last executing test programs: 7.319833739s ago: executing program 0 (id=4095): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, 0x0) 7.189027846s ago: executing program 0 (id=4096): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893ae", 0xc4}, {&(0x7f00000003c0)="b2d616a9dec7caaae6068e74d8d177dd8b8aa56c5385b89f36796568341b240b37b2b1e3b156fa9213688620ef58c4919387aaccd16c83fdbddf03f729526fa83bd438eff0e768eb0920e0b42e529a2a1d8b4822681057ec", 0x58}, {&(0x7f0000000440)="1e653b2c046caa413f0ed03bce1b9411b6c7bfb6dc8c7fcb1da18b236c0b3539206a8ae5e4365ea01b4e287fd6a634f8a8", 0x31}], 0x3}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000bc0)}, {&(0x7f0000000fc0)="d6385764205d32c000b4ed22e47544", 0xf}, {&(0x7f0000002240)="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", 0x778}], 0x3}}], 0x2, 0x0) 6.239915248s ago: executing program 0 (id=4101): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r1, 0x0, 0x0) 5.463749895s ago: executing program 0 (id=4104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0xfffffff7}}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0x9, [{0xf, 0x5, 0x9}, {0x10, 0x5, 0x8665bde}, {0x4, 0x5}, {0x4, 0x1}, {0xb, 0x0, 0xc00000}]}]}, {0x0, [0x2e]}}, 0x0, 0xaf, 0x0, 0x0, 0x9fdb}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newsa={0x138, 0x1a, 0x633, 0x70bd25, 0x25dfdbff, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x4e23, 0x8001, 0xa, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010100, 0x3, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0x401, 0xc, 0x400, 0x6}, {0x0, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffffe, 0x400003, 0xca09}, 0x70bd25, 0x3502, 0x2, 0x4, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000840}, 0x804) 5.215351295s ago: executing program 1 (id=4107): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 4.291734212s ago: executing program 1 (id=4109): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15c19, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x65, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe19}, 0x94) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) pwrite64(r4, &(0x7f0000000000)='q', 0x1, 0x111ffe) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) accept$alg(r5, 0x0, 0x0) 4.083215034s ago: executing program 2 (id=4111): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], 0x0, 0x58fe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.902607141s ago: executing program 2 (id=4112): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002100000000100000000000016"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0500"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.650197782s ago: executing program 3 (id=4114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000180)={0xffffffff, 0x20, 0x8, 0x20, 0x83}, 0x48) 3.451868892s ago: executing program 3 (id=4115): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000200)=')\x00', 0x0) 3.385981295s ago: executing program 1 (id=4116): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r2, 0x11, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) 3.353776372s ago: executing program 3 (id=4117): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 3.125729798s ago: executing program 3 (id=4118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0x10}) 3.090541025s ago: executing program 0 (id=4119): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='xfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys\x00', 0x2, 0x120) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2) chdir(&(0x7f0000000240)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x43, 0x50, 0x4f]}, 0x38) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') fchown(r5, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff) 3.000799693s ago: executing program 2 (id=4120): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], 0x0, 0x58fe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.913470601s ago: executing program 3 (id=4121): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r6, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1', 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x5, 0x3, 0x25dfdbfc, {0x0, 0x0, 0x0, r10}, [@IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x28}}, 0x40080) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x8040) 2.913287641s ago: executing program 1 (id=4122): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 2.838024656s ago: executing program 2 (id=4123): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.792745648s ago: executing program 0 (id=4124): syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000140067"], 0xb8}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 1.786226989s ago: executing program 1 (id=4125): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15c19, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x65, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe19}, 0x94) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) pwrite64(r4, &(0x7f0000000000)='q', 0x1, 0x111ffe) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) accept$alg(r5, 0x0, 0x0) 1.784872189s ago: executing program 2 (id=4126): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 1.4840608s ago: executing program 3 (id=4127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0xfffffff7}}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0x9, [{0xf, 0x5, 0x9}, {0x10, 0x5, 0x8665bde}, {0x4, 0x5}, {0x4, 0x1}, {0xb, 0x0, 0xc00000}]}]}, {0x0, [0x2e]}}, 0x0, 0xaf, 0x0, 0x0, 0x9fdb}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002440)=@newsa={0x138, 0x1a, 0x633, 0x70bd25, 0x25dfdbff, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x4e23, 0x8001, 0xa, 0x0, 0x0, 0x3c}, {@in=@rand_addr=0x64010100, 0x3, 0x32}, @in=@empty, {0x323, 0x1, 0x7, 0x401, 0xc, 0x400, 0x6}, {0x0, 0x40000, 0x0, 0xffffffffffffffff}, {0xfffffffe, 0x400003, 0xca09}, 0x70bd25, 0x3502, 0x2, 0x4, 0x0, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x44000840}, 0x804) 1.360350875s ago: executing program 1 (id=4128): r0 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400002100000000100000000000016"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) close(r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0500"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.208816026s ago: executing program 2 (id=4129): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) ioctl$EVIOCRMFF(r0, 0x40004580, 0x0) 0s ago: executing program 32 (id=4129): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) ioctl$EVIOCRMFF(r0, 0x40004580, 0x0) kernel console output (not intermixed with test programs): ed mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.867974][T12288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.889904][T12288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.974611][T12288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.997967][T12288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.006728][T12288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.028487][T12288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.227750][T11503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.246245][T11503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.328362][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.336250][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.696865][T12447] tipc: Enabling of bearer rejected, already enabled [ 714.177556][T12459] No such timeout policy "syz1" [ 715.872888][T12437] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 716.115458][T12437] usb 2-1: device descriptor read/64, error -71 [ 716.598136][T12437] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 716.788555][T12437] usb 2-1: device descriptor read/64, error -71 [ 716.918519][T12437] usb usb2-port1: attempt power cycle [ 717.362804][T12437] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 717.400750][T12437] usb 2-1: device descriptor read/8, error -71 [ 717.410276][T12504] 9pnet_fd: Insufficient options for proto=fd [ 718.238213][T12437] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 718.289414][T12437] usb 2-1: device descriptor read/8, error -71 [ 719.101776][T12437] usb usb2-port1: unable to enumerate USB device [ 719.140512][T12523] bridge0: port 3(syz_tun) entered blocking state [ 719.147309][T12523] bridge0: port 3(syz_tun) entered disabled state [ 719.154241][T12523] syz_tun: entered allmulticast mode [ 719.163631][T12523] syz_tun: entered promiscuous mode [ 719.170798][T12523] bridge0: port 3(syz_tun) entered blocking state [ 719.177395][T12523] bridge0: port 3(syz_tun) entered listening state [ 719.567931][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 719.575796][ C0] bridge0: topology change detected, propagating [ 719.664709][T12540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 719.688343][ T5839] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 719.968080][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 720.103519][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.294115][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.318844][ T5839] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 720.339903][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.362289][ T5839] usb 2-1: config 0 descriptor?? [ 721.079602][ T5839] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 721.311529][ T5839] usb 2-1: USB disconnect, device number 6 [ 721.371665][T12554] fido_id[12554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 722.084437][T12570] x_tables: unsorted entry at hook 3 [ 722.287937][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 722.295747][ C1] bridge0: topology change detected, propagating [ 724.759834][T12604] tipc: Enabling of bearer rejected, already enabled [ 724.950418][T12611] x_tables: unsorted entry at hook 3 [ 731.003147][T12652] futex_wake_op: syz.3.2268 tries to shift op by -1; fix this program [ 732.649301][T12664] loop1: detected capacity change from 0 to 40427 [ 732.692536][T12664] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 732.704854][T12664] F2FS-fs (loop1): invalid crc value [ 732.717318][T12674] x_tables: unsorted entry at hook 3 [ 732.729368][T12664] F2FS-fs (loop1): invalid crc value [ 732.734750][T12664] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 733.978712][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2278'. [ 734.637976][ C0] bridge0: port 3(syz_tun) entered learning state [ 736.679745][T12691] loop1: detected capacity change from 0 to 512 [ 737.366234][T12691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.399791][T12691] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.291942][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.370895][T12704] tipc: Enabling of bearer rejected, already enabled [ 739.193104][T12698] overlayfs: failed to resolve './bus': -2 [ 739.641514][T12714] x_tables: unsorted entry at hook 3 [ 739.935686][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 743.412420][T12745] overlayfs: failed to resolve './bus': -2 [ 743.471101][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 745.508189][T12437] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 745.700877][T12437] usb 2-1: Using ep0 maxpacket: 32 [ 745.764639][T12759] loop1: detected capacity change from 0 to 2048 [ 745.826917][T12759] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 745.855634][T12759] EXT4-fs (loop1): #clusters per group too big: 16386 [ 748.223898][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.232695][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.293008][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'. [ 749.543492][T12786] overlayfs: failed to resolve './bus': -2 [ 749.997975][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 750.004636][ C0] bridge0: topology change detected, propagating [ 750.085739][T12437] usb 2-1: unable to get BOS descriptor or descriptor too short [ 750.094807][T12437] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 750.103590][T12437] usb 2-1: can't read configurations, error -71 [ 754.767139][T12823] overlayfs: failed to resolve './bus': -2 [ 758.839385][T12856] tipc: Enabling of bearer rejected, already enabled [ 759.362967][T12859] overlayfs: failed to resolve './bus': -2 [ 761.663201][T12888] loop1: detected capacity change from 0 to 1024 [ 761.718827][T12888] hfsplus: unable to change nls mapping [ 761.770823][T12888] hfsplus: unable to parse mount options [ 764.582522][T12903] overlayfs: failed to resolve './bus': -2 [ 770.334212][T12940] overlayfs: failed to resolve './bus': -2 [ 774.421757][T12970] loop1: detected capacity change from 0 to 512 [ 774.464235][T12970] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 774.504383][T12970] EXT4-fs (loop1): orphan cleanup on readonly fs [ 774.575074][T12970] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 774.624086][T12970] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 774.668449][T12970] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2367: Failed to acquire dquot type 1 [ 774.779384][T12970] EXT4-fs (loop1): Remounting filesystem read-only [ 774.808563][T12970] EXT4-fs (loop1): 1 truncate cleaned up [ 774.839829][T12970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 774.991437][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.192002][T12978] loop1: detected capacity change from 0 to 256 [ 775.466922][T12985] loop1: detected capacity change from 0 to 512 [ 775.522635][T12985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.538471][T12985] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.700626][T12992] overlayfs: failed to resolve './bus': -2 [ 776.515424][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.412570][T13035] veth1_to_batadv: entered promiscuous mode [ 782.057405][T13043] overlayfs: failed to resolve './bus': -2 [ 785.690514][T12437] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 785.912521][T12437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.956676][T12437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.977474][T12437] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 786.001580][T12437] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 786.021845][T12437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.055026][T12437] usb 2-1: config 0 descriptor?? [ 786.083980][T12437] usb 