last executing test programs: 8.39383965s ago: executing program 0 (id=166): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000280)={[{@nojoliet}, {@uid}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {}, {@check_relaxed}, {@check_relaxed}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") syz_open_procfs(0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000000c0)='bfs\x00', 0x1) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 8.348603351s ago: executing program 1 (id=167): socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x64000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 7.435721244s ago: executing program 0 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x4000850) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x80000000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) epoll_create1(0x80000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) sendmsg$inet(r8, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000002280)={0x28, 0x6, r9, 0x0, &(0x7f0000001280)="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", 0xfee, 0x1}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7ff, r10, 0xffff0000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x8b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r9}) 6.129455574s ago: executing program 0 (id=171): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) pwrite64(r0, &(0x7f0000000100)='\b', 0x1, 0x9400) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 6.023976157s ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0xad, 0x7fff0029}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 6.020158847s ago: executing program 1 (id=174): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) 4.877398874s ago: executing program 3 (id=177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x0, 0x4, 0x0, 0x131c, 0x0, 0x400000004, 0x1000008}, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.773986537s ago: executing program 1 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000180)=0xc, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.464042708s ago: executing program 1 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='6', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.393967799s ago: executing program 3 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x594}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000b140)=[{{0x0, 0x0, &(0x7f0000009dc0)=[{&(0x7f0000007b00)="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", 0x482}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1}, 0xfffffff5}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003680)=""/209, 0xd1}, {&(0x7f0000003780)=""/223, 0xdf}, {&(0x7f0000003880)=""/235, 0xeb}], 0x3}, 0x4}], 0x2, 0x20, 0x0) 3.215125294s ago: executing program 2 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) 3.189628094s ago: executing program 0 (id=182): socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x64000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 3.077465417s ago: executing program 2 (id=183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2.95340542s ago: executing program 2 (id=184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583dd996ddbf2923", 0x10}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r2, 0x0, 0x10000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 1.950684363s ago: executing program 3 (id=185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.865685186s ago: executing program 3 (id=186): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) 1.790859867s ago: executing program 0 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000180)=0xc, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.781575868s ago: executing program 2 (id=188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x0, 0x4, 0x0, 0x131c, 0x0, 0x400000004, 0x1000008}, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000a40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 269.537014ms ago: executing program 0 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0xb00) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x251, "cd5544b6651ed19c4ddab0a17cf891fcf3a5d1d2fdc5f86d6d96287ec0b5c0c5", 0xb8, 0x0, 0x0, 0x7, 0x0, 0x7fffffff, 0x7, 0x3, [0xd, 0xdb9, 0x8, 0x2]}) 218.946995ms ago: executing program 3 (id=190): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x17, 0xffffbffe, 0x82}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(r2) r3 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x5) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) poll(&(0x7f0000000200)=[{r4, 0x4000}], 0x1, 0x9) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010800040000000000000b00000008000300006f3ef4b70f3708b3fe72b8d0dfbdc22414c4b997e28a71142c66ee41770b6e9dc5d4b3647b8a47d3f731d3bcb2cbbf694806bab56b19370cd94db4687171de9ff5df8081085d755ce174e88a8a404a4fd2fcde79686df6a5b47974", @ANYRES32=r7, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200020000000800030006ac0f00"], 0x44}}, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40800, 0x126) futex(&(0x7f000000cffc)=0x2000, 0x80000000000b, 0x0, 0x0, &(0x7f0000000240), 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x1) syz_clone3(&(0x7f0000000700)={0x200800000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 183.409216ms ago: executing program 2 (id=191): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) linkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) pwrite64(r0, &(0x7f0000000100)='\b', 0x1, 0x9400) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 181.563446ms ago: executing program 1 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) 54.969439ms ago: executing program 2 (id=193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x594}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000b140)=[{{0x0, 0x0, &(0x7f0000009dc0)=[{&(0x7f0000007b00)="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", 0x482}], 0x1}}], 0x1, 0x4000001) r1 = dup(r0) recvmmsg(r1, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1}, 0xfffffff5}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003680)=""/209, 0xd1}, {&(0x7f0000003780)=""/223, 0xdf}, {&(0x7f0000003880)=""/235, 0xeb}], 0x3}, 0x4}], 0x2, 0x20, 0x0) 0s ago: executing program 1 (id=194): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 62.193238][ T5759] cgroup: Unknown subsys name 'net' [ 