failed [ 2184.005320][T25042] FAT-fs (loop3): Directory bread(block 67) failed [ 2184.012390][T25042] FAT-fs (loop3): Directory bread(block 68) failed [ 2184.019245][T25042] FAT-fs (loop3): Directory bread(block 69) failed [ 2184.026363][T25042] FAT-fs (loop3): Directory bread(block 70) failed [ 2184.033344][T25042] FAT-fs (loop3): Directory bread(block 71) failed [ 2184.041933][T25042] FAT-fs (loop3): Directory bread(block 72) failed [ 2184.049196][T25042] FAT-fs (loop3): Directory bread(block 73) failed [ 2184.345345][ T786] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2186.382973][ T786] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2186.393473][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.436316][ T786] usb 3-1: config 0 descriptor?? [ 2186.455624][ T786] cp210x 3-1:0.0: cp210x converter detected [ 2188.425409][ T786] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 2188.486007][ T786] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 2188.516976][ T786] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2188.626167][ T786] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2188.658265][ T786] usb 3-1: USB disconnect, device number 53 [ 2188.718830][ T786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2188.817347][ T786] cp210x 3-1:0.0: device disconnected [ 2189.850135][T25067] loop2: detected capacity change from 0 to 1024 [ 2190.135946][T18891] hfsplus: b-tree write err: -5, ino 25 [ 2190.142443][T18891] hfsplus: b-tree write err: -5, ino 4 [ 2190.190554][T18891] hfsplus: b-tree write err: -5, ino 2 [ 2190.230132][T25071] loop3: detected capacity change from 0 to 256 [ 2190.479122][T25071] FAT-fs (loop3): Directory bread(block 64) failed [ 2190.487046][T25071] FAT-fs (loop3): Directory bread(block 65) failed [ 2190.494854][T25071] FAT-fs (loop3): Directory bread(block 66) failed [ 2190.502580][T25071] FAT-fs (loop3): Directory bread(block 67) failed [ 2190.510510][T25071] FAT-fs (loop3): Directory bread(block 68) failed [ 2190.517954][T25071] FAT-fs (loop3): Directory bread(block 69) failed [ 2190.525451][T25071] FAT-fs (loop3): Directory bread(block 70) failed [ 2190.532770][T25071] FAT-fs (loop3): Directory bread(block 71) failed [ 2190.540698][T25071] FAT-fs (loop3): Directory bread(block 72) failed [ 2190.549728][T25071] FAT-fs (loop3): Directory bread(block 73) failed [ 2195.976131][T25098] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4625'. [ 2196.568013][T25108] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4629'. [ 2197.327420][T25114] loop3: detected capacity change from 0 to 1024 [ 2197.562330][T18702] hfsplus: b-tree write err: -5, ino 25 [ 2197.571181][T18702] hfsplus: b-tree write err: -5, ino 4 [ 2197.604234][T25118] loop0: detected capacity change from 0 to 256 [ 2197.611541][T18702] hfsplus: b-tree write err: -5, ino 2 [ 2197.689004][T25118] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2205.880082][T25163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4644'. [ 2206.542525][T25165] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 2206.770017][T25167] loop2: detected capacity change from 0 to 256 [ 2206.817702][T25167] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2207.455535][T13489] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2207.694913][T13489] usb 3-1: Using ep0 maxpacket: 16 [ 2207.713971][T13489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.755238][T13489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2207.775610][T13489] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2207.805665][T13489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.886588][T13489] usb 3-1: config 0 descriptor?? [ 2207.901809][T13489] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2210.082526][T25178] loop0: detected capacity change from 0 to 1024 [ 2210.623466][T22075] usb 3-1: USB disconnect, device number 54 [ 2210.749014][T12259] hfsplus: b-tree write err: -5, ino 25 [ 2210.755104][T12259] hfsplus: b-tree write err: -5, ino 4 [ 2210.772488][T12259] hfsplus: b-tree write err: -5, ino 2 [ 2212.173152][T25202] syzkaller0: entered promiscuous mode [ 2212.233291][T25202] syzkaller0: entered allmulticast mode [ 2214.281775][T25210] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4658'. [ 2215.847094][T25217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4659'. [ 2218.287936][T20471] Bluetooth: hci3: command 0x0405 tx timeout [ 2222.609326][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.617436][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2229.934444][T25289] loop2: detected capacity change from 0 to 256 [ 2230.105881][T25289] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2249.556257][T25359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'. [ 2250.146804][T25366] loop3: detected capacity change from 0 to 1024 [ 2250.208998][T25366] EXT4-fs: Ignoring removed bh option [ 2250.245562][T25366] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2250.924976][T25366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2251.899323][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2254.881016][T25383] loop3: detected capacity change from 0 to 512 [ 2254.989804][T25383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2255.076866][T25383] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.4708: bad orphan inode 131083 [ 2255.130943][T25383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2255.305398][ T5869] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2255.535438][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2255.539078][ T5869] usb 1-1: device descriptor read/64, error -71 [ 2255.806004][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 2255.819543][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2255.869428][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2255.906320][ T5869] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2255.919628][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2255.987604][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2256.085509][ T5869] usb 1-1: device descriptor read/64, error -71 [ 2256.404009][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2256.499291][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.647077][ T9] usb 3-1: config 0 descriptor?? [ 2257.475500][ T5869] usb usb1-port1: attempt power cycle [ 2257.735456][T18865] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2257.877514][T25396] syzkaller0: entered promiscuous mode [ 2257.955310][ T5869] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2257.981306][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 2257.987839][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 2257.995242][T25396] syzkaller0: entered allmulticast mode [ 2258.006556][T18865] usb 4-1: Using ep0 maxpacket: 16 [ 2258.033565][ T9] usb 3-1: USB disconnect, device number 55 [ 2258.040611][T18865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2258.069920][T18865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2258.102056][T18865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2258.131617][T18865] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2258.152731][T18865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.163448][ T5869] usb 1-1: device descriptor read/8, error -71 [ 2258.245781][T18865] usb 4-1: config 0 descriptor?? [ 2260.292312][T18865] usbhid 4-1:0.0: can't add hid device: -71 [ 2260.320033][T18865] usbhid: probe of 4-1:0.0 failed with error -71 [ 2260.352204][T18865] usb 4-1: USB disconnect, device number 44 [ 2260.547979][T25410] loop1: detected capacity change from 0 to 4096 [ 2260.689787][T25410] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2260.780977][T25410] ntfs3: loop1: Failed to load $Extend (-22). [ 2260.815579][T25410] ntfs3: loop1: Failed to initialize $Extend. [ 2263.451311][T25417] loop3: detected capacity change from 0 to 512 [ 2263.514442][T25417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2263.577567][T25417] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.4717: bad orphan inode 131083 [ 2263.647498][T25417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2263.689402][T25424] loop1: detected capacity change from 0 to 512 [ 2263.959623][T25424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2264.015427][T18865] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2264.016404][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2264.088855][T25424] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2264.301249][T18865] usb 3-1: Using ep0 maxpacket: 16 [ 2264.343240][T18865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2264.399562][T18865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2264.455838][T18865] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2264.485608][T18865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.490739][T16664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2264.514821][T18865] usb 3-1: Product: syz [ 2264.528498][T18865] usb 3-1: Manufacturer: syz [ 2264.590120][T18865] usb 3-1: SerialNumber: syz [ 2265.719292][T18865] usb 3-1: config 0 descriptor?? [ 2265.894514][T18865] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 2265.954584][T18865] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 2267.342188][T18865] mcba_usb: probe of 3-1:0.0 failed with error -90 [ 2267.385557][T18865] usb 3-1: USB disconnect, device number 56 [ 2267.635348][T13489] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2267.731478][T25453] loop1: detected capacity change from 0 to 1024 [ 2267.734141][T25452] loop3: detected capacity change from 0 to 1024 [ 2267.739359][T25453] EXT4-fs: Ignoring removed bh option [ 2267.774139][T25452] EXT4-fs: Ignoring removed bh option [ 2267.787364][T25453] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2267.801453][T25452] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2267.815299][T13489] usb 1-1: Using ep0 maxpacket: 16 [ 2267.824883][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.838278][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2267.840076][T25453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2267.848338][T13489] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2267.848393][T13489] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2267.848415][T13489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.895082][T25452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2267.913074][T13489] usb 1-1: config 0 descriptor?? [ 2268.333370][T16664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2268.690292][T25462] loop2: detected capacity change from 0 to 1024 [ 2268.741174][T25462] EXT4-fs: Ignoring removed bh option [ 2268.810544][T25462] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2268.814940][T13489] usbhid 1-1:0.0: can't add hid device: -71 [ 2268.853564][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2268.866604][T25462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2268.886052][T13489] usbhid: probe of 1-1:0.0 failed with error -71 [ 2268.934555][T13489] usb 1-1: USB disconnect, device number 67 [ 2269.285479][ T5869] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2269.303192][T16981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2269.367540][T25480] loop2: detected capacity change from 0 to 512 [ 2269.384733][T25480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2269.408618][T25480] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.4736: bad orphan inode 131083 [ 2269.427532][T22075] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2269.440161][T25480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2269.496043][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 2269.502857][T25484] loop0: detected capacity change from 0 to 512 [ 