2-1: can't set config #0, error -71 [ 786.100683][T12437] usb 2-1: USB disconnect, device number 9 [ 787.008952][T13086] overlayfs: failed to resolve './bus': -2 [ 789.418784][T13101] loop1: detected capacity change from 0 to 512 [ 790.341809][T13101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.369497][T13101] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 790.587318][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.946393][T13114] loop1: detected capacity change from 0 to 128 [ 795.528193][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 796.330191][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.361706][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.401192][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.454986][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 796.494866][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.526038][ T8] usb 2-1: config 0 descriptor?? [ 796.604784][T13156] tipc: Enabling of bearer rejected, already enabled [ 797.611372][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 797.628106][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 797.648110][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 797.662265][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 797.678117][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 797.684886][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 797.742998][T13163] No such timeout policy "syz1" [ 798.158709][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.165465][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.172282][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.179203][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.185938][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.192725][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.199547][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.206276][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.214764][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.221577][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.238163][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.244952][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.266161][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.273299][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.280418][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.287515][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.294469][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.301778][ T8] lua 0003:1E7D:2C2E.0005: unknown main item tag 0x0 [ 798.329515][ T8] lua 0003:1E7D:2C2E.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 798.349104][ T8] usb 2-1: USB disconnect, device number 10 [ 798.458186][T13164] fido_id[13164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 800.370598][T13179] loop1: detected capacity change from 0 to 1024 [ 800.439891][T13179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 800.690927][T13179] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 801.113617][T13179] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.2435: lblock 2 mapped to illegal pblock 2 (length 1) [ 801.137379][T13179] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 801.152911][T13179] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 48: comm syz.1.2435: lblock 0 mapped to illegal pblock 48 (length 1) [ 801.260589][T13179] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 801.289072][T13179] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.2435: Failed to acquire dquot type 0 [ 801.332208][T13179] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 801.383520][T13179] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2435: mark_inode_dirty error [ 801.421558][T13179] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 801.446682][T13179] EXT4-fs (loop1): 1 orphan inode deleted [ 801.458310][ T6182] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 801.467007][T13179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 801.514710][ T6182] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 801.537258][ T6182] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:16: Failed to release dquot type 0 [ 801.629161][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.648001][ T74] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 801.683128][ T74] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 801.699878][ T74] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 801.733306][T12288] EXT4-fs error (device loop1): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 801.788305][T12288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 801.809676][T12288] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 801.859801][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.870313][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.878938][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.887632][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.895468][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 801.903483][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.685383][T13206] loop1: detected capacity change from 0 to 256 [ 803.844445][T13217] loop1: detected capacity change from 0 to 512 [ 803.875830][T13217] EXT4-fs: Ignoring removed bh option [ 803.969755][T13217] EXT4-fs (loop1): Test dummy encryption mode enabled [ 803.972914][T13198] chnl_net:caif_netlink_parms(): no params data found [ 803.976571][T13217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 804.018058][ T5787] Bluetooth: hci4: command tx timeout [ 804.258296][T13217] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2447: inode has both inline data and extents flags [ 804.276956][T13217] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2447: couldn't read orphan inode 15 (err -117) [ 804.571978][T13217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.035870][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.046674][T13198] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.058060][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.065739][T13198] bridge_slave_0: entered allmulticast mode [ 805.097130][T13198] bridge_slave_0: entered promiscuous mode [ 805.109109][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.118381][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.125629][T13198] bridge_slave_1: entered allmulticast mode [ 805.179344][T13198] bridge_slave_1: entered promiscuous mode [ 805.242214][T13198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.273215][ T7978] tipc: Resetting bearer [ 805.301910][ T7978] bridge0: port 3(syz_tun) entered disabled state [ 805.340735][ T7978] syz_tun (unregistering): left allmulticast mode [ 805.355744][ T7978] syz_tun (unregistering): left promiscuous mode [ 805.373019][ T7978] bridge0: port 3(syz_tun) entered disabled state [ 805.390480][ T7978] tipc: Disabling bearer [ 805.425782][T13198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.851146][T13198] team0: Port device team_slave_0 added [ 806.091308][T13198] team0: Port device team_slave_1 added [ 806.110724][ T5787] Bluetooth: hci4: command tx timeout [ 806.193253][T11503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.305906][T13198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.343128][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.410085][T13198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.430858][T13198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.443723][T13198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.470710][T13246] loop1: detected capacity change from 0 to 1024 [ 806.483898][T13198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.571133][T13246] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 806.631537][T11503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.570967][T11503] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.148183][ T5787] Bluetooth: hci4: command tx timeout [ 808.205018][T11503] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.359116][T13198] hsr_slave_0: entered promiscuous mode [ 808.408972][T13198] hsr_slave_1: entered promiscuous mode [ 808.435069][T13198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.464535][T13198] Cannot create hsr debugfs directory [ 808.900197][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.906552][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.452705][T11503] tipc: Left network mode [ 810.228882][ T5787] Bluetooth: hci4: command tx timeout [ 810.236616][T13279] loop1: detected capacity change from 0 to 32768 [ 810.429511][T13279] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 810.626411][T13279] XFS (loop1): Ending clean mount [ 810.793590][T13198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 810.832382][T13198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 810.859249][T12288] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 811.211613][T13198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 811.483773][T13198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.620499][T13198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.758331][T11503] hsr_slave_0: left promiscuous mode [ 812.770302][T11503] hsr_slave_1: left promiscuous mode [ 812.795560][T11503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.805453][T11503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.818975][T11503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.826556][T11503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.840636][T11503] bridge_slave_1: left allmulticast mode [ 812.846419][T11503] bridge_slave_1: left promiscuous mode [ 812.862767][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.873370][T11503] bridge_slave_0: left allmulticast mode [ 812.882670][T11503] bridge_slave_0: left promiscuous mode [ 812.891676][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.971762][T11503] veth1_to_batadv: left promiscuous mode [ 813.019909][T13318] loop1: detected capacity change from 0 to 32768 [ 813.026713][T11503] veth1_vlan: left promiscuous mode [ 813.038152][T11503] veth0_vlan: left promiscuous mode [ 813.195513][T13318] ERROR: (device loop1): dbAllocAG: unable to allocate blocks [ 813.195513][T13318] [ 813.241989][T13318] ERROR: (device loop1): remounting filesystem as read-only [ 813.279168][T13318] jfs_create: dtInsert returned -EIO [ 813.297751][T13318] ERROR: (device loop1): jfs_create: [ 813.297751][T13318] [ 814.856499][T13330] loop1: detected capacity change from 0 to 32768 [ 814.941010][T13330] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 814.941010][T13330] [ 814.962668][T13330] ERROR: (device loop1): remounting filesystem as read-only [ 815.017957][T13330] xtLookup: xtSearch returned -5 [ 815.023254][T13330] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 815.023254][T13330] [ 815.530633][T11503] team0 (unregistering): Port device team_slave_1 removed [ 815.642960][T11503] team0 (unregistering): Port device team_slave_0 removed [ 815.734809][T11503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.081170][T13344] loop1: detected capacity change from 0 to 40427 [ 816.095770][T13344] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 816.105175][T13344] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 816.114023][T13344] F2FS-fs (loop1): heap/no_heap options were deprecated [ 816.124316][T13344] F2FS-fs (loop1): invalid crc value [ 816.282259][T13344] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 816.297370][T13344] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 816.324521][T13344] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 816.344701][T11503] bond0 (unregistering): Released all slaves [ 816.467217][T13198] 8021q: adding VLAN 0 to HW filter on device team0 [ 816.495284][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.503105][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 816.585436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.592682][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.153521][T13198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.304889][T13198] veth0_vlan: entered promiscuous mode [ 818.345732][T13373] jffs2: notice: (13373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 818.367145][T13198] veth1_vlan: entered promiscuous mode [ 818.466828][T13198] veth0_macvtap: entered promiscuous mode [ 818.513881][T13198] veth1_macvtap: entered promiscuous mode [ 818.585054][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.616010][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.642761][T13377] loop1: detected capacity change from 0 to 512 [ 818.649768][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.672822][T13377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 818.695595][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.733580][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.766604][T13377] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2484: invalid indirect mapped block 256 (level 2) [ 818.780473][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.781956][T13198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.800804][T13377] EXT4-fs (loop1): 2 truncates cleaned up [ 818.817392][T13377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.846610][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.858550][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.884082][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.936138][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.956618][T13198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.987708][T13198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.025162][T13198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.065848][T13198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.075991][T13198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.091058][T13198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.104649][T13198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.287535][ T27] audit: type=1800 audit(1790728753.834:149): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2484" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 819.670502][T13379] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 820.012102][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.071782][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.087565][T11503] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 