62.322533][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.687856][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.676615][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.684889][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.685019][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.702770][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.705936][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.711756][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.717042][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.724874][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.732120][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.738517][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.745958][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.754272][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.761432][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.768771][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.773730][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.780364][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.787429][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.794216][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.808288][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.816383][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.824308][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.832907][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.840348][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.848047][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.217469][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 66.298348][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 66.350577][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 66.401109][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.408355][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.416209][ T5777] bridge_slave_0: entered allmulticast mode [ 66.423052][ T5777] bridge_slave_0: entered promiscuous mode [ 66.448760][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 66.469104][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.476361][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.483510][ T5777] bridge_slave_1: entered allmulticast mode [ 66.490862][ T5777] bridge_slave_1: entered promiscuous mode [ 66.571551][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.578793][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.588474][ T5771] bridge_slave_0: entered allmulticast mode [ 66.595180][ T5771] bridge_slave_0: entered promiscuous mode [ 66.625224][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.635231][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.644955][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.652398][ T5771] bridge_slave_1: entered allmulticast mode [ 66.661321][ T5771] bridge_slave_1: entered promiscuous mode [ 66.689440][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.718762][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.725965][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.733326][ T5778] bridge_slave_0: entered allmulticast mode [ 66.740709][ T5778] bridge_slave_0: entered promiscuous mode [ 66.759040][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.766955][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.774126][ T5772] bridge_slave_0: entered allmulticast mode [ 66.783674][ T5772] bridge_slave_0: entered promiscuous mode [ 66.800554][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.807972][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.815110][ T5772] bridge_slave_1: entered allmulticast mode [ 66.822272][ T5772] bridge_slave_1: entered promiscuous mode [ 66.829746][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.837146][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.844308][ T5778] bridge_slave_1: entered allmulticast mode [ 66.852005][ T5778] bridge_slave_1: entered promiscuous mode [ 66.869380][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.881755][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.923333][ T5777] team0: Port device team_slave_0 added [ 66.949787][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.971825][ T5777] team0: Port device team_slave_1 added [ 66.980117][ T5771] team0: Port device team_slave_0 added [ 66.988546][ T5771] team0: Port device team_slave_1 added [ 67.002650][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.022045][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.070278][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.088548][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.098068][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.125552][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.144437][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.152134][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.178227][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.193007][ T5772] team0: Port device team_slave_0 added [ 67.201594][ T5772] team0: Port device team_slave_1 added [ 67.214813][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.223021][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.249239][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.260808][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.268174][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.294707][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.322504][ T5778] team0: Port device team_slave_0 added [ 67.331172][ T5778] team0: Port device team_slave_1 added [ 67.382537][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.389834][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.416077][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.429503][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.436600][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.462572][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.474216][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.481352][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.507275][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.549468][ T5771] hsr_slave_0: entered promiscuous mode [ 67.556017][ T5771] hsr_slave_1: entered promiscuous mode [ 67.563246][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.572881][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.599066][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.625926][ T5777] hsr_slave_0: entered promiscuous mode [ 67.632473][ T5777] hsr_slave_1: entered promiscuous mode [ 67.639000][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.646904][ T5777] Cannot create hsr debugfs directory [ 67.752201][ T5778] hsr_slave_0: entered promiscuous mode [ 67.758584][ T5778] hsr_slave_1: entered promiscuous mode [ 67.764581][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.772255][ T5778] Cannot create hsr debugfs directory [ 67.782669][ T5772] hsr_slave_0: entered promiscuous mode [ 67.790215][ T5772] hsr_slave_1: entered promiscuous mode [ 67.796920][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.804485][ T5772] Cannot create hsr debugfs directory [ 67.845852][ T5787] Bluetooth: hci0: command tx timeout [ 67.845865][ T5784] Bluetooth: hci1: command tx timeout [ 67.927181][ T5787] Bluetooth: hci3: command tx timeout [ 67.927224][ T5784] Bluetooth: hci2: command tx timeout [ 