2269.505583][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.541139][T25484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2269.543390][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.560927][T25484] ext4 filesystem being mounted at /597/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2269.580604][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2269.600068][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2269.615551][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.629987][ T5869] usb 2-1: config 0 descriptor?? [ 2269.679164][T22075] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2269.695674][T22075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.719042][T16981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2269.737472][T22075] usb 4-1: config 0 descriptor?? [ 2269.777029][T22075] cp210x 4-1:0.0: cp210x converter detected [ 2269.791752][T16146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2270.210918][T22075] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2270.598377][T25488] loop2: detected capacity change from 0 to 4096 [ 2270.658403][ T5869] usbhid 2-1:0.0: can't add hid device: -71 [ 2270.682087][T25491] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2270.714727][ T5869] usbhid: probe of 2-1:0.0 failed with error -71 [ 2270.742149][ T5869] usb 2-1: USB disconnect, device number 45 [ 2270.826149][T25493] overlayfs: missing 'lowerdir' [ 2270.861396][T25495] loop0: detected capacity change from 0 to 1024 [ 2270.906208][T25495] EXT4-fs: Ignoring removed bh option [ 2270.939603][T25495] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2271.003384][T25495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2271.108053][T25502] loop2: detected capacity change from 0 to 512 [ 2271.182423][T25502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2271.201657][T25502] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2271.365984][T16146] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2271.389157][T16981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2271.619640][T25508] loop1: detected capacity change from 0 to 4096 [ 2271.682514][T25508] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2271.724458][T25508] ntfs3: loop1: Failed to load $Extend (-22). [ 2271.749742][T25508] ntfs3: loop1: Failed to initialize $Extend. [ 2271.785299][T13489] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2271.985239][T13489] usb 3-1: Using ep0 maxpacket: 16 [ 2271.992297][T25512] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2271.993809][T13489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.016733][T25512] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2272.021845][T13489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.041312][T25512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2272.061151][T13489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2272.085490][T25512] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2272.098714][T25512] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2272.112205][T25512] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2272.123286][T13489] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2272.150131][T22075] usb 4-1: USB disconnect, device number 45 [ 2272.175955][T13489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.241391][T25515] loop1: detected capacity change from 0 to 4096 [ 2272.254866][T13489] usb 3-1: config 0 descriptor?? [ 2272.274040][T22075] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2272.312400][T22075] cp210x 4-1:0.0: device disconnected [ 2272.339642][T25518] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2272.487791][T25515] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2272.500539][T25515] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2274.129935][T19326] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.207014][T25512] Bluetooth: hci4: command tx timeout [ 2274.307779][T25533] loop1: detected capacity change from 0 to 512 [ 2274.317116][T25533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2274.352509][T13489] usbhid 3-1:0.0: can't add hid device: -71 [ 2274.377389][T19326] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.385299][T13489] usbhid: probe of 3-1:0.0 failed with error -71 [ 2274.425574][T25533] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.4751: bad orphan inode 131083 [ 2274.450835][T13489] usb 3-1: USB disconnect, device number 57 [ 2274.522419][T25533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2274.525891][T19326] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.650728][T19326] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2274.688512][T16664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2274.845281][T25511] chnl_net:caif_netlink_parms(): no params data found [ 2274.917140][T25540] xt_hashlimit: size too large, truncated to 1048576 [ 2275.065874][T25544] loop2: detected capacity change from 0 to 1024 [ 2275.122631][T25544] EXT4-fs: Ignoring removed bh option [ 2275.129142][T25542] –: renamed from vxcan1 (while UP) [ 2275.198225][T25544] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 2275.377120][T25544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2276.037767][ T27] audit: type=1800 audit(1775831271.503:78): pid=25556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4753" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 2276.206614][T25511] bridge0: port 1(bridge_slave_0) entered blocking state [ 2276.214465][T25511] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.286166][T25512] Bluetooth: hci4: command tx timeout [ 2276.298695][T25511] bridge_slave_0: entered allmulticast mode [ 2276.339480][T25511] bridge_slave_0: entered promiscuous mode [ 2276.366026][T25511] bridge0: port 2(bridge_slave_1) entered blocking state [ 2276.374372][T25511] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.383296][T25511] bridge_slave_1: entered allmulticast mode [ 2276.397881][T16981] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2276.436642][T25511] bridge_slave_1: entered promiscuous mode [ 2276.521381][T19326] tipc: Left network mode [ 2277.457128][T25511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2277.524957][T25511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2277.552232][T25560] loop3: detected capacity change from 0 to 4096 [ 2277.858998][T25560] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 2277.914060][T25560] ntfs3: loop3: Failed to load $Extend (-22). [ 2277.950624][T25560] ntfs3: loop3: Failed to initialize $Extend. [ 2278.103253][T25511] team0: Port device team_slave_0 added [ 2278.283633][T25511] team0: Port device team_slave_1 added [ 2278.368561][T25512] Bluetooth: hci4: command tx timeout [ 2278.625470][ T5869] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2278.665975][T25511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2278.703364][T25511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.775203][T25511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2278.809683][T25511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2278.825185][T25511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2278.832021][ T5869] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2278.905498][T25511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2278.915604][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.971886][ T5869] usb 4-1: config 0 descriptor?? [ 2278.998335][ T5869] cp210x 4-1:0.0: cp210x converter detected [ 2279.442344][T25511] hsr_slave_0: entered promiscuous mode [ 2279.456403][ T5869] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2279.486185][T25511] hsr_slave_1: entered promiscuous mode [ 2279.493918][ T5869] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2279.511564][T25511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2279.523975][ T5869] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 2279.533308][T25511] Cannot create hsr debugfs directory [ 2279.593722][ T5869] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2280.085255][ T23] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2280.208182][T19326] hsr_slave_0: left promiscuous mode [ 2280.226413][T19326] hsr_slave_1: left promiscuous mode [ 2280.246233][T19326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2280.254248][T19326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2280.273694][T19326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2280.299199][ T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2280.306442][T19326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2280.315258][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.347700][T19326] bridge_slave_1: left allmulticast mode [ 2280.358314][ T23] usb 3-1: config 0 descriptor?? [ 2280.373501][T19326] bridge_slave_1: left promiscuous mode [ 2280.382023][ T23] cp210x 3-1:0.0: cp210x converter detected [ 2280.397366][T19326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.410871][T19326] bridge_slave_0: left allmulticast mode [ 2280.422968][T19326] bridge_slave_0: left promiscuous mode [ 2280.430962][T19326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.445585][T25512] Bluetooth: hci4: command tx timeout [ 2280.502366][T19326] bond0: left allmulticast mode [ 2280.508658][T19326] bond_slave_0: left allmulticast mode [ 2280.514997][T19326] bond_slave_1: left allmulticast mode [ 2280.523140][T19326] bond0: left promiscuous mode [ 2280.534444][T19326] bond_slave_0: left promiscuous mode [ 2280.542750][T19326] bond_slave_1: left promiscuous mode [ 2280.558736][T19326] veth1_macvtap: left promiscuous mode [ 2280.568690][T19326] veth0_macvtap: left promiscuous mode [ 2280.579952][T19326] veth1_vlan: left promiscuous mode [ 2280.586376][T19326] veth0_vlan: left promiscuous mode [ 2280.807347][ T23] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2280.818700][ T23] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2280.830853][ T23] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 2280.871714][ T23] usb 3-1: cp210x converter now attached to ttyUSB1 [ 2281.397141][T22075] usb 4-1: USB disconnect, device number 46 [ 2281.418834][T22075] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2281.433011][T22075] cp210x 4-1:0.0: device disconnected [ 2282.874650][ T5779] usb 3-1: USB disconnect, device number 58 [ 2282.893187][ T5779] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2282.915014][ T5779] cp210x 3-1:0.0: device disconnected [ 2283.576018][T19326] team0 (unregistering): Port device team_slave_1 removed [ 2283.675356][T18865] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2283.702929][T19326] team0 (unregistering): Port device team_slave_0 removed [ 2283.821834][T19326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2283.865863][T18865] usb 3-1: Using ep0 maxpacket: 16 [ 2283.877141][T18865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.922411][T18865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2283.935872][T18865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2283.951920][T18865] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2283.962744][T18865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.973021][T19326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2283.989800][T18865] usb 3-1: config 0 descriptor?? [ 2284.064859][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2284.072610][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.336764][ T23] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2284.578905][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 2284.591171][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.607053][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2284.624353][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2284.635368][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.645426][ T23] usb 2-1: Product: syz [ 2284.650055][ T23] usb 2-1: Manufacturer: syz [ 2284.656685][ T23] usb 2-1: SerialNumber: syz [ 2284.658494][T18865] usbhid 3-1:0.0: can't add hid device: -71 [ 2284.671943][ T23] usb 2-1: config 0 descriptor?? [ 2284.681228][T18865] usbhid: probe of 3-1:0.0 failed with error -71 [ 2284.718253][T18865] usb 3-1: USB disconnect, device number 59 [ 2284.891467][T19326] bond0 (unregistering): Released all slaves [ 2285.075315][ T23] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 2285.103486][ T23] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 2285.255874][ T23] mcba_usb: probe of 2-1:0.0 failed with error -90 [ 2285.325690][ T23] usb 2-1: USB disconnect, device number 46 [ 2285.440124][T13489] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2285.655748][T13489] usb 4-1: Using ep0 maxpacket: 32 [ 2285.663214][T18865] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2285.674311][T13489] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2285.716837][T13489] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2285.838979][T13489] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 2285.854113][T13489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.925230][T18865] usb 3-1: Using ep0 maxpacket: 16 [ 2286.103343][T18865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.160792][T13489] usb 4-1: Product: syz [ 2286.198116][T13489] usb 4-1: Manufacturer: syz [ 2286.203361][T18865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.245791][T13489] usb 4-1: SerialNumber: syz [ 2286.328890][T18865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2286.428319][T13489] usb 4-1: config 0 descriptor?? [ 2286.439461][T18865] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2286.476441][T18865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.490780][T18865] usb 3-1: config 0 descriptor?? [ 2286.724908][T13489] usb 4-1: USB disconnect, device number 47 [ 2287.096839][T25511] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2287.133558][T25511] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2287.164942][T25511] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2287.188362][T18865] usbhid 3-1:0.0: can't add hid device: -71 [ 2287.200464][T18865] usbhid: probe of 3-1:0.0 failed with error -71 [ 2287.211604][T25511] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2287.233659][T18865] usb 3-1: USB disconnect, device number 60 [ 2287.394454][T25511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2287.424976][T25511] 8021q: adding VLAN 0 to HW filter on device team0 [ 2287.476908][T18891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.484943][T18891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.503969][T18891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.511775][T18891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2288.499247][T25511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2288.625535][ T786] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2288.684180][T25511] veth0_vlan: entered promiscuous mode [ 2288.727534][T25511] veth1_vlan: entered promiscuous mode [ 2288.922350][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2289.202830][ T786] usb 3-1: config 0 has no interfaces? [ 2289.302406][ T786] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2289.345793][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.351076][T25511] veth0_macvtap: entered promiscuous mode [ 2289.376496][ T786] usb 3-1: config 0 descriptor?? [ 2289.394173][T25511] veth1_macvtap: entered promiscuous mode [ 2289.450900][T25511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2289.462770][T25511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.474282][T25511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2289.486450][T25511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.497938][T25511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2289.509873][T25511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.542254][T25511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2289.573868][T25511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2289.653202][T25511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.683895][T25511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2289.959112][T25700] loop3: detected capacity change from 0 to 32768 [ 2290.034582][T25700] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.4786 (25700) [ 2290.131499][T25700] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 2290.144214][T25700] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 2290.155294][T25700] BTRFS info (device loop3): force zlib compression, level 3 [ 2290.164056][T25700] BTRFS info (device loop3): force clearing of disk cache [ 2290.172352][T25700] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2290.184806][T25700] BTRFS info (device loop3): use zstd compression, level 3 [ 2290.193370][T25700] BTRFS info (device loop3): using free space tree [ 2290.206778][T25511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.219066][T25511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2290.263013][T25511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.279570][T25511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2290.294976][T25700] BTRFS info (device loop3): enabling ssd optimizations [ 2290.304806][T25700] BTRFS info (device loop3): auto enabling async discard [ 2290.320181][T25700] BTRFS info (device loop3): rebuilding free space tree [ 2290.348794][T25511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.407502][T25511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.438388][T25511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.451193][T25511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2290.818384][T25724] loop1: detected capacity change from 0 to 32768 [ 2290.999316][T25724] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.4787 (25724) [ 2291.202312][ T786] usb 3-1: USB disconnect, device number 61 [ 2291.375372][T25477] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2291.523436][T12259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.550463][T12259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2291.563175][T16388] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 2291.750934][T21747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.799134][T21747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.515343][ T786] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2292.643321][T25745] loop0: detected capacity change from 0 to 4096 [ 2293.071140][ T786] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2293.203596][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2293.239380][T25745] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 2293.248898][ T786] usb 3-1: config 0 descriptor?? [ 2293.276328][ T786] cp210x 3-1:0.0: cp210x converter detected [ 2293.317012][T25745] ntfs3: loop0: Failed to load $Extend (-22). [ 2293.360704][T25745] ntfs3: loop0: Failed to initialize $Extend. [ 2295.214075][ T786] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2296.083922][ T786] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 2296.153258][ T786] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2296.237354][ T786] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2296.312611][ T786] usb 3-1: USB disconnect, device number 62 [ 2296.381364][ T786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2296.474972][ T786] cp210x 3-1:0.0: device disconnected [ 2296.522806][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 2298.206416][T18865] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2298.994527][T18865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2299.153204][T18865] usb 1-1: config 0 has no interfaces? [ 2299.219576][T18865] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2299.415357][T18865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.496311][T18865] usb 1-1: config 0 descriptor?? [ 2299.543818][T18865] usb 1-1: can't set config #0, error -71 [ 2299.576048][T18865] usb 1-1: USB disconnect, device number 68 [ 2299.633743][T25802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4804'. [ 2299.725484][T25787] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2299.895348][ T23] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2300.087871][T25787] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2300.469758][T25787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.616285][T25787] usb 2-1: config 0 descriptor?? [ 2300.833366][T25787] cp210x 2-1:0.0: cp210x converter detected [ 2300.949765][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2300.961963][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.012445][ T23] usb 4-1: config 0 descriptor?? [ 2301.037843][ T23] cp210x 4-1:0.0: cp210x converter detected [ 2301.138881][T25787] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2301.235460][T18865] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2301.384441][T25787] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2301.429926][T25787] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2301.445252][T18865] usb 1-1: Using ep0 maxpacket: 16 [ 2301.462296][T25787] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2301.476579][ T23] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2301.477163][T18865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2301.504580][T18865] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2301.520547][T18865] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2301.534619][T18865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.544589][T18865] usb 1-1: Product: syz [ 2301.554170][T18865] usb 1-1: Manufacturer: syz [ 2301.580457][T18865] usb 1-1: SerialNumber: syz [ 2301.633147][T18865] usb 1-1: config 0 descriptor?? [ 2301.689039][T18865] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 2301.723304][T18865] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 2301.727723][ T5779] usb 2-1: USB disconnect, device number 47 [ 2301.756154][ T23] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2301.764226][ T23] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 2301.845538][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2301.865051][ T5779] cp210x 2-1:0.0: device disconnected [ 2301.867732][ T23] usb 4-1: cp210x converter now attached to ttyUSB1 [ 2301.887244][T18865] mcba_usb: probe of 1-1:0.0 failed with error -90 [ 2301.986953][T18865] usb 1-1: USB disconnect, device number 69 [ 2302.033132][T25787] usb 4-1: USB disconnect, device number 48 [ 2302.075862][T25787] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2302.114964][T25787] cp210x 4-1:0.0: device disconnected [ 2308.227429][T25892] loop3: detected capacity change from 0 to 512 [ 2308.320604][T25892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2308.382483][T25892] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.4821: bad orphan inode 131083 [ 2308.406689][T25892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2308.515464][T13489] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2308.644352][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2308.708520][T13489] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2308.735718][T13489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2308.822336][T13489] usb 1-1: config 0 descriptor?? [ 2310.472041][T13489] cp210x 1-1:0.0: cp210x converter detected [ 2311.234297][T13489] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2311.537821][T13489] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2311.603363][T13489] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 2313.127045][T13489] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2313.235342][T13489] usb 1-1: USB disconnect, device number 70 [ 2313.365805][T13489] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2313.488620][T13489] cp210x 1-1:0.0: device disconnected [ 2315.265030][T25944] loop1: detected capacity change from 0 to 512 [ 2315.351771][T25944] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2315.404108][T25947] netlink: 'syz.3.4836': attribute type 13 has an invalid length. [ 2315.419018][T25944] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.4833: bad orphan inode 131083 [ 2315.441711][T25944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2315.644278][T25947] gretap0: refused to change device tx_queue_len [ 2315.665869][T25947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2315.676164][T16664] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2316.448730][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4842'. [ 2317.312644][T25973] loop3: detected capacity change from 0 to 512 [ 2317.346497][T25973] EXT4-fs: Ignoring removed bh option [ 2317.352272][T25973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2317.471028][T25973] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 2317.608864][T25973] EXT4-fs (loop3): 1 truncate cleaned up [ 2317.678977][T25973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2317.884055][T25512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2317.884380][T25973] overlayfs: upper fs needs to support d_type. [ 2317.927885][T25512] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2317.944684][T25512] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2317.958840][T25512] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2317.976790][T25512] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2317.993379][T25512] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2318.055280][T13489] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2318.110160][T16388] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 2318.144478][T16388] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 2318.189518][T16388] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 2318.266353][T13489] usb 1-1: Using ep0 maxpacket: 16 [ 2318.274924][T13489] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2318.285764][T13489] usb 1-1: config 0 has no interface number 0 [ 2318.293333][T13489] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.305991][T18865] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 2318.314272][T13489] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2318.325842][T13489] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 2318.336345][T13489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.355763][T13489] usb 1-1: config 0 descriptor?? [ 2318.387938][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2318.464491][T25985] chnl_net:caif_netlink_parms(): no params data found [ 2318.528159][T18865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2318.551098][T18865] usb 2-1: config 16 has an invalid interface number: 8 but max is 0 [ 2318.574959][T18865] usb 2-1: config 16 has no interface number 0 [ 2318.582917][T18865] usb 2-1: config 16 interface 8 altsetting 127 endpoint 0xA has invalid maxpacket 1024, setting to 8 [ 2318.596009][T18865] usb 2-1: config 16 interface 8 has no altsetting 0 [ 2318.623057][T18865] usb 2-1: string descriptor 0 read error: -22 [ 2318.639605][T18865] usb 2-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice=1d.48 [ 2318.651770][T18865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.692077][T18865] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2318.730676][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.832096][T18865] snd-usb-audio: probe of 2-1:16.8 failed with error -2 [ 2318.850778][T13489] holtek_mouse 0003:04D9:A081.0011: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.0-1/input1 [ 2318.921184][ T5869] usb 2-1: USB disconnect, device number 48 [ 2318.953961][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2319.013306][T23394] usb 1-1: USB disconnect, device number 71 [ 2319.033352][T25985] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.052504][T26006] loop3: detected capacity change from 0 to 512 [ 2319.063212][T26006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2319.065678][T25985] bridge0: port 1(bridge_slave_0) entered disabled state [ 2319.084460][T26006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2319.104452][T26006] EXT4-fs (loop3): 1 truncate cleaned up [ 2319.112901][T26006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2319.146408][T25985] bridge_slave_0: entered allmulticast mode [ 2319.176064][T25985] bridge_slave_0: entered promiscuous mode [ 2319.190609][T26003] fido_id[26003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2319.224936][T25985] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.249103][T25985] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.277027][T25985] bridge_slave_1: entered allmulticast mode [ 2319.280154][T16388] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2319.291552][T25985] bridge_slave_1: entered promiscuous mode [ 2319.389078][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2319.566790][T25512] Bluetooth: hci4: command tx timeout [ 2320.048232][T25512] Bluetooth: hci1: command tx timeout [ 2320.371321][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.492823][T25985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2320.524872][T25985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2320.687968][T25985] team0: Port device team_slave_0 added [ 2320.726514][T25985] team0: Port device team_slave_1 added [ 2320.935293][T13489] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2321.016214][T25985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2321.023651][T25985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2321.266248][ T27] audit: type=1326 audit(1775831316.663:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2321.295792][ C1] vkms_vblank_simulate: vblank timer overrun [ 2321.466828][T25985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2321.775390][T25985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2321.794275][ T27] audit: type=1326 audit(1775831316.663:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2321.824448][T25985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2321.858644][T13489] usb 2-1: Using ep0 maxpacket: 32 [ 2321.883605][T13489] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 2321.920779][T13489] usb 2-1: config 0 has no interface number 0 [ 2321.920801][ T27] audit: type=1326 audit(1775831316.673:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2321.955537][T13489] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2321.975823][T25985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2322.012720][ T27] audit: type=1326 audit(1775831316.673:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.048191][T13489] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2322.108311][ T2960] tipc: Left network mode [ 2322.113640][T13489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.113696][ T27] audit: type=1326 audit(1775831316.673:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.125347][T25512] Bluetooth: hci1: command tx timeout [ 2322.146220][ C1] vkms_vblank_simulate: vblank timer overrun [ 2322.174260][T13489] usb 2-1: Product: syz [ 2322.178825][T13489] usb 2-1: Manufacturer: syz [ 2322.183471][T13489] usb 2-1: SerialNumber: syz [ 2322.215395][ T27] audit: type=1326 audit(1775831316.673:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.240426][T13489] usb 2-1: config 0 descriptor?? [ 2322.246924][T26023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2322.303282][ T27] audit: type=1326 audit(1775831316.673:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.332353][ C1] vkms_vblank_simulate: vblank timer overrun [ 2322.372348][ T27] audit: type=1326 audit(1775831316.673:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.409705][ T27] audit: type=1326 audit(1775831316.683:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.470643][T26023] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2322.501257][ T27] audit: type=1326 audit(1775831316.683:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26024 comm="syz.0.4861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2322.551880][T25985] hsr_slave_0: entered promiscuous mode [ 2322.592625][T25985] hsr_slave_1: entered promiscuous mode [ 2322.605803][T25985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2322.614042][T25985] Cannot create hsr debugfs directory [ 2322.746012][T26049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4866'. [ 2322.758481][T26049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2322.901868][T26049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2323.342699][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880655bd800: rx timeout, send abort [ 2323.359392][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880655bd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2323.593999][T26065] input: syz0 as /devices/virtual/input/input20 [ 2324.205920][T25512] Bluetooth: hci1: command tx timeout [ 2324.256341][T25985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2324.326655][T25985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2324.403989][T25985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2324.444288][T25985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2324.522284][ T2960] hsr_slave_0: left promiscuous mode [ 2324.554408][ T2960] hsr_slave_1: left promiscuous mode [ 2324.576681][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2324.595248][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2324.614977][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2324.639767][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2324.663935][ T2960] bridge_slave_1: left allmulticast mode [ 2324.686821][ T2960] bridge_slave_1: left promiscuous mode [ 2324.701850][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2324.718742][ T2960] bridge_slave_0: left allmulticast mode [ 2324.733476][ T2960] bridge_slave_0: left promiscuous mode [ 2324.741429][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.781632][ T2960] bond0: left allmulticast mode [ 2324.787082][ T2960] bond_slave_0: left allmulticast mode [ 2324.794859][ T2960] bond0: left promiscuous mode [ 2324.802570][ T2960] bond_slave_0: left promiscuous mode [ 2324.812094][ T2960] team_slave_0: left promiscuous mode [ 2324.819223][ T2960] team_slave_1: left promiscuous mode [ 2324.828997][ T2960] veth1_macvtap: left promiscuous mode [ 2324.837027][ T2960] veth0_macvtap: left promiscuous mode [ 2324.843809][ T2960] veth1_vlan: left promiscuous mode [ 2324.860469][ T2960] veth0_vlan: left promiscuous mode [ 2324.873541][T26093] loop0: detected capacity change from 0 to 2048 [ 2324.950663][T26093] loop0: p2 < > p4 [ 2324.966127][T13489] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 2324.980881][T26093] loop0: p4 size 8192 extends beyond EOD, truncated [ 2324.990521][T13489] asix: probe of 2-1:0.188 failed with error -71 [ 2325.043178][T13489] usb 2-1: USB disconnect, device number 49 [ 2325.304145][T23634] udevd[23634]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 2325.317264][T25477] udevd[25477]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 2326.289858][T25512] Bluetooth: hci1: command tx timeout [ 2326.432744][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 2326.511142][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 2326.590123][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2327.207785][ T2960] bond0 (unregistering): Released all slaves [ 2327.379123][T26100] pim6reg: entered allmulticast mode [ 2327.387788][T26101] pim6reg: left allmulticast mode [ 2327.831942][T25985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2327.920092][T25985] 8021q: adding VLAN 0 to HW filter on device team0 [ 2328.003282][T26121] netlink: 'syz.3.4885': attribute type 1 has