168 with error 28 [ 820.118919][T11503] EXT4-fs (loop1): This should not happen!! Data will be lost [ 820.118919][T11503] [ 820.156490][T11503] EXT4-fs (loop1): Total free blocks count 0 [ 820.167992][T11503] EXT4-fs (loop1): Free/Dirty block details [ 820.182698][T11503] EXT4-fs (loop1): free_blocks=0 [ 820.195744][T11503] EXT4-fs (loop1): dirty_blocks=168 [ 820.202707][T11503] EXT4-fs (loop1): Block reservation details [ 820.209715][T11503] EXT4-fs (loop1): i_reserved_data_blocks=168 [ 820.229523][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.295626][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.465306][T13393] overlayfs: failed to resolve './bus': -2 [ 821.164494][ T27] audit: type=1800 audit(1790728755.714:150): pid=13377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2484" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 822.181699][T13399] FAULT_INJECTION: forcing a failure. [ 822.181699][T13399] name failslab, interval 1, probability 0, space 0, times 0 [ 822.215460][T13399] CPU: 1 PID: 13399 Comm: syz.0.2439 Not tainted syzkaller #0 [ 822.222984][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.233080][T13399] Call Trace: [ 822.236378][T13399] [ 822.239323][T13399] dump_stack_lvl+0x18c/0x250 [ 822.244035][T13399] ? show_regs_print_info+0x20/0x20 [ 822.249251][T13399] ? load_image+0x420/0x420 [ 822.253774][T13399] ? __lock_acquire+0x7d80/0x7d80 [ 822.258821][T13399] ? pointer+0x9ed/0x1150 [ 822.263171][T13399] should_fail_ex+0x394/0x4c0 [ 822.267871][T13399] should_failslab+0x9/0x20 [ 822.272393][T13399] slab_pre_alloc_hook+0x59/0x300 [ 822.277448][T13399] ? kasprintf+0xe3/0x140 [ 822.281799][T13399] ? kasprintf+0xe3/0x140 [ 822.286138][T13399] __kmem_cache_alloc_node+0x53/0x250 [ 822.291537][T13399] ? kasprintf+0xe3/0x140 [ 822.295877][T13399] __kmalloc_node_track_caller+0xa4/0x230 [ 822.301626][T13399] kvasprintf+0xec/0x1a0 [ 822.305980][T13399] ? bust_spinlocks+0xd0/0xd0 [ 822.310689][T13399] kasprintf+0xe3/0x140 [ 822.314868][T13399] ? schedule+0xc7/0x170 [ 822.319140][T13399] ? kvasprintf_const+0x240/0x240 [ 822.324200][T13399] logfc+0x156/0x4f0 [ 822.328121][T13399] ? trace_raw_output_contention_end+0xd0/0xd0 [ 822.334301][T13399] ? vfs_parse_fs_param_source+0x190/0x190 [ 822.340167][T13399] ? aa_get_newest_label+0xfd/0x5c0 [ 822.345391][T13399] ? trace_contention_end+0x39/0xe0 [ 822.350605][T13399] ? end_current_label_crit_section+0x170/0x170 [ 822.356863][T13399] ? __mutex_lock+0x30d/0xc80 [ 822.361648][T13399] ? file_end_write+0x159/0x250 [ 822.366526][T13399] nfs_get_tree+0x66b/0x1650 [ 822.371133][T13399] ? apparmor_capable+0x137/0x1a0 [ 822.376174][T13399] ? bpf_lsm_capable+0x9/0x10 [ 822.380862][T13399] ? security_capable+0x89/0xb0 [ 822.385734][T13399] vfs_get_tree+0x8c/0x280 [ 822.390173][T13399] vfs_cmd_create+0xe3/0x230 [ 822.394790][T13399] __se_sys_fsconfig+0x70a/0x850 [ 822.399768][T13399] ? __x64_sys_fsconfig+0xc0/0xc0 [ 822.404838][T13399] ? lockdep_hardirqs_on+0x98/0x150 [ 822.410058][T13399] ? __x64_sys_fsconfig+0x20/0xc0 [ 822.415112][T13399] do_syscall_64+0x55/0xb0 [ 822.419562][T13399] ? clear_bhb_loop+0x40/0x90 [ 822.424261][T13399] ? clear_bhb_loop+0x40/0x90 [ 822.428959][T13399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.434890][T13399] RIP: 0033:0x7f36d699e159 [ 822.439336][T13399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.458995][T13399] RSP: 002b:00007f36d4bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 822.467446][T13399] RAX: ffffffffffffffda RBX: 00007f36d6c25fa0 RCX: 00007f36d699e159 [ 822.475442][T13399] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 822.483434][T13399] RBP: 00007f36d6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 822.491423][T13399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.499417][T13399] R13: 00007f36d6c26038 R14: 00007f36d6c25fa0 R15: 00007ffc27cecc58 [ 822.507408][T13399] [ 822.706882][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.106809][T13411] loop1: detected capacity change from 0 to 512 [ 823.122377][T13411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 823.139544][T13411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 823.147674][T13411] System zones: 1-12 [ 823.151970][T13411] EXT4-fs (loop1): orphan cleanup on readonly fs [ 823.161642][T13411] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2491: bg 0: block 361: padding at end of block bitmap is not set [ 823.198647][T13411] EXT4-fs (loop1): Remounting filesystem read-only [ 823.205523][T13411] EXT4-fs (loop1): 1 truncate cleaned up [ 823.212512][T13411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 823.374674][ T9838] tipc: Resetting bearer [ 823.415066][ T9838] bridge0: port 3(syz_tun) entered disabled state [ 823.443215][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.456626][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.477709][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.486499][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.490996][ T9838] syz_tun (unregistering): left allmulticast mode [ 823.501816][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 823.510340][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 823.533956][ T9838] syz_tun (unregistering): left promiscuous mode [ 823.551608][ T9838] bridge0: port 3(syz_tun) entered disabled state [ 823.560489][ T9838] tipc: Disabling bearer [ 823.805035][ T74] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.174326][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 824.601086][ T74] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.696155][ T74] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.415921][ T74] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.599096][ T5788] Bluetooth: hci0: command tx timeout [ 826.312694][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 826.875052][T13415] chnl_net:caif_netlink_parms(): no params data found [ 827.037629][T13449] loop1: detected capacity change from 0 to 128 [ 827.069376][T13449] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 827.151679][T13449] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 827.217476][ T74] tipc: Left network mode [ 827.220121][T13415] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.251550][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.267598][T13415] bridge_slave_0: entered allmulticast mode [ 827.275989][T13415] bridge_slave_0: entered promiscuous mode [ 827.287158][T13415] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.303016][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.303785][T12288] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 827.319479][T13415] bridge_slave_1: entered allmulticast mode [ 827.342785][T13415] bridge_slave_1: entered promiscuous mode [ 827.453377][T13415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.476522][T13415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.833825][ T5787] Bluetooth: hci0: command tx timeout [ 828.365336][T13415] team0: Port device team_slave_0 added [ 828.405189][T13415] team0: Port device team_slave_1 added [ 828.553234][T13415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.563080][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.827111][T13479] loop1: detected capacity change from 0 to 512 [ 829.869308][T13479] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 830.838237][T13415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.848875][ T5787] Bluetooth: hci0: command tx timeout [ 830.870681][T13479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 830.879660][T13479] System zones: 1-12 [ 830.884108][T13479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 831.155258][T13479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.2504: bg 0: block 361: padding at end of block bitmap is not set [ 831.181990][T13479] EXT4-fs (loop1): Remounting filesystem read-only [ 831.190179][T13479] EXT4-fs (loop1): 1 truncate cleaned up [ 831.197141][T13479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 831.428443][T13415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.435441][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.533583][T13415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.682214][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 831.880123][T13415] hsr_slave_0: entered promiscuous mode [ 831.918483][T13415] hsr_slave_1: entered promiscuous mode [ 832.641772][T13501] loop1: detected capacity change from 0 to 32768 [ 832.678233][T13501] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2513 (13501) [ 832.838566][T13501] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 832.866041][T13501] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 832.867984][ T5787] Bluetooth: hci0: command tx timeout [ 832.914541][T13501] BTRFS info (device loop1): setting nodatasum [ 832.955081][T13501] BTRFS info (device loop1): force zlib compression, level 3 [ 833.006193][T13501] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 833.068148][T13501] BTRFS info (device loop1): use lzo compression, level 0 [ 833.075355][T13501] BTRFS info (device loop1): turning on flush-on-commit [ 833.130350][T13501] BTRFS info (device loop1): enabling auto defrag [ 833.138201][T13501] BTRFS info (device loop1): max_inline at 4096 [ 833.161774][T13501] BTRFS info (device loop1): using free space tree [ 833.296175][ T74] hsr_slave_0: left promiscuous mode [ 833.338068][ T74] hsr_slave_1: left promiscuous mode [ 833.359018][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.367526][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.426314][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.468316][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.478876][ T74] bridge_slave_1: left allmulticast mode [ 833.484635][ T74] bridge_slave_1: left promiscuous mode [ 833.512209][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.615144][ T74] bridge_slave_0: left allmulticast mode [ 833.706039][ T74] bridge_slave_0: left promiscuous mode [ 833.808090][T13501] BTRFS info (device loop1): enabling ssd optimizations [ 833.834185][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.842874][ T74] veth1_to_batadv: left promiscuous mode [ 834.995252][ T74] veth1_macvtap: left promiscuous mode [ 835.014803][ T74] veth0_macvtap: left promiscuous mode [ 835.067458][ T74] veth1_vlan: left promiscuous mode [ 835.072965][ T74] veth0_vlan: left promiscuous mode [ 835.438239][T12288] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 838.962881][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'. [ 841.343116][T13574] loop1: detected capacity change from 0 to 32768 [ 841.447345][T13574] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 842.591811][T13574] XFS (loop1): Ending clean mount [ 842.651159][T12288] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 844.275261][ T74] team0 (unregistering): Port device team_slave_1 removed [ 844.367615][ T74] team0 (unregistering): Port device team_slave_0 removed [ 845.323583][T13607] No such timeout policy "syz1" [ 845.491461][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.625035][T13610] loop1: detected capacity change from 0 to 16 [ 845.657124][T13610] erofs: (device loop1): mounted with root inode @ nid 36. [ 845.683164][ T27] audit: type=1800 audit(1790728780.234:151): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2537" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 846.135146][ T74] bond0 (unregistering): Released all slaves [ 847.920683][T13415] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 847.966864][T13415] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 848.031517][T13415] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 848.102928][T13415] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 848.413390][T13415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.717275][T13415] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.853612][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.860848][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.934181][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.941407][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.086567][T13621] loop1: detected capacity change from 0 to 32768 [ 849.170692][T13415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 849.199906][T13621] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 849.199906][T13621] [ 849.269161][T13621] ERROR: (device loop1): remounting filesystem as read-only [ 849.288695][T13621] xtLookup: xtSearch returned -5 [ 849.293726][T13621] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 849.293726][T13621] [ 849.764926][T13653] loop1: detected capacity change from 0 to 2048 [ 849.788708][T13415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.893829][T13659] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 849.959826][T13415] veth0_vlan: entered promiscuous mode [ 849.985685][T13415] veth1_vlan: entered promiscuous mode [ 849.993356][T13653] syz.1.2545: attempt to access beyond end of device [ 849.993356][T13653] loop1: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 850.043557][T13653] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 850.104170][T13415] veth0_macvtap: entered promiscuous mode [ 850.150646][T13415] veth1_macvtap: entered promiscuous mode [ 850.185696][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.201309][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.235574][T13659] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 850.253637][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.292108][T13659] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 850.303291][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.337456][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.359498][T13659] Remounting filesystem read-only [ 850.370315][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.387264][T12288] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 850.387438][T13415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.420228][T12288] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 850.427591][T12288] NILFS (loop1): discard dirty block: blocknr=1099461296164, size=1024 [ 850.455370][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.480292][T12288] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 