68.172651][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.190130][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.200906][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.211395][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.273268][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.282933][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.311179][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.320478][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.383249][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.392942][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.403220][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.413848][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.490714][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.500710][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.511486][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.522156][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.607976][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.659569][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.702572][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.710029][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.732515][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.746683][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.753790][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.803634][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.812712][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.841763][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.848935][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.877201][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.884327][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.910412][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.923465][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.955069][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.978748][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.985913][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.999357][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.006531][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.026626][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.033751][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.055131][ T5771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.068875][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.097751][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.104865][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.392507][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.520891][ T5777] veth0_vlan: entered promiscuous mode [ 69.552703][ T5777] veth1_vlan: entered promiscuous mode [ 69.593286][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.643468][ T5777] veth0_macvtap: entered promiscuous mode [ 69.680704][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.700153][ T5777] veth1_macvtap: entered promiscuous mode [ 69.742025][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.771193][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.782580][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.801433][ T5772] veth0_vlan: entered promiscuous mode [ 69.812113][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.822026][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831858][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.841919][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.891432][ T5772] veth1_vlan: entered promiscuous mode [ 69.903802][ T5771] veth0_vlan: entered promiscuous mode [ 69.925999][ T5784] Bluetooth: hci1: command tx timeout [ 69.931526][ T5784] Bluetooth: hci0: command tx timeout [ 69.952758][ T5771] veth1_vlan: entered promiscuous mode [ 69.999640][ T5778] veth0_vlan: entered promiscuous mode [ 70.006139][ T5787] Bluetooth: hci3: command tx timeout [ 70.011644][ T5784] Bluetooth: hci2: command tx timeout [ 70.026990][ T5772] veth0_macvtap: entered promiscuous mode [ 70.040417][ T5778] veth1_vlan: entered promiscuous mode [ 70.061766][ T5772] veth1_macvtap: entered promiscuous mode [ 70.096960][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.114199][ T5778] veth0_macvtap: entered promiscuous mode [ 70.134330][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.145703][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.154311][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.166034][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.186494][ T5778] veth1_macvtap: entered promiscuous mode [ 70.194914][ T5771] veth0_macvtap: entered promiscuous mode [ 70.226126][ T5771] veth1_macvtap: entered promiscuous mode [ 70.240385][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.251861][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.262864][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.273420][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.285018][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.297745][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.308721][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.320113][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.331358][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.340667][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.349482][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.358439][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.376667][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.384503][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.401574][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.413371][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.423785][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.434486][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.446049][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.459195][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.471894][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.482054][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.493698][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.503630][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.514149][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.527941][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.557241][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.570170][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.580859][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.591635][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.604509][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.615034][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.629444][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.650368][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.669509][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.678690][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.687481][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