an invalid length. [ 2328.076566][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.084707][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2328.221012][T26125] veth3: entered allmulticast mode [ 2328.275694][T26125] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 2328.327548][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 2328.335837][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2328.852495][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 2328.852510][ T27] audit: type=1326 audit(1775831324.353:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26145 comm="syz.3.4890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9f1d9c819 code=0x0 [ 2328.913968][T26152] loop5: detected capacity change from 0 to 7 [ 2328.951106][T26152] Dev loop5: unable to read RDB block 7 [ 2328.965207][T26152] loop5: unable to read partition table [ 2328.977895][T26152] loop5: partition table beyond EOD, truncated [ 2328.984878][T26152] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2329.033362][T25985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2329.161792][T25985] veth0_vlan: entered promiscuous mode [ 2329.176101][ T5869] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2329.202488][T25985] veth1_vlan: entered promiscuous mode [ 2329.254366][T25985] veth0_macvtap: entered promiscuous mode [ 2329.280779][T25985] veth1_macvtap: entered promiscuous mode [ 2329.302047][T25985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2329.329040][T25985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.349952][T25985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2329.385202][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 2329.391036][T25985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.417116][ T5869] usb 1-1: config 0 has no interfaces? [ 2329.423041][ T5869] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2329.439564][T25985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2329.450928][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.459906][T25985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.473701][ T5869] usb 1-1: config 0 descriptor?? [ 2329.491124][T25985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2329.514652][T26170] loop1: detected capacity change from 0 to 2048 [ 2329.520493][T25985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2329.538263][T25985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.549325][T25985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2329.577338][T26170] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2329.589399][T25985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.612297][T26170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2329.623606][T25985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2329.689311][T25985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.734500][T25985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.761230][T25985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.781586][T25985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.823919][ T5869] usb 1-1: USB disconnect, device number 72 [ 2330.040085][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2330.068470][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2330.106747][ T2951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2330.131983][ T2951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2331.585356][T16388] bond0: (slave syz_tun): Releasing backup interface [ 2331.630062][T16388] syz_tun (unregistering): left allmulticast mode [ 2331.672239][T20471] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2331.734561][T26214] syz.2.4902 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2331.905417][T20471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2331.922207][T20471] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2331.951417][T20471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2331.976115][T20471] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2331.996176][T20471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2332.742311][T26209] chnl_net:caif_netlink_parms(): no params data found [ 2332.934729][T26209] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.943273][T26209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2332.952352][T26209] bridge_slave_0: entered allmulticast mode [ 2332.960091][T26209] bridge_slave_0: entered promiscuous mode [ 2332.970704][T26209] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.992296][T26209] bridge0: port 2(bridge_slave_1) entered disabled state [ 2333.007607][T26209] bridge_slave_1: entered allmulticast mode [ 2333.016068][T26209] bridge_slave_1: entered promiscuous mode [ 2333.100161][T26209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2333.123656][T26209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2333.199248][T26242] netlink: 'syz.2.4909': attribute type 2 has an invalid length. [ 2333.264012][T26209] team0: Port device team_slave_0 added [ 2333.290675][T26209] team0: Port device team_slave_1 added [ 2333.379231][T26209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2333.400617][T26209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2333.452804][T26209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2333.558182][ C1] vkms_vblank_simulate: vblank timer overrun [ 2333.585033][T26209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2333.602593][T26209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2333.633295][ C1] vkms_vblank_simulate: vblank timer overrun [ 2333.640361][T26209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2333.792202][T26209] hsr_slave_0: entered promiscuous mode [ 2333.819275][T20471] Bluetooth: hci2: unexpected cc 0x0c25 length: 2 < 3 [ 2333.830723][T26209] hsr_slave_1: entered promiscuous mode [ 2333.857648][T26209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2333.869076][T26209] Cannot create hsr debugfs directory [ 2333.974574][T26257] kvm: pic: level sensitive irq not supported [ 2333.974911][T26257] kvm: pic: non byte write [ 2334.207031][T20471] Bluetooth: hci0: command tx timeout [ 2334.849270][T26209] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.010321][T26209] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.101855][T26209] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.194007][T26209] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2335.295391][ T786] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2335.508683][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.532514][ T786] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2335.560038][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.586177][T26209] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2335.617799][ T786] usb 3-1: config 0 descriptor?? [ 2335.631067][T26209] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2335.650886][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 2335.682158][T26209] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2335.708594][T26209] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2335.865880][ T786] pwc: send_video_command error -71 [ 2335.881454][ T786] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2335.927755][ T786] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 2335.938898][T26286] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2335.944133][ T786] usb 3-1: USB disconnect, device number 63 [ 2335.991944][T26209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2336.042546][T26209] 8021q: adding VLAN 0 to HW filter on device team0 [ 2336.064517][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 2336.072203][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2336.098503][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 2336.105894][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2336.285469][T20471] Bluetooth: hci0: command tx timeout [ 2336.335267][T10479] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2336.396276][T26209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2336.445003][T26209] veth0_vlan: entered promiscuous mode [ 2336.459070][T26209] veth1_vlan: entered promiscuous mode [ 2336.488261][T26209] veth0_macvtap: entered promiscuous mode [ 2336.499140][T26209] veth1_macvtap: entered promiscuous mode [ 2336.506723][ T786] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2336.515697][T13489] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2336.543144][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.554511][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.566129][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.578655][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.583739][T10479] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2336.589440][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.589463][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.589479][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2336.589492][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.591075][T26209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2336.621221][T10479] usb 2-1: config 0 has no interface number 0 [ 2336.657726][T10479] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2336.665711][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2336.681780][T10479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.682100][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.691607][T10479] usb 2-1: Product: syz [ 2336.706949][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2336.709831][T10479] usb 2-1: Manufacturer: syz [ 2336.718186][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.723149][T13489] usb 1-1: Using ep0 maxpacket: 32 [ 2336.736336][T26209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2336.747774][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2336.750518][T26209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2336.762340][T10479] usb 2-1: SerialNumber: syz [ 2336.776820][ T786] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2336.789744][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2336.790948][T26209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2336.801835][T13489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2336.801882][T13489] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2336.832031][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.844341][T10479] usb 2-1: config 0 descriptor?? [ 2336.851577][ T786] usb 3-1: config 0 descriptor?? [ 2336.852475][T26209] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.863112][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 2336.879757][T26209] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.885447][T13489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.892198][T26209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.916947][T26209] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2336.933513][T13489] usb 1-1: config 0 descriptor?? [ 2336.956041][T13489] hub 1-1:0.0: USB hub found [ 2337.053400][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2337.062355][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2337.084511][T10479] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2337.103910][T10479] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2337.118152][T10479] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2337.127907][T10479] usb 2-1: media controller created [ 2337.128290][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2337.157507][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2337.166650][T13489] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 2337.182477][T10479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2337.275913][ T786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2337.289496][ T786] pwc: recv_control_msg error -32 req 02 val 2700 [ 2337.309185][ T786] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2337.336389][ T786] pwc: recv_control_msg error -32 req 04 val 1000 [ 2337.360956][T10479] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 2337.374175][ T786] pwc: recv_control_msg error -32 req 04 val 1300 [ 2337.394219][ T786] pwc: recv_control_msg error -32 req 04 val 1400 [ 2337.414726][ T786] pwc: recv_control_msg error -32 req 02 val 2000 [ 2337.434073][ T786] pwc: recv_control_msg error -32 req 02 val 2100 [ 2337.452543][ T786] pwc: recv_control_msg error -32 req 04 val 1500 [ 2337.463390][T26307] loop3: detected capacity change from 0 to 4096 [ 2337.471254][ T786] pwc: recv_control_msg error -32 req 02 val 2500 [ 2337.481636][ T786] pwc: recv_control_msg error -32 req 02 val 2400 [ 2337.498211][ T786] pwc: recv_control_msg error -32 req 02 val 2600 [ 2337.563378][T13489] usbhid 1-1:0.0: can't add hid device: -71 [ 2337.579831][T13489] usbhid: probe of 1-1:0.0 failed with error -71 [ 2337.661231][T13489] usb 1-1: USB disconnect, device number 73 [ 2337.722676][ T786] pwc: recv_control_msg error -71 req 02 val 2800 [ 2337.756935][ T786] pwc: recv_control_msg error -71 req 04 val 1100 [ 2337.778608][ T786] pwc: recv_control_msg error -71 req 04 val 1200 [ 2337.804217][ T27] audit: type=1326 audit(1775831333.303:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26310 comm="syz.3.4929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8765d9c819 code=0x0 [ 2337.847418][ T786] pwc: Registered as video103. [ 2337.872689][ T786] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 2337.953193][ T786] usb 3-1: USB disconnect, device number 64 [ 2338.335867][ T27] audit: type=1326 audit(1775831333.843:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.365467][T20471] Bluetooth: hci0: command tx timeout [ 2338.397070][T26321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4932'. [ 2338.407504][ T27] audit: type=1326 audit(1775831333.873:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.507925][T10479] usb 2-1: USB disconnect, device number 50 [ 2338.511351][ T27] audit: type=1326 audit(1775831333.873:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.600871][ T27] audit: type=1326 audit(1775831333.873:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.637741][ T27] audit: type=1326 audit(1775831333.873:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.675481][ T27] audit: type=1326 audit(1775831333.873:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.742908][ T27] audit: type=1326 audit(1775831333.873:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.789278][ T27] audit: type=1326 audit(1775831333.873:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2338.814719][ T27] audit: type=1326 audit(1775831333.873:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26318 comm="syz.2.4933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee0f9c819 code=0x7ffc0000 [ 2339.456301][T10479] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2339.656198][T10479] usb 2-1: Using ep0 maxpacket: 16 [ 2339.696083][T10479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2339.730583][T10479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2339.749994][T10479] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2339.768098][T10479] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2339.778902][T10479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.790125][T10479] usb 2-1: config 0 descriptor?? [ 2339.975287][T23394] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 2340.203304][T23394] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2340.214361][T23394] usb 3-1: not running at top speed; connect to a high speed hub [ 2340.218415][T10479] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 2340.236409][T23394] usb 3-1: config 6 has an invalid interface number: 168 but max is 1 [ 2340.237115][T10479] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 2340.253189][T23394] usb 3-1: config 6 has an invalid interface number: 61 but max is 1 [ 2340.266855][T10479] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 2340.271445][T23394] usb 3-1: config 6 has no interface number 0 [ 2340.274945][T10479] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 2340.282573][T23394] usb 3-1: config 6 has no interface number 1 [ 2340.291090][T10479] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 2340.305060][T23394] usb 3-1: config 6 interface 61 has no altsetting 0 [ 2340.329044][T23394] usb 3-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 2340.342571][T23394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.351816][T23394] usb 3-1: Product: syz [ 2340.356867][T23394] usb 3-1: Manufacturer: syz [ 2340.357657][T10479] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 2340.362342][T23394] usb 3-1: SerialNumber: syz [ 2340.410897][T26341] random: crng reseeded on system resumption [ 2340.445477][T20471] Bluetooth: hci0: command tx timeout [ 2340.541189][T10479] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 2340.558120][T10479] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 2340.631542][T23394] usb 3-1: USB disconnect, device number 65 [ 2340.666183][ T786] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2340.697708][T10479] usb 2-1: USB disconnect, device number 51 [ 2340.726411][ T786] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2340.773037][ T786] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2340.810467][ T786] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2341.153967][T26367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4952'. [ 2341.167672][T26367] netlink: 'syz.3.4952': attribute type 7 has an invalid length. [ 2341.176384][T26367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4952'. [ 2341.327565][T26370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4953'. [ 2342.308748][T26377] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2342.527611][T26389] loop1: detected capacity change from 0 to 1024 [ 2343.401520][T26420] "syz.0.4976" (26420) uses obsolete ecb(arc4) skcipher [ 2343.858497][ T5779] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2344.055436][ T5779] usb 2-1: Using ep0 maxpacket: 8 [ 2344.063249][ T5779] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2344.075073][ T5779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2344.088944][ T5779] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2344.100512][ T5779] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2344.115826][ T5779] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2344.125807][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.350150][ T5779] usb 2-1: GET_CAPABILITIES returned 0 [ 2344.358204][ T5779] usbtmc 2-1:16.0: can't read capabilities [ 2344.564506][ T786] usb 2-1: USB disconnect, device number 52 [ 2345.074766][T26452] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4991'. [ 2345.301172][T26458] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4994'. [ 2345.491098][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.504489][T26467] fuse: Bad value for 'fd' [ 2345.520168][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.396596][T26479] 9pnet_virtio: no channels available for device syz [ 2346.759701][T26492] syzkaller0: entered promiscuous mode [ 2346.775931][T26492] syzkaller0: entered allmulticast mode [ 2347.245700][ T786] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2348.070323][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 2348.094038][ T786] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2348.115204][ T786] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2348.145176][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.184328][ T786] usb 1-1: config 0 descriptor?? [ 2348.201419][T26505] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2348.237761][ T786] hub 1-1:0.0: bad descriptor, ignoring hub [ 2348.244452][ T786] hub: probe of 1-1:0.0 failed with error -5 [ 2348.287569][ T786] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2348.797618][T26527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2348.834155][T25512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2348.854720][T25512] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2348.864739][T25512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2348.874767][T25512] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2348.885601][T25512] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2348.898055][T25512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2348.971343][ T2951] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.189287][ T2951] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.262105][ T2951] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.356677][ T2951] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2349.491234][T26528] chnl_net:caif_netlink_parms(): no params data found [ 2349.691070][T26528] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.700782][T26528] bridge0: port 1(bridge_slave_0) entered disabled state [ 2349.712988][T26528] bridge_slave_0: entered allmulticast mode [ 2349.722564][T26528] bridge_slave_0: entered promiscuous mode [ 2349.734457][T26528] bridge0: port 2(bridge_slave_1) entered blocking state [ 2349.744700][T26528] bridge0: port 2(bridge_slave_1) entered disabled state [ 2349.753899][T26528] bridge_slave_1: entered allmulticast mode [ 2349.763225][T26528] bridge_slave_1: entered promiscuous mode [ 2349.788166][ T2951] tipc: Left network mode [ 2349.888026][T26528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2350.258708][T26528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2350.307229][T18865] usb 1-1: USB disconnect, device number 74 [ 2350.484752][T26528] team0: Port device team_slave_0 added [ 2350.517065][T26528] team0: Port device team_slave_1 added [ 2350.726434][T26528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2350.746961][T26528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2350.790397][T26528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2350.814104][T26528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2350.823168][T26528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2350.875633][ T5869] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2350.915364][T26528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2351.010145][T25512] Bluetooth: hci2: command tx timeout [ 2351.032771][T25512] Bluetooth: hci4: unexpected event 0x30 length: 8 > 3 [ 2351.091608][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.144213][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2351.209193][ T5869] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2351.234748][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.283671][ T5869] usb 3-1: config 0 descriptor?? [ 2351.399068][T26528] hsr_slave_0: entered promiscuous mode [ 2351.440550][T26528] hsr_slave_1: entered promiscuous mode [ 2351.456639][T26528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2351.465964][T26528] Cannot create hsr debugfs directory [ 2351.713303][ T5869] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 2351.790669][ T5869] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2352.015474][ T5869] cp2112 0003:10C4:EA90.0013: error requesting version [ 2352.066954][ T5869] cp2112: probe of 0003:10C4:EA90.0013 failed with error -71 [ 2352.182861][ T5869] usb 3-1: USB disconnect, device number 66 [ 2352.730897][T26616] loop2: detected capacity change from 0 to 256 [ 2352.760094][ T2951] hsr_slave_0: left promiscuous mode [ 2352.774396][ T2951] hsr_slave_1: left promiscuous mode [ 2352.784320][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2352.796455][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2352.817794][ T2951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2352.833863][ T2951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2352.847418][ T2951] bridge_slave_1: left allmulticast mode [ 2352.853951][ T2951] bridge_slave_1: left promiscuous mode [ 2352.875676][ T2951] bridge0: port 2(bridge_slave_1) entered disabled state [ 2352.902373][ T2951] bridge_slave_0: left allmulticast mode [ 2352.904874][T26616] FAT-fs (loop2): Directory bread(block 64) failed [ 2352.915262][ T2951] bridge_slave_0: left promiscuous mode [ 2352.923093][ T2951] bridge0: port 1(bridge_slave_0) entered disabled state [ 2352.943342][T26616] FAT-fs (loop2): Directory bread(block 65) failed [ 2352.951941][T26616] FAT-fs (loop2): Directory bread(block 66) failed [ 2352.975304][T26616] FAT-fs (loop2): Directory bread(block 67) failed [ 2352.982495][T26616] FAT-fs (loop2): Directory bread(block 68) failed [ 2353.000608][ T2951] bond0: left allmulticast mode [ 2353.004973][T26616] FAT-fs (loop2): Directory bread(block 69) failed [ 2353.006415][ T2951] bond_slave_0: left allmulticast mode [ 2353.021037][ T2951] bond_slave_1: left allmulticast mode [ 2353.027249][ T2951] bond0: left promiscuous mode [ 2353.033162][ T2951] bond_slave_0: left promiscuous mode [ 2353.034086][T26616] FAT-fs (loop2): Directory bread(block 70) failed [ 2353.039142][ T2951] bond_slave_1: left promiscuous mode [ 2353.058811][ T2951] veth1_macvtap: left promiscuous mode [ 2353.064118][T26616] FAT-fs (loop2): Directory bread(block 71) failed [ 2353.066129][ T2951] veth0_macvtap: left promiscuous mode [ 2353.079815][T26616] FAT-fs (loop2): Directory bread(block 72) failed [ 2353.094518][ T2951] veth1_vlan: left promiscuous mode [ 2353.099211][T25512] Bluetooth: hci2: command tx timeout [ 2353.105308][ T2951] veth0_vlan: left promiscuous mode [ 2353.125560][T26616] FAT-fs (loop2): Directory bread(block 73) failed [ 2353.815341][ T23] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 2354.016861][ T23] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2354.036574][ T23] usb 3-1: config 0 has no interface number 0 [ 2354.060164][ T23] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2354.095658][ T23] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2354.157657][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2354.171258][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.209693][ T23] usb 3-1: Product: syz [ 2354.214222][ T23] usb 3-1: Manufacturer: syz [ 2354.236464][ T23] usb 3-1: SerialNumber: syz [ 2354.266156][ T23] usb 3-1: config 0 descriptor?? [ 2354.279738][T26621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2354.296834][T26621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2354.312419][ T23] smsc95xx v2.0.0 [ 2354.547435][T26621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2354.560498][T26621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2354.819256][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2354.840230][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2355.167980][T25512] Bluetooth: hci2: command tx timeout [ 2355.319908][ T2951] team0 (unregistering): Port device team_slave_1 removed [ 2355.428365][ T2951] team0 (unregistering): Port device team_slave_0 removed [ 2355.531141][ T2951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2355.633916][ T2951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2355.887377][ T23] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2355.916146][ T23] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 2355.947143][ T23] usb 3-1: USB disconnect, device number 67 [ 2356.437043][ T2951] bond0 (unregistering): Released all slaves [ 2356.925587][ T23] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2357.135268][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 2357.164442][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2357.187485][ T23] usb 3-1: config 0 has no interface number 0 [ 2357.194676][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2357.227060][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2357.248751][T25512] Bluetooth: hci2: command tx timeout [ 2357.254804][ T23] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2357.275272][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.298833][ T23] usb 3-1: config 0 descriptor?? [ 2357.337839][T26659] kvm: MONITOR instruction emulated as NOP! [ 2357.461123][T26670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5059'. [ 2357.637143][T10479] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2357.799869][T26528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2357.822968][T26528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2357.846882][T26528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2357.857622][T10479] usb 1-1: Using ep0 maxpacket: 32 [ 2357.864478][T26528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2357.869512][T10479] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2357.892844][T10479] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2357.904959][T10479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.924696][T10479] usb 1-1: Product: syz [ 2357.935980][T10479] usb 1-1: Manufacturer: syz [ 2357.948630][T10479] usb 1-1: SerialNumber: syz [ 2357.961280][ T23] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0014/input/input23 [ 2358.020998][ T23] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0014/input/input24 [ 2358.093286][ T23] uclogic 0003:28BD:0071.0014: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1 [ 2358.113213][T26528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2358.159724][T23394] usb 3-1: USB disconnect, device number 68 [ 2358.236611][T26528] 8021q: adding VLAN 0 to HW filter on device team0 [ 2358.259431][T10479] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 2358.271425][T18695] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.279283][T18695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2358.285259][T10479] usb 1-1: MIDIStreaming interface descriptor not found [ 2358.334873][T18695] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.342610][T18695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2358.344464][T26681] fido_id[26681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2358.529036][T10479] usb 1-1: USB disconnect, device number 75 [ 2358.972589][T26691] gre0: entered promiscuous mode [ 2359.064730][T26691] gre0: entered allmulticast mode [ 2359.497420][T26528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2359.772137][T26528] veth0_vlan: entered promiscuous mode [ 2359.802189][T26528] veth1_vlan: entered promiscuous mode [ 2359.869314][T26528] veth0_macvtap: entered promiscuous mode [ 2359.893883][T26528] veth1_macvtap: entered promiscuous mode [ 2359.938491][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2359.980410][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2359.995498][T10479] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2360.004795][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2360.035160][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.055375][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2360.087498][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.108764][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2360.125510][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.143310][T26528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2360.177443][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2360.208174][T10479] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2360.223566][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.232671][T10479] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2360.261057][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2360.261088][T10479] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2360.284670][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.310835][T26528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2360.327590][T26528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.345270][ T5779] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2360.358509][T26528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2360.394631][T10479] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.402645][T26528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.423587][T26528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.440700][T26528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.452253][T26528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2360.535946][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 2360.554298][ T5779] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2360.582370][ T5779] usb 1-1: config 3 has an invalid interface number: 217 but max is 0 [ 2360.614591][ T5779] usb 1-1: config 3 has no interface number 0 [ 2360.670641][ T5779] usb 1-1: config 3 interface 217 has no altsetting 0 [ 2360.713624][ T5779] usb 1-1: string descriptor 0 read error: -22 [ 2360.731033][ T5779] usb 1-1: New USB device found, idVendor=1b75, idProduct=a200, bcdDevice=97.84 [ 2360.748665][T12242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2360.758321][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.776843][T18865] usb 3-1: USB disconnect, device number 69 [ 2360.804791][T12242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2360.923891][T18695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2360.949635][T18695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2361.063351][T18865] usb 1-1: USB disconnect, device number 76 [ 2361.269587][T26731] loop1: detected capacity change from 0 to 256 [ 2361.300845][T26731] exfat: Bad value for 'uid' [ 2361.901467][T26752] loop2: detected capacity change from 0 to 2048 [ 2361.980417][T26752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2362.068010][T26752] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2362.279150][T26758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 2362.345724][T26758] EXT4-fs (loop2): Remounting filesystem read-only [ 2362.559474][T25985] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2363.295786][T13489] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2363.507000][T13489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2363.541275][T13489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2363.566693][T13489] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2363.595906][T13489] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2363.607018][T10479] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2363.636218][T13489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.648687][T13489] usb 3-1: config 0 descriptor?? [ 2363.842547][T10479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2363.886388][T10479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2363.908572][T10479] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2363.926818][T10479] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2363.942834][T10479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.958353][T10479] usb 2-1: config 0 descriptor?? [ 2364.091379][T13489] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 2364.144323][T13489] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2364.367305][ T5869] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2364.573304][ T5869] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 2364.591723][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.601471][ T5869] usb 1-1: Product: syz [ 2364.611149][ T5869] usb 1-1: Manufacturer: syz [ 2364.620425][ T5869] usb 1-1: SerialNumber: syz [ 2364.636798][ T5869] usb 1-1: config 0 descriptor?? [ 2364.669454][ T5869] hub 1-1:0.0: bad descriptor, ignoring hub [ 2364.699203][ T5869] hub: probe of 1-1:0.0 failed with error -5 [ 2364.724535][ T5869] f81232 1-1:0.0: f81534a converter detected [ 2364.893150][ T5869] usb 1-1: f81534a converter now attached to ttyUSB0 [ 2365.206746][ T7935] usb 1-1: USB