850.492468][T12288] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 850.508152][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.531262][T12288] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 850.544638][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.572437][T12288] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 850.592699][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.618137][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 850.648997][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.670942][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 850.694790][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.706756][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 850.724248][T12288] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 850.733788][T13415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.748704][T12288] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 850.756132][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 850.781550][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 850.993547][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 851.221597][T13415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.238401][T12288] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 851.411333][T12288] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 851.418864][T13415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.447932][T12288] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 851.458380][T13415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.493739][T12288] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 851.503520][T13415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.532304][T12288] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 851.929585][T11503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.995840][T11503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.167600][ T6181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.217328][ T6181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.599226][T13693] loop1: detected capacity change from 0 to 128 [ 852.641365][T13693] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 853.103977][ T9179] tipc: Resetting bearer [ 853.133306][ T9179] bridge0: port 3(syz_tun) entered disabled state [ 853.162853][T13704] loop3: detected capacity change from 0 to 1024 [ 853.241196][ T9179] syz_tun (unregistering): left allmulticast mode [ 853.247734][ T9179] syz_tun (unregistering): left promiscuous mode [ 853.254288][ T9179] bridge0: port 3(syz_tun) entered disabled state [ 853.281343][ T9179] tipc: Disabling bearer [ 853.306101][T13704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.494325][ T6181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.715635][ T6181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.782146][T13701] loop1: detected capacity change from 0 to 32768 [ 853.797083][T13701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2554 (13701) [ 853.846583][T13701] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 853.870611][ T6181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.881931][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 853.888408][T13701] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 853.908462][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 853.918132][T13701] BTRFS info (device loop1): setting nodatasum [ 853.925396][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 853.934378][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 853.943977][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 853.948667][T13701] BTRFS info (device loop1): force zlib compression, level 3 [ 853.958732][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 854.028048][T13701] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 854.092972][T13701] BTRFS info (device loop1): use lzo compression, level 0 [ 854.110618][T13701] BTRFS info (device loop1): turning on flush-on-commit [ 854.167613][T13701] BTRFS info (device loop1): enabling auto defrag [ 854.202010][T13701] BTRFS info (device loop1): max_inline at 4096 [ 854.224597][T13701] BTRFS info (device loop1): using free space tree [ 854.255214][ T6181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.319838][T13733] nvmet: adding nsid 1 to subsystem testsubsys [ 854.367103][T13719] null_blk: disk nullb1 created [ 854.425359][T13701] BTRFS info (device loop1): enabling ssd optimizations [ 854.483902][ T27] audit: type=1800 audit(1790728789.034:152): pid=13701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2554" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 854.582492][T13733] block device autoloading is deprecated and will be removed. [ 854.615620][T12288] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 854.868462][T13415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.880502][T13454] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (13454) [ 854.957136][ T6181] tipc: Disabling bearer [ 855.008966][ T6181] tipc: Left network mode [ 856.265715][ T5788] Bluetooth: hci1: command tx timeout [ 856.693785][T13714] chnl_net:caif_netlink_parms(): no params data found [ 857.319868][T13714] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.349662][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.356941][T13714] bridge_slave_0: entered allmulticast mode [ 857.444064][T13714] bridge_slave_0: entered promiscuous mode [ 857.455157][T13714] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.462593][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.474823][T13714] bridge_slave_1: entered allmulticast mode [ 857.487325][T13714] bridge_slave_1: entered promiscuous mode [ 858.308154][ T5788] Bluetooth: hci1: command tx timeout [ 858.419974][T13454] udevd[13454]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 858.523039][T13454] udevd[13454]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 858.525971][T13714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.677567][T13714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.870045][T13714] team0: Port device team_slave_0 added [ 858.907800][T13714] team0: Port device team_slave_1 added [ 859.159584][T13714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.166688][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.226162][T13714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.428730][T13714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.435825][T13714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.492851][T13790] loop3: detected capacity change from 0 to 32768 [ 860.788797][ T5788] Bluetooth: hci1: command tx timeout [ 860.904218][T13714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.936809][T13790] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 861.111989][T13790] XFS (loop3): Ending clean mount [ 861.529065][T13415] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 861.693491][T13714] hsr_slave_0: entered promiscuous mode [ 861.741067][T13714] hsr_slave_1: entered promiscuous mode [ 861.783318][T13714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.791207][T13714] Cannot create hsr debugfs directory [ 862.868109][ T5788] Bluetooth: hci1: command tx timeout [ 863.256582][ T6181] hsr_slave_0: left promiscuous mode [ 863.288891][ T6181] hsr_slave_1: left promiscuous mode [ 863.326502][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.343536][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.370356][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.377827][ T6181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.396292][ T6181] bridge_slave_1: left allmulticast mode [ 863.408185][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.429050][ T6181] bridge_slave_0: left allmulticast mode [ 863.434786][ T6181] bridge_slave_0: left promiscuous mode [ 863.458174][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.488575][ T6181] veth1_macvtap: left promiscuous mode [ 863.494170][ T6181] veth0_macvtap: left promiscuous mode [ 863.577331][ T6181] veth1_vlan: left promiscuous mode [ 863.618903][ T6181] veth0_vlan: left promiscuous mode [ 864.270513][T13837] loop3: detected capacity change from 0 to 32768 [ 864.543925][T13849] loop3: detected capacity change from 0 to 256 [ 864.561711][T13849] exfat: Deprecated parameter 'utf8' [ 864.579566][T13849] exfat: Deprecated parameter 'namecase' [ 864.598007][T13849] exfat: Deprecated parameter 'namecase' [ 864.603776][T13849] exfat: Deprecated parameter 'namecase' [ 864.628198][T13849] exfat: Deprecated parameter 'namecase' [ 864.678727][T13849] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x26a8b90f, utbl_chksum : 0xe619d30d) [ 866.122766][ T6181] team0 (unregistering): Port device team_slave_1 removed [ 866.173971][ T6181] team0 (unregistering): Port device team_slave_0 removed [ 866.216687][ T6181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.537864][ T6181] bond0 (unregistering): Released all slaves [ 868.052195][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 868.702222][T13714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 869.802055][T13714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 869.822496][T13714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.368692][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.378689][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.489614][T13714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 870.832535][T13714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.984484][T13714] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.030686][ T6181] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.037944][ T6181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.062710][T13914] binfmt_misc: register: failed to install interpreter file ./file0 [ 871.069771][ T6181] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.078184][ T6181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.543685][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2602'. [ 871.695013][T13714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.809709][T13714] veth0_vlan: entered promiscuous mode [ 871.852227][T13714] veth1_vlan: entered promiscuous mode [ 871.945847][T13714] veth0_macvtap: entered promiscuous mode [ 871.980240][T13714] veth1_macvtap: entered promiscuous mode [ 872.112830][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.148926][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.174509][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.215096][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.253705][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.297340][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.341755][T13714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.416628][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.465166][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.505570][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.558454][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.597046][T13714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.634049][T13714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.693583][T13714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.782974][T13714] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.827979][T13714] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.873052][T13714] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.922617][T13714] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.310902][ T6181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.373379][ T6181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.533897][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.577635][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.073111][T13964] block device autoloading is deprecated and will be removed. [ 874.410378][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 876.304979][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 879.822275][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'. [ 880.808961][ T5784] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 881.030031][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.062123][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.088023][ T5784] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 881.128101][ T5784] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 881.155683][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.188958][ T5784] usb 1-1: config 0 descriptor?? [ 881.615569][ T5784] usbhid 1-1:0.0: can't add hid device: -71 [ 881.636666][ T5784] usbhid: probe of 1-1:0.0 failed with error -71 [ 881.662747][ T5784] usb 1-1: USB disconnect, device number 6 [ 881.946288][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'. [ 883.464237][T14114] use of bytesused == 0 is deprecated and will be removed in the future, [ 883.543112][T14114] use the actual size instead. [ 883.773729][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 884.838001][ T5784] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 885.063823][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.081550][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.092319][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.114793][ T5784] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 885.124315][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.143211][ T5784] usb 4-1: config 0 descriptor?? [ 885.176538][T14142] serial 00:05: in use; can't configure [ 885.203302][T14142] serial 00:05: in use; can't configure [ 885.218238][T14142] serial 00:05: in use; can't configure [ 885.779224][ T5784] usbhid 4-1:0.0: can't add hid device: -71 [ 885.794813][ T5784] usbhid: probe of 4-1:0.0 failed with error -71 [ 885.821830][ T5784] usb 4-1: USB disconnect, device number 5 [ 886.226016][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 886.256786][T14162] CIFS: Attempting to mount //127.0.0.1/share [ 886.325126][T14163] CIFS: VFS: Invalid response size 0 for command 0 [ 886.359981][T14162] CIFS: VFS: cifs_mount failed w/return code = -5 [ 886.430388][T14169] EXT4-fs (sda1): shut down requested (0) [ 886.937816][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'. [ 889.803206][T14200] bridge0: port 3(syzkaller0) entered blocking state [ 889.832570][T14200] bridge0: port 