.704250][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.713507][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.722293][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.731222][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.841793][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.860149][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.910269][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.932588][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.451862][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.459387][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.507228][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.535758][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.567753][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.578722][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.634576][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.653250][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.723947][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.752281][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.991756][ T5848] syz.3.6[5848]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.008867][ T5787] Bluetooth: hci1: command tx timeout [ 72.014413][ T5784] Bluetooth: hci0: command tx timeout [ 72.059937][ T5848] loop3: detected capacity change from 0 to 512 [ 72.064154][ T5853] loop1: detected capacity change from 0 to 164 [ 72.069108][ T5848] ======================================================= [ 72.069108][ T5848] WARNING: The mand mount option has been deprecated and [ 72.069108][ T5848] and is ignored by this kernel. Remove the mand [ 72.069108][ T5848] option from the mount to silence this warning. [ 72.069108][ T5848] ======================================================= [ 72.111108][ T5784] Bluetooth: hci2: command tx timeout [ 72.116587][ T5784] Bluetooth: hci3: command tx timeout [ 72.141171][ T5848] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.170025][ T5782] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.192416][ T5848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.226470][ T5848] EXT4-fs (loop3): 1 truncate cleaned up [ 72.240262][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.305645][ T5815] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 72.316611][ T5837] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.338019][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.404562][ T5857] loop3: detected capacity change from 0 to 8 [ 72.561410][ T5837] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 72.573017][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.584555][ T5815] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 73.435124][ T5837] usb 3-1: config 0 has no interfaces? [ 73.449569][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.486410][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.505353][ T5815] usb 1-1: Product: syz [ 73.516062][ T5815] usb 1-1: Manufacturer: syz [ 73.520829][ T5837] usb 3-1: config 0 has no interfaces? [ 73.526661][ T5815] usb 1-1: SerialNumber: syz [ 73.541133][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.559395][ T5815] usb 1-1: config 0 descriptor?? [ 73.603856][ T5837] usb 3-1: config 0 has no interfaces? [ 73.635030][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.649363][ T5837] usb 3-1: config 0 has no interfaces? [ 73.658690][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.672687][ T5837] usb 3-1: config 0 has no interfaces? [ 73.694515][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.707867][ T5837] usb 3-1: config 0 has no interfaces? [ 73.745956][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.756885][ T5837] usb 3-1: config 0 has no interfaces? [ 73.773578][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.784211][ T5837] usb 3-1: config 0 has no interfaces? [ 73.843125][ T5837] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 73.882812][ T5837] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 73.896492][ T5837] usb 3-1: Product: syz [ 73.900867][ T5837] usb 3-1: Manufacturer: syz [ 73.905794][ T5837] usb 3-1: SerialNumber: syz [ 74.099752][ T5837] usb 3-1: config 0 descriptor?? [ 74.101564][ T5784] Bluetooth: hci0: command tx timeout [ 74.104942][ T5787] Bluetooth: hci1: command tx timeout [ 74.117409][ T5815] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 74.165729][ T5787] Bluetooth: hci2: command tx timeout [ 74.167547][ T5784] Bluetooth: hci3: command tx timeout [ 74.375982][ T5837] usb 3-1: USB disconnect, device number 2 [ 74.722749][ T5866] loop3: detected capacity change from 0 to 32768 [ 74.750677][ T5866] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.830813][ T5866] XFS (loop3): Ending clean mount [ 74.841862][ T5866] XFS (loop3): Quotacheck needed: Please wait. [ 74.880620][ T5866] XFS (loop3): Quotacheck: Done. [ 74.885799][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.009439][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.070261][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 75.091745][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.110680][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.129566][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.142786][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.151766][ T5837] usb 2-1: Product: syz [ 75.156604][ T5837] usb 2-1: Manufacturer: syz [ 75.161310][ T5837] usb 2-1: SerialNumber: syz [ 75.389302][ T5837] usb 2-1: 0:2 : does not exist [ 75.465804][ T5837] usb 2-1: USB disconnect, device number 2 [ 75.538508][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.569848][ T5885] loop3: detected capacity change from 0 to 32768 [ 75.591279][ T5885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.13 (5885) [ 75.624744][ T5815] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 75.638874][ T5815] usb 1-1: USB disconnect, device number 2 [ 75.696491][ T5885] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 75.707336][ T5885] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 75.725871][ T5885] BTRFS info (device loop3): enabling auto defrag [ 75.738729][ T5885] BTRFS info (device loop3): use no compression [ 75.752192][ T5885] BTRFS info (device loop3): force clearing of disk cache [ 75.767443][ T5885] BTRFS info (device loop3): max_inline at 4096 [ 75.778661][ T5885] BTRFS info (device loop3): disabling free space tree [ 75.898532][ T5885] BTRFS info (device loop3): enabling ssd optimizations [ 75.914279][ T5885] BTRFS info (device loop3): auto enabling async discard [ 75.925216][ T5885] BTRFS info (device loop3): rebuilding free space tree [ 75.967659][ T5885] BTRFS info (device loop3): disabling free space tree [ 75.974670][ T5885] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.005641][ T5885] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.179541][ T5909] loop2: detected capacity