disconnect, device number 77 [ 2365.221219][ T7935] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 2365.236631][ T7935] f81232 1-1:0.0: device disconnected [ 2365.314294][T26873] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5105'. [ 2365.336060][T26793] usb 3-1: string descriptor 0 read error: -71 [ 2365.361617][T10479] usbhid 2-1:0.0: can't add hid device: -71 [ 2365.374146][T10479] usbhid: probe of 2-1:0.0 failed with error -71 [ 2365.383681][T10479] usb 2-1: USB disconnect, device number 53 [ 2366.225444][T25642] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 2366.265714][T25642] usb 3-1: device reset changed ep0 maxpacket size! [ 2366.294602][ T5869] usb 3-1: USB disconnect, device number 70 [ 2366.489086][T26912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5121'. [ 2366.495549][ T5869] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2366.596225][T26916] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5123'. [ 2366.685614][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 2366.699764][ T5869] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 2366.710746][ T5869] usb 3-1: config 0 has no interface number 0 [ 2366.719447][ T5869] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2366.732292][ T5869] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2366.747729][ T5869] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2366.757827][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.766239][ T5869] usb 3-1: Product: syz [ 2366.770962][ T5869] usb 3-1: Manufacturer: syz [ 2366.776048][ T5869] usb 3-1: SerialNumber: syz [ 2366.784698][ T5869] usb 3-1: config 0 descriptor?? [ 2366.791032][T26884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2366.799108][T26884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2367.013519][T26884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2367.022078][T26884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2367.231484][ T5869] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2367.254370][T26922] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2367.488058][T26930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5130'. [ 2368.673646][ T5869] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2368.697383][ T5869] asix: probe of 3-1:0.34 failed with error -71 [ 2368.708578][ T5869] usb 3-1: USB disconnect, device number 71 [ 2368.717527][T26947] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5137'. [ 2368.926452][T26952] syzkaller0: entered promiscuous mode [ 2368.932513][T26952] syzkaller0: entered allmulticast mode [ 2369.713660][T26975] tmpfs: Bad value for 'mpol' [ 2369.807398][T26976] block device autoloading is deprecated and will be removed. [ 2370.828363][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 2370.828395][ T27] audit: type=1326 audit(1775831366.183:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.052090][ T27] audit: type=1326 audit(1775831366.193:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.095459][ T27] audit: type=1326 audit(1775831366.253:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.131525][ T27] audit: type=1326 audit(1775831366.253:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.159546][ C1] vkms_vblank_simulate: vblank timer overrun [ 2371.168056][ T27] audit: type=1326 audit(1775831366.253:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.191433][ C1] vkms_vblank_simulate: vblank timer overrun [ 2371.199235][ T27] audit: type=1326 audit(1775831366.263:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.225308][ T27] audit: type=1326 audit(1775831366.263:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.255219][ T27] audit: type=1326 audit(1775831366.283:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.282697][ C1] vkms_vblank_simulate: vblank timer overrun [ 2371.295434][ T27] audit: type=1326 audit(1775831366.283:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.326974][ C1] vkms_vblank_simulate: vblank timer overrun [ 2371.369245][ T27] audit: type=1326 audit(1775831366.283:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26992 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4cf9c819 code=0x7ffc0000 [ 2371.394216][ C1] vkms_vblank_simulate: vblank timer overrun [ 2371.683157][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'. [ 2371.924599][T27019] loop2: detected capacity change from 0 to 512 [ 2371.967571][T27022] process 'syz.1.5171' launched '/dev/fd/5' with NULL argv: empty string added [ 2372.389346][ T7935] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2372.413102][ T7935] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2372.466390][ T7935] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2372.595503][ T7935] IPVS: starting estimator thread 0... [ 2372.642472][T27034] fido_id[27034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2372.736780][T27037] IPVS: using max 24 ests per chain, 57600 per kthread [ 2372.748107][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5178'. [ 2373.074153][T27033] loop1: detected capacity change from 0 to 32768 [ 2373.987895][T27055] ------------[ cut here ]------------ [ 2373.994650][T27055] WARNING: CPU: 1 PID: 27055 at security/landlock/fs.c:748 collect_domain_accesses+0x7b6/0x820 [ 2374.006457][T27055] Modules linked in: [ 2374.012602][T27055] CPU: 1 PID: 27055 Comm: syz.2.5182 Not tainted syzkaller #0 [ 2374.021102][T27055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2374.032369][T27055] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 2374.039494][T27055] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ff f8 97 fd 31 ed eb dd e8 f6 f8 97 fd 0f 0b 40 b5 01 eb da e8 ea f8 97 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 2374.060016][ C1] vkms_vblank_simulate: vblank timer overrun [ 2374.067763][T27055] RSP: 0018:ffffc900053b7ab0 EFLAGS: 00010283 [ 2374.074711][T27055] RAX: ffffffff83ef28e6 RBX: ffff8880786bdd60 RCX: 0000000000080000 [ 2374.083116][T27055] RDX: ffffc9000f3b3000 RSI: 0000000000001178 RDI: 0000000000001179 [ 2374.091491][T27055] RBP: 1ffff11009fcc335 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 2374.099909][T27055] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 0000000000000001 [ 2374.106796][T27061] tipc: Started in network mode [ 2374.108226][T27055] R13: 0000000000000000 R14: ffff8880786bdd60 R15: 0000000000002004 [ 2374.124367][T27055] FS: 00007f1ee1df56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2374.134057][T27055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2374.141250][T27061] tipc: Node identity fa0ee11aaa8a, cluster identity 4711 [ 2374.143076][T27055] CR2: 000000110c41f7b2 CR3: 000000001db00000 CR4: 00000000003506e0 [ 2374.161117][T27055] Call Trace: [ 2374.165275][T27055] [ 2374.168514][T27055] current_check_refer_path+0x566/0xc50 [ 2374.174507][T27055] ? hook_file_truncate+0xc0/0xc0 [ 2374.179920][T27055] ? _raw_spin_unlock+0x28/0x40 [ 2374.185477][T27055] ? d_set_d_op+0x25f/0x370 [ 2374.190176][T27055] security_path_rename+0x16c/0x200 [ 2374.196063][T27055] do_renameat2+0x6be/0xce0 [ 2374.201047][T27055] ? __lock_acquire+0x7d40/0x7d40 [ 2374.206409][T27055] ? fsnotify_move+0x4e0/0x4e0 [ 2374.211537][T27055] ? __check_object_size+0x506/0xa20 [ 2374.218856][T27055] ? getname_flags+0x20a/0x500 [ 2374.223951][T27055] __x64_sys_renameat2+0xd2/0xe0 [ 2374.229751][T27055] do_syscall_64+0x55/0xa0 [ 2374.234501][T27055] ? clear_bhb_loop+0x40/0x90 [ 2374.239836][T27055] ? clear_bhb_loop+0x40/0x90 [ 2374.244804][T27055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2374.250964][T27055] RIP: 0033:0x7f1ee0f9c819 [ 2374.255798][T27055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2374.276907][ C1] vkms_vblank_simulate: vblank timer overrun [ 2374.283121][T27055] RSP: 002b:00007f1ee1df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2374.293579][T27055] RAX: ffffffffffffffda RBX: 00007f1ee1215fa0 RCX: 00007f1ee0f9c819 [ 2374.302393][T27055] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 2374.310467][T27061] tipc: Enabled bearer , priority 0 [ 2374.311137][T27055] RBP: 00007f1ee1032c91 R08: 0000000000000000 R09: 0000000000000000 [ 2374.328564][T27055] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 2374.337010][T27055] R13: 00007f1ee1216038 R14: 00007f1ee1215fa0 R15: 00007ffc8aa98e38 [ 2374.346179][T27055] [ 2374.350190][T27055] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2374.358802][T27055] CPU: 1 PID: 27055 Comm: syz.2.5182 Not tainted syzkaller #0 [ 2374.367888][T27055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2374.379645][T27055] Call Trace: [ 2374.383134][T27055] [ 2374.386714][T27055] dump_stack_lvl+0x18c/0x250 [ 2374.392622][T27055] ? show_regs_print_info+0x20/0x20 [ 2374.404299][T27055] ? load_image+0x420/0x420 [ 2374.409956][T27055] panic+0x2dc/0x730 [ 2374.415686][T27055] ? bpf_jit_dump+0xd0/0xd0 [ 2374.420724][T27055] __warn+0x2e0/0x470 [ 2374.425357][T27055] ? collect_domain_accesses+0x7b6/0x820 [ 2374.432317][T27055] ? collect_domain_accesses+0x7b6/0x820 [ 2374.438766][T27055] report_bug+0x2be/0x4f0 [ 2374.443287][T27055] ? collect_domain_accesses+0x7b6/0x820 [ 2374.449376][T27055] ? collect_domain_accesses+0x7b6/0x820 [ 2374.455567][T27055] ? collect_domain_accesses+0x7b8/0x820 [ 2374.461420][T27055] handle_bug+0xcf/0x120 [ 2374.466431][T27055] exc_invalid_op+0x1a/0x50 [ 2374.470959][T27055] asm_exc_invalid_op+0x1a/0x20 [ 2374.476092][T27055] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 2374.482818][T27055] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ff f8 97 fd 31 ed eb dd e8 f6 f8 97 fd 0f 0b 40 b5 01 eb da e8 ea f8 97 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 2374.503159][T27055] RSP: 0018:ffffc900053b7ab0 EFLAGS: 00010283 [ 2374.509248][T27055] RAX: ffffffff83ef28e6 RBX: ffff8880786bdd60 RCX: 0000000000080000 [ 2374.517672][T27055] RDX: ffffc9000f3b3000 RSI: 0000000000001178 RDI: 0000000000001179 [ 2374.525831][T27055] RBP: 1ffff11009fcc335 R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 2374.533896][T27055] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 0000000000000001 [ 2374.542419][T27055] R13: 0000000000000000 R14: ffff8880786bdd60 R15: 0000000000002004 [ 2374.550875][T27055] ? collect_domain_accesses+0x7b6/0x820 [ 2374.556890][T27055] current_check_refer_path+0x566/0xc50 [ 2374.563317][T27055] ? hook_file_truncate+0xc0/0xc0 [ 2374.568729][T27055] ? _raw_spin_unlock+0x28/0x40 [ 2374.573871][T27055] ? d_set_d_op+0x25f/0x370 [ 2374.579029][T27055] security_path_rename+0x16c/0x200 [ 2374.584806][T27055] do_renameat2+0x6be/0xce0 [ 2374.589855][T27055] ? __lock_acquire+0x7d40/0x7d40 [ 2374.595171][T27055] ? fsnotify_move+0x4e0/0x4e0 [ 2374.600715][T27055] ? __check_object_size+0x506/0xa20 [ 2374.606600][T27055] ? getname_flags+0x20a/0x500 [ 2374.611590][T27055] __x64_sys_renameat2+0xd2/0xe0 [ 2374.616999][T27055] do_syscall_64+0x55/0xa0 [ 2374.621808][T27055] ? clear_bhb_loop+0x40/0x90 [ 2374.626954][T27055] ? clear_bhb_loop+0x40/0x90 [ 2374.632029][T27055] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2374.638883][T27055] RIP: 0033:0x7f1ee0f9c819 [ 2374.644215][T27055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2374.665584][T27055] RSP: 002b:00007f1ee1df5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2374.674990][T27055] RAX: ffffffffffffffda RBX: 00007f1ee1215fa0 RCX: 00007f1ee0f9c819 [ 2374.683416][T27055] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 2374.692116][T27055] RBP: 00007f1ee1032c91 R08: 0000000000000000 R09: 0000000000000000 [ 2374.700691][T27055] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 2374.708892][T27055] R13: 00007f1ee1216038 R14: 00007f1ee1215fa0 R15: 00007ffc8aa98e38 [ 2374.717344][T27055] [ 2374.721243][T27055] Kernel Offset: disabled [ 2374.725679][T27055] Rebooting in 86400 seconds..