3(syzkaller0) entered disabled state [ 889.858748][T14200] syzkaller0: entered allmulticast mode [ 889.879087][T14200] syzkaller0: entered promiscuous mode [ 889.886854][T14200] bridge0: port 3(syzkaller0) entered blocking state [ 889.893728][T14200] bridge0: port 3(syzkaller0) entered forwarding state [ 889.953731][T14199] bridge0: port 3(syzkaller0) entered disabled state [ 889.987320][T14199] syzkaller0 (unregistering): left allmulticast mode [ 889.997478][T14199] syzkaller0 (unregistering): left promiscuous mode [ 890.004773][T14199] bridge0: port 3(syzkaller0) entered disabled state [ 891.009338][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 891.365260][ T5788] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 894.925599][ T27] audit: type=1800 audit(1790728829.474:153): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2702" name="protocol" dev="configfs" ino=38547 res=0 errno=0 [ 894.971719][ T27] audit: type=1800 audit(1790728829.504:154): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2702" name="local" dev="configfs" ino=38549 res=0 errno=0 [ 900.723783][T14302] nvmet: disable ns before setting buffered_io value. [ 900.967696][T14311] syzkaller0: entered promiscuous mode [ 900.996666][T14311] syzkaller0: entered allmulticast mode [ 902.540168][T14342] nvmet: disable ns before setting buffered_io value. [ 904.089769][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 904.517433][T14368] No such timeout policy "syz1" [ 904.540556][ T5784] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 904.738010][ T5784] usb 2-1: Using ep0 maxpacket: 32 [ 906.274945][T14376] jffs2: notice: (14376) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 907.523653][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 907.532387][ T5784] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 907.540113][ T5784] usb 2-1: can't read configurations, error -71 [ 907.623109][T14390] binfmt_misc: register: failed to install interpreter file ./file0 [ 907.948024][T12437] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 908.168405][T12437] usb 1-1: Using ep0 maxpacket: 32 [ 908.353587][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.363612][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.999616][T14388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.078594][T14388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.327010][T14388] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.337276][T14388] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.348183][T14388] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.357669][T14388] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.629990][T12437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 911.645575][T12437] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 911.654196][T12437] usb 1-1: can't read configurations, error -71 [ 911.996291][T14439] bridge0: port 3(syz_tun) entered blocking state [ 912.005387][T14439] bridge0: port 3(syz_tun) entered disabled state [ 912.014347][T14439] syz_tun: entered allmulticast mode [ 912.023367][T14439] syz_tun: entered promiscuous mode [ 912.031480][T14439] bridge0: port 3(syz_tun) entered blocking state [ 912.038068][T14439] bridge0: port 3(syz_tun) entered forwarding state [ 912.198457][ T5839] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 912.474660][T14439] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 912.561974][ T5839] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 912.679967][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.750825][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.772886][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.790641][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.808002][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.827708][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.879364][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.887458][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.909352][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.917412][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.939108][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.947178][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.963106][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.971615][ T5839] usb 2-1: config 1 has no interface number 0 [ 912.979487][ T5839] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 912.987552][ T5839] usb 2-1: config 1 has no interface number 0 [ 913.008012][ T5839] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 913.017776][ T5839] usb 2-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 913.033707][ T5839] usb 2-1: Product: syz [ 913.035330][ T5784] nvmet: connect request for invalid subsystem testsubsys! [ 913.048060][ T5839] usb 2-1: Manufacturer: syz [ 913.052711][ T5839] usb 2-1: SerialNumber: syz [ 913.060719][T14450] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 913.314679][ T5839] usb 2-1: 3:0 : does not exist [ 913.327989][ T5839] usb 2-1: 3:0 : does not exist [ 913.412035][ T5839] usb 2-1: USB disconnect, device number 13 [ 913.467011][T14458] udevd[14458]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 913.558010][ T5784] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 913.779896][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.798049][ T5784] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 913.807173][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.859821][ T5784] as10x_usb: device has been detected [ 913.866259][ T5784] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 913.926627][ T5784] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 913.950382][ T5784] usb 3-1: loading /lib/firmware/as102_data1_st.hex failed with error -5 [ 913.959499][ T5784] usb 3-1: Direct firmware load for as102_data1_st.hex failed with error -5 [ 913.968046][ T790] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 913.968818][ T5784] usb 3-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 914.343866][ T790] usb 1-1: Using ep0 maxpacket: 32 [ 915.231491][ T5785] nvmet: connect request for invalid subsystem testsubsys! [ 915.253921][T14481] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 915.698934][ T5839] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 915.778635][T14495] fuse: Unknown parameter '00000000000000000000' [ 915.897999][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 916.831243][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 916.865223][ T790] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 916.878722][T14495] ceph: No mds server is up or the cluster is laggy [ 916.898522][ T790] usb 1-1: can't read configurations, error -71 [ 918.052043][T11424] nvmet: connect request for invalid subsystem testsubsys! [ 918.067134][T14514] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 918.713930][ T5839] usb 4-1: unable to get BOS descriptor or descriptor too short [ 918.729416][ T5839] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 918.749583][ T5839] usb 4-1: can't read configurations, error -71 [ 919.131833][ T5785] nvmet: connect request for invalid subsystem testsubsys! [ 919.140565][T14541] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 920.014178][T14544] nvmet: disable ns before setting buffered_io value. [ 921.075152][T14556] fuse: Unknown parameter '00000000000000000000' [ 921.438292][ T5839] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 921.668116][ T5839] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 921.716643][ T5839] usb 4-1: config 0 has no interface number 0 [ 921.751755][ T5839] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 921.845633][ T5839] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 921.877267][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.917371][ T5839] usb 4-1: Product: syz [ 921.922375][T14556] ceph: No mds server is up or the cluster is laggy [ 921.952626][ T5839] usb 4-1: Manufacturer: syz [ 921.982892][ T5839] usb 4-1: SerialNumber: syz [ 922.106498][ T5785] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 922.141637][ T5839] usb 4-1: config 0 descriptor?? [ 922.171883][ T5839] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 922.324194][ T5785] usb 1-1: Using ep0 maxpacket: 32 [ 922.439068][ T5839] usb 4-1: USB disconnect, device number 8 [ 922.479222][ T5839] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 922.967928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 923.007929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 923.027921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 925.948948][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 925.979383][ T5785] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 925.987007][ T5785] usb 1-1: can't read configurations, error -71 [ 926.082321][T14610] Bluetooth: MGMT ver 1.22 [ 926.572797][T14617] No such timeout policy "syz1" [ 927.429215][T14629] md: pers->run() failed ... [ 927.468023][ T789] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 928.311891][ T789] usb 4-1: Using ep0 maxpacket: 32 [ 928.497980][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 928.716447][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 928.739387][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 929.370560][T14657] No such timeout policy "syz1" [ 930.237418][T14666] md: pers->run() failed ... [ 930.311289][T14669] md: could not open device unknown-block(1,1). [ 931.470753][T14677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2840'. [ 931.752536][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.759071][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.836469][ T789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 931.848637][ T789] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 931.856296][ T789] usb 4-1: can't read configurations, error -71 [ 932.063999][ T5821] usb 2-1: unable to get BOS descriptor or descriptor too short [ 932.078934][ T5821] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 932.097252][ T5821] usb 2-1: can't read configurations, error -71 [ 933.310452][T11424] nvmet: connect request for invalid subsystem testsubsys! [ 933.323238][T14705] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 933.808173][T11424] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 933.987961][T11424] usb 1-1: Using ep0 maxpacket: 32 [ 934.892590][ T790] nvmet: connect request for invalid subsystem testsubsys! [ 934.925221][T14729] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 934.958773][T14732] md: could not open device unknown-block(1,0). [ 935.000746][T14730] md: pers->run() failed ... [ 937.045304][T14767] ip_tables: iptables: counters copy to user failed while replacing table [ 937.257085][T11424] usb 1-1: unable to get BOS descriptor or descriptor too short [ 937.278060][T11424] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 937.296189][T11424] usb 1-1: can't read configurations, error -71 [ 937.431044][T14772] nvmet: disable ns before setting buffered_io value. [ 938.697448][T14791] No such timeout policy "syz1" [ 939.531309][T14819] xt_hashlimit: size too large, truncated to 1048576 [ 940.881021][T14853] tipc: Started in network mode [ 940.885960][T14853] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 940.893299][T14853] tipc: Enabled bearer , priority 1 [ 941.909064][T14875] binder: BINDER_SET_CONTEXT_MGR already set [ 941.915626][T14875] binder: 14874:14875 ioctl 4018620d 200000000040 returned -16 [ 942.173627][ T790] tipc: Node number set to 43690 [ 942.993708][T14901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2924'. [ 943.246028][T14901] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 943.265579][T14901] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 943.828107][ T790] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 944.028561][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 944.310211][T14918] binder: BINDER_SET_CONTEXT_MGR already set [ 944.321680][T14918] binder: 14917:14918 ioctl 4018620d 200000000040 returned -16 [ 945.649361][ T5822] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 945.848070][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 946.783955][ T27] audit: type=1800 audit(1790728881.334:155): pid=14958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2941" name="local" dev="configfs" ino=41911 res=0 errno=0 [ 947.005653][ T790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 947.021941][ T790] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 947.045740][ T790] usb 2-1: can't read configurations, error -71 [ 947.993031][T14974] nvmet: disable ns before setting buffered_io value. [ 949.201927][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 949.228258][ T5822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 949.244760][ T5822] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 949.254843][ T5822] usb 4-1: can't read configurations, error -71 [ 949.570702][T14990] overlayfs: failed to resolve './file0': -2 [ 949.849414][T14996] md: could not open device unknown-block(1,0). [ 949.871688][T14996] md: pers->run() failed ... [ 949.965872][T15000] nvmet: disable ns before setting buffered_io value. [ 950.054143][T15002] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 950.061948][T15002] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 950.318533][T15010] overlayfs: failed to resolve './file0': -2 [ 950.608263][ T790] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 950.902194][ T790] usb 1-1: Using ep0 maxpacket: 32 [ 952.729263][T15042] overlayfs: failed to resolve './file1': -2 [ 953.412576][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 953.459656][ T790] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 953.483508][ T790] usb 1-1: can't read configurations, error -71 [ 954.689923][T15065] overlayfs: failed to resolve './file1': -2 [ 956.903561][T15098] No such timeout policy "syz1" [ 958.868358][T15129] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 958.892261][T15131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3006'. [ 958.908686][T15129] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 960.267453][ T27] audit: type=1800 audit(1790728894.754:156): pid=15155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3016" name="protocol" dev="configfs" ino=42917 res=0 errno=0 [ 