change from 0 to 512 [ 76.199763][ T27] audit: type=1804 audit(1784985938.928:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13" name="/newroot/4/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 76.262518][ T5909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.292848][ T5912] loop1: detected capacity change from 0 to 164 [ 76.367536][ T5909] EXT4-fs (loop2): 1 truncate cleaned up [ 76.401236][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.447181][ T5772] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.548106][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 77.428869][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.650412][ T5761] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.735596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 79.325949][ T5761] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 79.360065][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.382172][ T5933] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 79.388733][ T5761] usb 1-1: config 0 has no interfaces? [ 79.405775][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.425486][ T5761] usb 1-1: config 0 has no interfaces? [ 79.426001][ T5935] binder_alloc: 5934: binder_alloc_buf, no vma [ 79.436918][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.465525][ T5761] usb 1-1: config 0 has no interfaces? [ 79.482443][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.504040][ T5761] usb 1-1: config 0 has no interfaces? [ 79.515668][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.536242][ T5761] usb 1-1: config 0 has no interfaces? [ 79.543047][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.559544][ T5761] usb 1-1: config 0 has no interfaces? [ 79.568700][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.601112][ T5761] usb 1-1: config 0 has no interfaces? [ 79.613914][ T5761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.645361][ T5761] usb 1-1: config 0 has no interfaces? [ 79.669579][ T5761] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.690210][ T5761] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.705342][ T5761] usb 1-1: Product: syz [ 79.715524][ T5761] usb 1-1: Manufacturer: syz [ 79.725458][ T5761] usb 1-1: SerialNumber: syz [ 79.737745][ T5761] usb 1-1: config 0 descriptor?? [ 79.965648][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 79.976388][ T5761] usb 1-1: USB disconnect, device number 3 [ 80.053274][ T5940] loop3: detected capacity change from 0 to 40427 [ 80.079622][ T5940] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 80.090940][ T5940] F2FS-fs (loop3): Image doesn't support compression [ 80.117833][ T5940] F2FS-fs (loop3): invalid crc value [ 80.151549][ T5940] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.179831][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.206375][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.214419][ T23] usb 3-1: Product: syz [ 80.225825][ T23] usb 3-1: Manufacturer: syz [ 80.230586][ T23] usb 3-1: SerialNumber: syz [ 80.243667][ T23] usb 3-1: config 0 descriptor?? [ 80.273062][ T5940] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.339439][ T5772] syz-executor: attempt to access beyond end of device [ 80.339439][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 80.354679][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 80.435489][ T5837] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.467106][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.645675][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 80.675153][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.702476][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.725465][ T5837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.744885][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.763243][ T5837] usb 2-1: Product: syz [ 80.767726][ T5837] usb 2-1: Manufacturer: syz [ 80.772413][ T5837] usb 2-1: SerialNumber: syz [ 81.019027][ T5837] usb 2-1: 0:2 : does not exist [ 81.064698][ T5837] usb 2-1: USB disconnect, device number 3 [ 81.073801][ T5949] loop0: detected capacity change from 0 to 32768 [ 81.092492][ T5951] loop3: detected capacity change from 0 to 32768 [ 81.120604][ T5949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.29 (5949) [ 81.163318][ T5951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (5951) [ 81.190451][ T5949] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.221163][ T5949] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 81.223632][ T5951] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.235719][ T5949] BTRFS info (device loop0): using free space tree [ 81.250874][ T5951] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 81.261672][ T5951] BTRFS info (device loop3): setting nodatacow, compression disabled [ 81.273072][ T5951] BTRFS info (device loop3): turning on flush-on-commit [ 81.297213][ T5951] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 81.327147][ T5951] BTRFS info (device loop3): use lzo compression, level 0 [ 81.334356][ T5951] BTRFS info (device loop3): setting nodatasum [ 81.343391][ T5951] BTRFS info (device loop3): use no compression [ 81.360555][ T5951] BTRFS info (device loop3): trying to use backup root at mount time [ 81.391625][ T5951] BTRFS info (device loop3): max_inline at 0 [ 81.404689][ T5949] BTRFS info (device loop0): enabling ssd optimizations [ 81.413102][ T5951] BTRFS info (device loop3): using free space tree [ 81.425455][ T5949] BTRFS info (device loop0): auto enabling async discard [ 81.514257][ T3014] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 81.588322][ T5951] BTRFS warning (device loop3): couldn't read tree root [ 81.623204][ T5951] BTRFS warning (device loop3): try to load backup roots slot 1 [ 81.665128][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.679312][ T3014] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 81.738961][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 81.755787][ T5951] BTRFS warning (device loop3): couldn't read tree root [ 81.762771][ T5951] BTRFS warning (device loop3): try to load backup roots slot 2 [ 81.789089][ T23] usb 3-1: USB disconnect, device number 3 [ 81.847848][ T2926] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 81.891565][ T5951] BTRFS warning (device loop3): couldn't read tree root [ 81.905425][ T5951] BTRFS warning (device loop3): try to load backup roots slot 3 [ 81.973343][ T5951] BTRFS info (device loop3): enabling ssd optimizations [ 82.037729][ T5951] BTRFS info (device loop3): auto enabling async discard [ 82.057015][ T5951] BTRFS info (device loop3): rebuilding free space tree [ 82.097317][ T5991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.098116][ T5951] BTRFS info (device loop3): checking UUID tree [ 82.166882][ T5984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5984) [ 82.401010][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.470980][ T5998] binder: BINDER_SET_CONTEXT_MGR already set [ 82.489068][ T5998] binder: 5997:5998 ioctl 4018620d 200000004a80 returned -16 [ 82.923910][ T5987] loop1: detected capacity change from 0 to 32768 [ 83.387215][ T6009] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 83.488264][ T5860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.181784][ T6003] loop3: detected capacity change from 0 to 32768 [ 84.243255][ T5860] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 84.274884][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.284706][ T6003] JBD2: Ignoring recovery information on journal [ 84.295084][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.306361][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.314363][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.329766][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.338804][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.346796][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.365316][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.374235][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.387095][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.402028][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.411042][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.419441][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.432360][ T6003] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 84.435352][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.465363][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.476218][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.497405][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.523785][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.531857][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.545360][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.554268][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.575332][ T27] audit: type=1800 audit(1784985947.298:3): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 84.605933][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.606340][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.635395][ T5860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.644797][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.654323][ T5860] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 84.663453][ T5860] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 84.675331][ T5860] usb 3-1: Product: syz [ 84.679529][ T5860] usb 3-1: Manufacturer: syz [ 84.684138][ T5860] usb 3-1: SerialNumber: syz [ 84.699084][ T5860] usb 3-1: config 0 descriptor?? [ 84.707764][ T5860] yurex 3-1:0.0: Could not find endpoints [ 84.795545][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 84.815395][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.842849][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.870638][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.890243][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.909080][ T23] usb 1-1: Product: syz [ 84.913289][ T23] usb 1-1: Manufacturer: syz [ 84.928482][ T23] usb 1-1: SerialNumber: syz [ 84.935658][ T5860] usb 3-1: USB disconnect, device number 4 [ 84.950374][ T6016] loop1: detected capacity change from 0 to 32768 [ 84.984937][ T6016] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 85.061009][ T5772] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 85.086316][ T5772] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 85.098212][ T5772] OCFS2: File system is now read-only. [ 85.117534][ T5772] (syz-executor,5772,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 85.138247][ T5772] (syz-executor,5772,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 85.152357][ T5780] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 85.163512][ T23] usb 1-1: 0:2 : does not exist [ 85.168002][ T5772] (syz-executor,5772,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 85.177757][ T23] usb 1-1: unit 16 not found! [ 85.183715][ T5772] (syz-executor,5772,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 85.207875][ T5772] (syz-executor,5772,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 85.266709][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 85.272765][ T23] usb 1-1: USB disconnect, device number 4 [ 85.326319][ T5984] udevd[5984]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.120097][ T174] cfg80211: failed to load regulatory.db [ 87.277045][ T6029] binder_alloc: 6026: binder_alloc_buf, no vma [ 87.303543][ T6020] loop1: detected capacity change from 0 to 32768 [ 87.359867][ T6020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.42 (6020) [ 87.446986][ T6020] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.467617][ T6020] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 87.494730][ T6020] BTRFS info (device loop1): setting nodatacow, compression disabled [ 87.720302][ T6020] BTRFS info (device loop1): turning on flush-on-commit [ 87.733113][ T6020] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 87.742635][ T6020] BTRFS info (device loop1): use lzo compression, level 0 [ 87.750024][ T6020] BTRFS info (device loop1): setting nodatasum [ 87.761520][ T6020] BTRFS info (device loop1): use no compression [ 87.792707][ T6020] BTRFS info (device loop1): trying to use backup root at mount time [ 87.972556][ T6020] BTRFS info (device loop1): max_inline at 0 [ 88.087373][ T6020] BTRFS info (device loop1): using free space tree [ 88.402091][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 88.411222][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 88.440883][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 88.514729][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 88.566124][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 88.618415][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 88.637983][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 88.653733][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 88.704142][ T6020] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 88.761840][ T6020] BTRFS error (device loop1): open_ctree failed: -12 [ 88.917380][ T5780] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5780) [ 88.995540][ T5837] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.177225][ T6066] Zero length message leads to an empty skb [ 89.219196][ T5837] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 89.274661][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.300816][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.335373][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.344025][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.364551][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.566011][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.580106][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.591310][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.603431][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.617321][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.628649][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.640538][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.653546][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.665454][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.674948][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.702368][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.713472][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.724826][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.737177][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.750316][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.759994][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.884372][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.895643][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.904566][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 89.930592][ T5837] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 89.959626][ T5837] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 89.991372][ T5837] usb 4-1: Product: syz [ 89.998667][ T5837] usb 4-1: Manufacturer: syz [ 90.003303][ T5837] usb 4-1: SerialNumber: syz [ 90.036094][ T5837] usb 4-1: config 0 descriptor?? [ 90.054549][ T5837] yurex 4-1:0.0: Could not find endpoints [ 90.062554][ T6061] loop0: detected capacity change from 0 to 32768 [ 90.109425][ T6061] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.124416][ T6061] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 90.137341][ T6061] BTRFS info (device loop0): using free space tree [ 90.374339][ T9] usb 4-1: USB disconnect, device number 2 [ 90.414164][ T6061] BTRFS info (device loop0): enabling ssd optimizations [ 90.432080][ T6061] BTRFS info (device loop0): auto enabling async discard [ 90.528142][ T6087] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 90.553726][ T5837] IPVS: starting estimator thread 0... [ 90.560705][ T6086] warning: `syz.1.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.601921][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.631323][ T6087] sctp: [Deprecated]: syz.2.53 (pid 6087) Use of int in max_burst socket option. [ 90.631323][ T6087] Use struct sctp_assoc_value instead [ 90.675736][ T6088] IPVS: using max 19 ests per chain, 45600 per kthread [ 91.443709][ T6101] loop0: detected capacity change from 0 to 32768 [ 91.458854][ T6101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.59 (6101) [ 91.494854][ T6101] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.510136][ T6101] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 91.524586][ T6101] BTRFS info (device loop0): enabling auto defrag [ 91.533718][ T6101] BTRFS info (device loop0): max_inline at 4096 [ 91.703569][ T6101] BTRFS info (device loop0): using free space tree [ 92.343557][ T6103] loop1: detected capacity change from 0 to 32768 [ 92.388385][ T6101] BTRFS info (device loop0): enabling ssd optimizations [ 92.422518][ T6103] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.455481][ T6103] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 92.456969][ T6101] BTRFS info (device loop0): auto enabling async discard [ 92.464241][ T6103] BTRFS info (device loop1): setting nodatacow, compression disabled [ 92.545435][ T6103] BTRFS info (device loop1): turning on flush-on-commit [ 92.552481][ T6103] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 92.562223][ T6103] BTRFS info (device loop1): use lzo compression, level 0 [ 92.570848][ T6103] BTRFS info (device loop1): setting nodatasum [ 92.602893][ T6103] BTRFS info (device loop1): use no compression [ 92.619770][ T6103] BTRFS info (device loop1): trying to use backup root at mount time [ 92.647237][ T6103] BTRFS info (device loop1): max_inline at 0 [ 92.661111][ T6103] BTRFS info (device loop1): using free space tree [ 92.757661][ T5771] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 92.846446][ T3014] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 92.930522][ T6103] BTRFS warning (device loop1): couldn't read tree root [ 92.945521][ T6103] BTRFS warning (device loop1): try to load backup roots slot 1 [ 92.991173][ T3014] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 93.026166][ T6103] BTRFS warning (device loop1): couldn't read tree root [ 93.033186][ T6103] BTRFS warning (device loop1): try to load backup roots slot 2 [ 93.084318][ T2926] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 93.140935][ T6103] BTRFS warning (device loop1): couldn't read tree root [ 93.173329][ T6103] BTRFS warning (device loop1): try to load backup roots slot 3 [ 93.268050][ T6103] BTRFS info (device loop1): enabling ssd optimizations [ 93.288389][ T6103] BTRFS info (device loop1): auto enabling async discard [ 93.320540][ T6103] BTRFS info (device loop1): rebuilding free space tree [ 93.397198][ T6103] BTRFS info (device loop1): checking UUID tree [ 93.579278][ T6129] loop2: detected capacity change from 0 to 32768 [ 93.609272][ T6129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.63 (6129) [ 93.623939][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.675216][ T6129] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.702904][ T6129] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.726799][ T6129] BTRFS info (device loop2): using free space tree [ 93.928468][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.936146][ T6129] BTRFS info (device loop2): enabling ssd optimizations [ 93.945558][ T6129] BTRFS info (device loop2): auto enabling async discard [ 94.131353][ T5815] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 94.170217][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.236255][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.278332][ T5778] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.322868][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.380780][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.443004][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.463955][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.482528][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.513780][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.531356][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.573399][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.592461][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.618762][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.635496][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 94.646968][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.674179][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.695667][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.712370][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.746265][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.766738][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.780461][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.804262][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.894640][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.926089][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 