960.412419][T15159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3018'. [ 962.699932][ T27] audit: type=1800 audit(1790728897.204:157): pid=15185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3028" name="protocol" dev="configfs" ino=43210 res=0 errno=0 [ 962.981169][T15197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3033'. [ 964.154567][T15219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3043'. [ 967.053887][T15248] No such timeout policy "syz1" [ 967.101952][T15250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3054'. [ 967.943381][T15257] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.951175][T15257] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.113151][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.139575][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.573408][T15291] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 971.589815][T15291] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 971.712325][T15257] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.721896][T15257] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.730867][T15257] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.739903][T15257] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.836869][T15289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3063'. [ 975.424073][T15319] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 975.778271][ T789] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 975.842003][T15322] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.850199][T15322] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.999088][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 976.635497][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.692290][T15322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.640459][T15322] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.649696][T15322] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.658722][T15322] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.667681][T15322] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.776684][T15347] tipc: Started in network mode [ 977.781889][T15347] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 977.789328][T15347] tipc: Enabled bearer , priority 1 [ 977.853557][ T5784] as10x_usb: unable to locate firmware file: as102_data1_st.hex [ 977.861761][ T5784] Registered device Abilis Systems DVB-Titan [ 977.880911][ T5784] usb 3-1: USB disconnect, device number 5 [ 978.046523][ T5784] Unregistered device Abilis Systems DVB-Titan [ 978.050164][ T5784] as10x_usb: device has been disconnected [ 979.284616][ T42] tipc: Node number set to 43690 [ 980.293707][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 980.403353][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 980.418547][ T789] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 980.426239][ T789] usb 2-1: can't read configurations, error -71 [ 981.121163][T15381] syzkaller0: entered promiscuous mode [ 981.136234][T15381] syzkaller0: entered allmulticast mode [ 985.128811][T15456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3123'. [ 985.229346][T15456] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 985.285198][T15456] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 985.488105][ T5839] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 985.698033][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 986.263375][T15475] No such timeout policy "syz1" [ 987.707926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 988.738385][T15495] binder: 15494:15495 ioctl c0306201 0 returned -14 [ 988.985100][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 989.033566][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 989.048354][ T5839] usb 3-1: can't read configurations, error -71 [ 989.579491][T15515] No such timeout policy "syz1" [ 990.719852][T15520] binder: 15519:15520 ioctl c0306201 0 returned -14 [ 991.511819][T15542] binder: 15541:15542 ioctl c0306201 0 returned -14 [ 992.921003][T15546] md: pers->run() failed ... [ 993.192302][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.199099][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.069915][T15573] md: pers->run() failed ... [ 994.409484][T15586] syz.1.3171 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 998.518123][ T5822] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 998.708836][ T5822] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 998.736662][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 998.757960][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.778262][ T5822] usb 1-1: config 1 has no interface number 0 [ 998.785380][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 998.801582][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.827939][ T5822] usb 1-1: config 1 has no interface number 0 [ 998.835033][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 998.857978][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.868605][ T5822] usb 1-1: config 1 has no interface number 0 [ 998.888606][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 998.896666][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.898177][ T5785] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 998.927961][ T5822] usb 1-1: config 1 has no interface number 0 [ 998.935309][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 998.948007][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.968146][ T5822] usb 1-1: config 1 has no interface number 0 [ 999.013470][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 999.066868][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.188420][ T5822] usb 1-1: config 1 has no interface number 0 [ 999.259781][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 999.333149][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.455189][ T5822] usb 1-1: config 1 has no interface number 0 [ 999.512309][ T5822] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 999.581834][ T5822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.670006][ T5822] usb 1-1: config 1 has no interface number 0 [ 999.687150][ T5822] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 999.707979][ T5822] usb 1-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 999.716554][ T5822] usb 1-1: Product: syz [ 999.727972][ T5822] usb 1-1: Manufacturer: syz [ 999.732754][ T5822] usb 1-1: SerialNumber: syz [ 999.768077][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 1000.025394][ T789] usb 1-1: USB disconnect, device number 17 [ 1002.082525][ T5785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1002.099439][ T5785] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1002.107063][ T5785] usb 3-1: can't read configurations, error -71 [ 1003.113804][ T789] nvmet: connect request for invalid subsystem testsubsys! [ 1003.124289][T15728] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1003.408019][ T789] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1003.608422][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 1004.182954][T15743] syzkaller0: entered promiscuous mode [ 1004.208008][T15743] syzkaller0: entered allmulticast mode [ 1007.337275][ T789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1007.358603][ T789] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1007.366323][ T789] usb 1-1: can't read configurations, error -71 [ 1007.615581][T15773] syzkaller0: entered promiscuous mode [ 1007.623733][T15773] syzkaller0: entered allmulticast mode [ 1009.032519][T15806] md: pers->run() failed ... [ 1009.108270][T15810] md: could not open device unknown-block(1,1). [ 1010.525556][T15847] md: pers->run() failed ... [ 1010.612913][T15852] md: could not open device unknown-block(1,1). [ 1012.372661][T15883] md: pers->run() failed ... [ 1012.418466][ T5822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1012.426180][T15886] md: could not open device unknown-block(1,1). [ 1012.618790][ T5822] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1012.634913][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.650307][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1012.667503][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.679581][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1012.693189][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.728201][T15900] No such timeout policy "syz1" [ 1012.884421][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.048993][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.197723][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.346627][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.374125][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.404230][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.416091][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.458907][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.479009][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.502761][ T5822] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.523395][ T5822] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1013.545616][ T5822] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1013.565716][ T5822] usb 2-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1013.575310][ T5822] usb 2-1: Product: syz [ 1013.580015][ T5822] usb 2-1: Manufacturer: syz [ 1013.583220][T15907] md: pers->run() failed ... [ 1013.584716][ T5822] usb 2-1: SerialNumber: syz [ 1014.134083][ T5839] usb 2-1: USB disconnect, device number 20 [ 1014.626592][T15918] md: pers->run() failed ... [ 1014.710419][T15923] md: could not open device unknown-block(1,1). [ 1015.715023][T15932] No such timeout policy "syz1" [ 1017.342207][T15957] md: pers->run() failed ... [ 1017.441083][T15964] md: could not open device unknown-block(1,1). [ 1017.524386][T15967] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1019.717081][T15991] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1019.813630][T15991] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1020.025028][T15993] md: pers->run() failed ... [ 1020.749483][T16018] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1020.843568][T16018] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1021.490026][T16046] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1021.497857][T16046] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1022.457866][T16064] Illegal XDP return value 2121605161 on prog (id 191) dev N/A, expect packet loss! [ 1023.519735][T16084] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1023.527286][T16084] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1023.579882][T16087] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1023.966263][T16108] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1023.986250][T16108] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1024.063468][T16111] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1025.123866][T16139] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1025.141824][T16139] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1025.234366][T16143] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1026.202903][ T5821] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1026.332211][T16167] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1026.369194][T16167] syzkaller0: entered promiscuous mode [ 1026.375769][T16167] syzkaller0: entered allmulticast mode [ 1026.392405][T16172] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1026.410684][T16172] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1026.422810][ T5821] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1026.438524][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.450763][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.463242][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.486075][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.497995][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.512895][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.527660][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.538127][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.558372][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.578562][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.586774][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.590439][T16179] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1026.602603][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.643945][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.664784][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.694854][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.732547][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.740906][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.767384][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.791265][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.800158][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.810846][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.846051][ T5821] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1026.854357][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.876508][ T5821] usb 2-1: config 1 has no interface number 0 [ 1026.925004][ T5821] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1026.943910][ T5821] usb 2-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 1026.954081][ T5821] usb 2-1: Product: syz [ 1026.973005][ T5821] usb 2-1: Manufacturer: syz [ 1026.977670][ T5821] usb 2-1: SerialNumber: syz [ 1027.239580][ T5821] usb 2-1: USB disconnect, device number 21 [ 1028.164436][T16207] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1028.176815][T16207] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1037.063540][T16295] tipc: Started in network mode [ 1037.068690][T16295] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1037.075961][T16295] tipc: Enabled bearer , priority 1 [ 1037.509818][T16309] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.526503][T16309] binder: 16306:16309 ioctl 4018620d 200000000040 returned -16 [ 1038.494124][ T5821] tipc: Node number set to 43690 [ 1040.599168][T16339] tipc: Started in network mode [ 1040.604298][T16339] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1040.612346][T16339] tipc: Enabled bearer , priority 1 [ 1041.618125][ T42] tipc: Node number set to 43690 [ 1042.287172][T16373] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1043.688868][T16394] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.705296][T16394] binder: 16393:16394 ioctl 4018620d 200000000040 returned -16 [ 1044.128169][ T5821] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1046.938551][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 1047.057348][ T5821] usb 2-1: device descriptor read/all, error -71 [ 1047.308645][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1047.518180][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1052.151818][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1052.520028][ T42] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1052.527824][ T42] usb 3-1: can't read configurations, error -71 [ 1053.778126][T16491] tipc: Enabling of bearer rejected, already enabled [ 1054.638480][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.644943][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.108130][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1055.296598][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1057.827251][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1057.904090][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1057.922226][ T8] usb 2-1: can't read configurations, error -71 [ 1059.236907][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3504'. [ 1059.246368][T16530] bridge_slave_1: left allmulticast mode [ 1059.252082][T16530] bridge_slave_1: left promiscuous mode [ 1059.259162][T16530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.267784][T16530] bridge_slave_0: left allmulticast mode [ 1059.273922][T16530] bridge_slave_0: left promiscuous mode [ 1059.282460][T16530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.704009][T16537] tipc: Enabling of bearer rejected, already enabled [ 1060.926176][T16548] No such timeout policy "syz1" [ 1062.344197][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 1062.475545][T16567] syzkaller0: entered promiscuous mode [ 1062.481689][T16567] syzkaller0: entered allmulticast mode [ 1063.768155][T16580] tipc: Enabling of bearer rejected, already enabled [ 1064.333790][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 1065.278051][ T789] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1065.528014][ T789] usb 3-1: not running at top speed; connect to a high speed hub [ 1065.558607][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.597591][ T789] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1065.610384][ T789] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1065.640649][ T789] usb 3-1: Product: syz [ 1065.651729][ T789] usb 3-1: Manufacturer: syz [ 1065.703869][ T789] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 1065.718391][ T789] usb 3-1: No streaming interface found for terminal 2. [ 1066.011589][ T5821] usb 3-1: USB disconnect, device number 12 [ 1066.678066][ T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1066.997999][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1069.906181][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1069.918040][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1069.925662][ T8] usb 2-1: can't read configurations, error -71 [ 1071.808018][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1071.988811][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1071.995729][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.018069][ T8] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.032308][ T8] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.038102][ T790] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1072.042244][ T8] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1072.062930][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1072.069952][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1072.079424][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.093305][ T8] usb 3-1: config 0 descriptor?? [ 1072.238008][ T790] usb 1-1: Using ep0 maxpacket: 32 [ 1072.405203][T16647] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1073.189262][ T8] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 1073.237775][T16669] udevd[16669]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1073.413955][ T8] usb 3-1: USB disconnect, device number 13 [ 1073.428054][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 1075.335866][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1075.387600][ T790] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1075.396266][ T790] usb 1-1: can't read configurations, error -71 [ 1075.600131][ T789] nvmet: connect request for invalid subsystem testsubsys! [ 1075.611419][T16695] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1077.202787][T16722] input: syz0 as /devices/virtual/input/input9 [ 1077.587186][ T790] nvmet: connect request for invalid subsystem testsubsys! [ 1077.595810][T16730] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1079.096281][T16755] No such timeout policy "syz1" [ 1079.915721][T16762] ip_tables: iptables: counters copy to user failed while replacing table [ 1079.963139][ T790] nvmet: connect request for invalid subsystem testsubsys! [ 1079.988267][T16761] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1082.582932][ T5839] nvmet: connect request for invalid subsystem testsubsys! [ 1082.593640][T16792] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1085.602802][T16828] udevd[16828]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 1086.629430][ T5821] nvmet: connect request for invalid subsystem testsubsys! [ 1086.642233][T16837] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1086.903646][T16842] resource: resource sanity check: requesting [mem 0x00000000fe800000-0x00000000fe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 1086.931728][T16842] caller generic_access_phys+0x33f/0x650 mapping multiple BARs [ 1088.281059][ T5839] nvmet: connect request for invalid subsystem testsubsys! [ 1088.299237][T16861] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1088.698199][ T5839] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1088.913895][ T5839] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1088.928709][ T5839] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1089.072407][ T5839] usb 4-1: Product: syz [ 1089.110091][ T5839] usb 4-1: Manufacturer: syz [ 1089.154993][ T5839] usb 4-1: SerialNumber: syz [ 1089.271306][ T5839] usb 4-1: config 0 descriptor?? [ 1089.288773][ T5839] ch341 4-1:0.0: ch341-uart converter detected [ 1089.703580][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1090.239041][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 1090.251542][ T5839] usb 4-1: failed to send control message: -71 [ 1090.273535][T16893] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1090.282414][ T5839] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1090.306036][ T5839] usb 4-1: USB disconnect, device number 13 [ 1090.329164][ T5839] ch341 4-1:0.0: device disconnected [ 1090.439664][T16905] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3623'. [ 1090.899419][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 1090.907482][T16927] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1091.970591][ T789] nvmet: connect request for invalid subsystem testsubsys! [ 1091.982856][T16950] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1092.482601][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 1092.494703][T16981] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1093.887406][ T789] nvmet: connect request for invalid subsystem testsubsys! [ 1093.901863][T17012] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1094.887363][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 1094.905114][T17049] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1096.148042][ T5839] nvmet: connect request for invalid subsystem testsubsys! [ 1096.168038][T17076] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1097.835387][ T5839] nvmet: connect request for invalid subsystem testsubsys! [ 1097.855367][T17108] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1099.470448][ T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1099.774218][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1099.809280][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.852294][ T42] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.901879][ T42] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.953895][ T42] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1099.971969][ T5839] nvmet: connect request for invalid subsystem testsubsys! [ 1100.007590][T17139] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1100.262325][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1100.290689][ T42] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1100.683957][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.722773][ T42] usb 3-1: config 0 descriptor?? [ 1100.997845][T17126] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1101.280086][ T42] logitech-djreceiver 0003:046D:C53A.0007: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 1101.320413][T17155] udevd[17155]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1102.040813][ T5839] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1102.153453][ T5821] usb 3-1: USB disconnect, device number 14 [ 1102.407980][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 1102.532881][ T5839] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1102.640794][ T5839] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1102.777380][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.899013][ T5839] usb 4-1: Product: syz [ 1102.903247][ T5839] usb 4-1: Manufacturer: syz [ 1102.907869][ T5839] usb 4-1: SerialNumber: syz [ 1102.962552][ T5839] usb 4-1: config 0 descriptor?? [ 1102.968752][T17154] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1103.046730][ T5839] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1103.224696][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 1103.253973][T17176] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1103.322889][ T5839] usb 4-1: USB disconnect, device number 14 [ 1103.471615][T17180] udevd[17180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1104.230512][ T5839] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1104.518148][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 1104.554465][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.604945][ T5839] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.652715][ T5839] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.699926][ T5839] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1104.763670][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1104.784452][ T42] nvmet: connect request for invalid subsystem testsubsys! [ 1104.810432][ T5839] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1104.824805][T17210] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1104.858753][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.903507][ T5839] usb 2-1: config 0 descriptor?? [ 1105.519874][T17198] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3732'. [ 1105.870858][ T5839] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 1105.952272][T17222] udevd[17222]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1106.071716][ T5839] usb 2-1: USB disconnect, device number 28 [ 1106.283635][ T790] nvmet: connect request for invalid subsystem testsubsys! [ 1106.291771][T17239] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 1106.708058][ T789] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1106.840476][ T5821] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1106.898158][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 1106.998328][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1107.030323][ T5821] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1107.047984][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.080467][ T5821] usb 3-1: config 0 descriptor?? [ 1107.198203][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1108.406648][ T5821] usb 3-1: Cannot set autoneg [ 1108.412362][ T5821] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 1108.426888][ T5821] usb 3-1: USB disconnect, device number 15 [ 1109.020567][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3758'. [ 1109.030008][T17273] bridge_slave_1: left allmulticast mode [ 1109.035726][T17273] bridge_slave_1: left promiscuous mode [ 1109.042134][T17273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.056984][T17273] bridge_slave_0: left allmulticast mode [ 1109.062782][T17273] bridge_slave_0: left promiscuous mode [ 1109.068894][T17273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.842834][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1109.851858][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1109.859587][ T8] usb 2-1: can't read configurations, error -71 [ 1111.072525][ T789] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1111.096609][ T789] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1111.122123][ T789] usb 1-1: can't read configurations, error -71 [ 1112.160917][ T789] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1112.807316][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1113.070024][ T789] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 1113.079481][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.254235][ T789] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 7e:fe:d7:cf:4d:85 [ 1114.701800][ T5839] usb 1-1: USB disconnect, device number 23 [ 1114.875371][ T5839] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 1116.017619][T17354] No such timeout policy "syz1" [ 1116.083119][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.091696][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.458073][ T5839] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1117.518023][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1117.578025][ T789] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1117.639611][ T5839] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1117.648983][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.658884][ T5839] usb 1-1: config 0 descriptor?? [ 1117.700281][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1117.712055][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1117.723352][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1117.736590][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1117.745940][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.757377][ T8] usb 3-1: config 0 descriptor?? [ 1117.768184][T17397] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1117.779718][ T789] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1117.792891][ T789] usb 4-1: not running at top speed; connect to a high speed hub [ 1117.802471][ T789] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 4 [ 1117.816862][ T789] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1117.826195][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.834463][ T789] usb 4-1: Product: syz [ 1117.838849][ T789] usb 4-1: Manufacturer: syz [ 1117.843583][ T789] usb 4-1: SerialNumber: syz [ 1118.118758][ T789] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 1118.129093][ T789] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 1118.146448][ T789] usb 4-1: USB disconnect, device number 15 [ 1118.187857][ T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1118.198508][ T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1118.209933][ T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1118.217379][ T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1118.225329][ T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1118.233925][ T8] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 1118.253971][ T8] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 1118.283755][ T8] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1118.323123][T17415] udevd[17415]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1118.923367][T17427] UDC core: g1: couldn't find an available UDC or it's busy [ 1119.399649][ T5839] usb 1-1: Cannot set autoneg [ 1119.410462][ T5839] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1119.431945][ T5839] usb 1-1: USB disconnect, device number 24 [ 1120.586176][ T790] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 1121.274925][T17471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1121.787518][ T5839] usb 3-1: USB disconnect, device number 16 [ 1123.508805][T17486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3828'. [ 1123.518166][T17486] syz_tun: left allmulticast mode [ 1123.523301][T17486] syz_tun: left promiscuous mode [ 1123.529069][T17486] bridge0: port 3(syz_tun) entered disabled state [ 1123.554048][T17486] bridge_slave_1: left allmulticast mode [ 1123.559922][T17486] bridge_slave_1: left promiscuous mode [ 1123.566368][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.587586][T17486] bridge_slave_0: left allmulticast mode [ 1123.593460][T17486] bridge_slave_0: left promiscuous mode [ 1123.601236][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.006713][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'. [ 1124.048254][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'. [ 1124.235537][T17498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1125.077989][ T790] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1125.526675][ T790] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.556081][ T790] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1125.572992][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.750051][T17526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1126.315731][ T790] wacom 0003:056A:033B.000A: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 1126.389056][ T790] wacom 0003:056A:033B.000A: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 1127.260571][T17534] No such timeout policy "syz1" [ 1127.296228][T17535] udevd[17535]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 1127.482207][ T790] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.000A/input/input10 [ 1127.745043][ T790] usb 1-1: USB disconnect, device number 25 [ 1128.520750][T17567] No such timeout policy "syz1" [ 1130.423085][T17577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1132.018027][ T5839] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1132.663829][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 1132.674394][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.688518][ T5839] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.703219][ T5839] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.810908][ T5839] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1134.287951][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1134.294640][ T5839] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1135.240795][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.266515][ T5839] usb 4-1: config 0 descriptor?? [ 1135.293079][ T5839] usb 4-1: can't set config #0, error -71 [ 1135.300340][T17601] nvme_fabrics: missing parameter 'nqn=%s' [ 1135.306795][ T5839] usb 4-1: USB disconnect, device number 16 [ 1135.412554][ T5821] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1135.648118][T17612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1137.536897][T17636] nvme_fabrics: missing parameter 'nqn=%s' [ 1138.258436][ T5821] usb 3-1: device not accepting address 17, error -71 [ 1138.901030][T17648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1139.622518][T17661] nvme_fabrics: missing parameter 'nqn=%s' [ 1140.864179][T17678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1141.290096][T17684] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1142.135795][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1142.295735][ T5822] nvmet: connect request for invalid subsystem test! [ 1142.311772][T17705] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "test" [ 1142.817301][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'. [ 1142.826568][T17710] bridge_slave_1: left allmulticast mode [ 1142.832319][T17710] bridge_slave_1: left promiscuous mode [ 1142.838633][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.915300][T17710] bridge_slave_0: left allmulticast mode [ 1142.921169][T17710] bridge_slave_0: left promiscuous mode [ 1142.927756][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.344607][T17715] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1144.748730][T17729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1147.100004][T17748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3917'. [ 1147.887280][T17759] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1151.328044][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3931'. [ 1151.599648][T17783] 9pnet_fd: Insufficient options for proto=fd [ 1151.707686][T17805] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1155.296180][T17834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1155.723458][T17844] binder: 17843:17844 ioctl c0306201 200000000080 returned -14 [ 1155.814506][T17848] deleting an unspecified loop device is not supported. [ 1158.714802][T17876] usb usb8: usbfs: process 17876 (syz.1.3953) did not claim interface 1 before use [ 1158.856261][T17883] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1161.100274][T17913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1162.667661][T17941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1164.591892][T17964] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1166.704093][T17996] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1168.278699][T18006] syzkaller0: entered promiscuous mode [ 1168.284492][T18006] syzkaller0: entered allmulticast mode [ 1168.615552][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4003'. [ 1168.834921][T18025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1170.738353][ T789] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1170.788844][T18038] syzkaller0: entered promiscuous mode [ 1170.794647][T18038] syzkaller0: entered allmulticast mode [ 1170.916147][T18048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1172.260902][T18060] No such timeout policy "syz1" [ 1172.628216][ T789] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1172.655347][ T789] usb 4-1: can't read configurations, error -71 [ 1173.837399][T18079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1176.661216][T18117] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1177.543335][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.551118][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.401929][T18165] netlink: 'syz.1.4053': attribute type 4 has an invalid length. [ 1180.448348][T18165] netlink: 'syz.1.4053': attribute type 4 has an invalid length. [ 1180.632109][T18180] syzkaller0: entered promiscuous mode [ 1180.637866][T18180] syzkaller0: entered allmulticast mode [ 1180.658044][ T42] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1181.069973][ T42] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1181.111771][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.229984][ T42] usb 1-1: config 0 descriptor?? [ 1181.322400][ T42] cp210x 1-1:0.0: cp210x converter detected [ 1182.369771][ T42] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1183.158772][ T42] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1183.180917][ T42] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1183.197732][ T42] usb 1-1: USB disconnect, device number 26 [ 1183.217103][ T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1183.235821][ T42] cp210x 1-1:0.0: device disconnected [ 1183.728226][ T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1184.053867][ T8] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 1184.169955][ T8] usb 3-1: config 0 has no interface number 0 [ 1184.176132][ T8] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1184.189664][ T8] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1184.199169][ T8] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1184.207195][ T8] usb 3-1: Manufacturer: syz [ 1184.212323][ T8] usb 3-1: SerialNumber: syz [ 1184.229520][ T8] usb 3-1: config 0 descriptor?? [ 1184.718347][ T42] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1184.970419][ T42] usb 4-1: config 1 has an invalid interface number: 155 but max is 0 [ 1184.992094][ T42] usb 4-1: config 1 has no interface number 0 [ 1185.012382][ T42] usb 4-1: config 1 interface 155 altsetting 7 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1185.038022][ T42] usb 4-1: config 1 interface 155 has no altsetting 0 [ 1185.068403][ T42] usb 4-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=40.66 [ 1185.102440][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.132833][ T42] usb 4-1: Product: syz [ 1185.137064][ T42] usb 4-1: Manufacturer: syz [ 1185.168025][ T42] usb 4-1: SerialNumber: syz [ 1185.194741][T18221] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1185.350703][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1185.487739][ T42] pegasus 4-1:1.155: Missing or invalid endpoints [ 1185.545494][ T42] usb 4-1: USB disconnect, device number 19 [ 1185.649828][ T8] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input13 [ 1185.848045][T11424] usb 3-1: USB disconnect, device number 19 [ 1190.478135][ T789] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1190.760431][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1190.769955][ T789] usb 2-1: not running at top speed; connect to a high speed hub [ 1190.782371][ T789] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 59, changing to 4 [ 1190.797475][ T789] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1190.807140][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.815619][ T789] usb 2-1: Product: syz [ 1190.820335][ T789] usb 2-1: Manufacturer: syz [ 1190.825029][ T789] usb 2-1: SerialNumber: syz [ 1191.148777][ T789] usb 2-1: failed waiting for Axe-Fx III to boot: -71 [ 1191.165026][ T789] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 1191.190928][ T789] usb 2-1: USB disconnect, device number 31 [ 1193.966394][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 1195.629853][T18381] No such timeout policy "syz1" [ 1196.301543][T18353] tipc: Disabling bearer [ 1196.762200][ T790] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1196.968259][ T790] usb 1-1: Using ep0 maxpacket: 16 [ 1197.155020][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.293081][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1197.348368][ T790] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.379855][ T790] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.426653][ T790] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1197.487618][ T790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1197.524790][ T790] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1197.565204][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.690788][ T790] usb 1-1: config 0 descriptor?? SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 1197.910464][T18383] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4124'. [ 1198.136850][ T790] usbhid 1-1:0.0: can't add hid device: -71 [ 1198.173627][ T790] usbhid: probe of 1-1:0.0 failed with error -71 [ 1198.252061][ T790] usb 1-1: USB disconnect, device number 27 [ 1198.530830][T18397] tipc: Disabling bearer [ 1198.869214][T17274] tipc: Disabling bearer [ 1198.889997][ T74] tipc: Left network mode [ 1199.120312][T18383] tipc: Resetting bearer [ 1199.188503][T18383] tipc: Disabling bearer [ 1200.353702][ T74] hsr_slave_0: left promiscuous mode [ 1200.359765][ T74] hsr_slave_1: left promiscuous mode [ 1200.365626][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.373618][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.921971][ T74] team0 (unregistering): Port device team_slave_1 removed [ 1200.985366][ T74] team0 (unregistering): Port device team_slave_0 removed [ 1201.040340][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.086406][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.454723][ T74] bond0 (unregistering): Released all slaves [ 1202.084914][ T74] tipc: Left network mode [ 1202.881657][ T74] hsr_slave_0: left promiscuous mode [ 1202.887487][ T74] hsr_slave_1: left promiscuous mode [ 1202.894101][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.904865][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1203.446771][ T74] team0 (unregistering): Port device team_slave_1 removed [ 1203.503061][ T74] team0 (unregistering): Port device team_slave_0 removed [ 1203.554055][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.606967][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.960718][ T74] bond0 (unregistering): Released all slaves