94.926369][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.935160][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.935184][ T9] usb 4-1: Product: syz [ 94.935198][ T9] usb 4-1: Manufacturer: syz [ 94.978957][ T9] usb 4-1: SerialNumber: syz [ 94.982193][ T5815] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 94.995977][ T9] usb 4-1: config 0 descriptor?? [ 95.037128][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0 [ 95.068570][ T5815] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 95.077870][ T5815] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 95.086503][ T5815] usb 1-1: Product: syz [ 95.090831][ T5815] usb 1-1: Manufacturer: syz [ 95.101641][ T5815] usb 1-1: SerialNumber: syz [ 95.120478][ T5815] usb 1-1: config 0 descriptor?? [ 95.179095][ T6181] loop2: detected capacity change from 0 to 64 [ 95.271761][ T6181] syz.2.71: attempt to access beyond end of device [ 95.271761][ T6181] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 95.285482][ T6181] Buffer I/O error on dev loop2, logical block 512, async page read [ 95.293773][ T6181] syz.2.71: attempt to access beyond end of device [ 95.293773][ T6181] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 95.307040][ T6181] Buffer I/O error on dev loop2, logical block 56576, async page read [ 95.707283][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.272931][ T5815] yurex 1-1:0.0: Could not find endpoints [ 96.504270][ T174] usb 1-1: USB disconnect, device number 5 [ 97.203538][ T6194] loop0: detected capacity change from 0 to 164 [ 97.348116][ T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 97.570734][ T9] usb 4-1: USB disconnect, device number 3 [ 98.106411][ T5784] Bluetooth: min 6 > max 0 [ 100.166101][ T5784] Bluetooth: hci0: command tx timeout [ 100.392370][ T6212] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 100.420959][ T6212] sctp: [Deprecated]: syz.2.82 (pid 6212) Use of int in max_burst socket option. [ 100.420959][ T6212] Use struct sctp_assoc_value instead [ 100.486696][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 100.496306][ T5784] Bluetooth: hci3: Injecting HCI hardware error event [ 100.504200][ T5787] Bluetooth: hci3: hardware error 0x00 [ 101.185406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.225497][ T5837] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 102.726302][ T5787] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 103.234142][ T6231] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 103.279820][ T5837] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.298697][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.306788][ T5837] usb 1-1: Product: syz [ 103.311001][ T5837] usb 1-1: Manufacturer: syz [ 103.315670][ T5837] usb 1-1: SerialNumber: syz [ 103.338821][ T5837] usb 1-1: config 0 descriptor?? [ 103.555472][ T5837] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.375302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.875298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.915296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 105.295291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.490489][ T5837] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 105.666120][ T5837] usb 1-1: USB disconnect, device number 6 [ 106.601044][ T6245] syz.2.92 (6245): drop_caches: 2 [ 106.745549][ T6249] mmap: syz.0.93 (6249) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.084664][ T6249] loop0: detected capacity change from 0 to 2048 [ 108.041891][ T6257] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 108.081551][ T5984] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.865416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.645722][ T6270] loop1: detected capacity change from 0 to 32768 [ 109.669409][ T6270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.91 (6270) [ 109.766392][ T6270] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.776719][ T6270] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.785489][ T6270] BTRFS info (device loop1): turning on sync discard [ 109.793112][ T6270] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.802590][ T6270] BTRFS info (device loop1): use zstd compression, level 3 [ 109.809864][ T6270] BTRFS info (device loop1): turning on async discard [ 109.816717][ T6270] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.827362][ T6270] BTRFS info (device loop1): trying to use backup root at mount time [ 109.835460][ T6270] BTRFS info (device loop1): enabling auto defrag [ 109.841866][ T6270] BTRFS info (device loop1): using free space tree [ 109.938553][ T59] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 109.949081][ T6268] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 109.959864][ T6270] BTRFS error (device loop1): failed to load root extent [ 109.967962][ T6270] BTRFS warning (device loop1): try to load backup roots slot 1 [ 110.021507][ T79] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 110.079567][ T6270] BTRFS warning (device loop1): couldn't read tree root [ 110.086672][ T6270] BTRFS warning (device loop1): try to load backup roots slot 2 [ 110.098089][ T2926] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 110.138194][ T6263] loop3: detected capacity change from 0 to 32768 [ 110.146205][ T6270] BTRFS warning (device loop1): couldn't read tree root [ 110.153186][ T6270] BTRFS warning (device loop1): try to load backup roots slot 3 [ 110.179940][ T6263] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.96 (6263) [ 110.226584][ T6270] BTRFS info (device loop1): enabling ssd optimizations [ 110.236040][ T6270] BTRFS info (device loop1): rebuilding free space tree [ 110.287206][ T6263] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.291658][ T6270] BTRFS info (device loop1): checking UUID tree [ 110.366785][ T6263] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 110.421839][ T6263] BTRFS info (device loop3): using free space tree [ 110.779638][ T6263] BTRFS info (device loop3): enabling ssd optimizations [ 110.876008][ T6263] BTRFS info (device loop3): auto enabling async discard [ 110.932474][ T6312] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.91'. [ 111.584721][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.640944][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.848652][ T5984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5984) [ 112.015530][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 112.183757][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 112.680073][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 112.715828][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 112.783339][ T6316] ceph: No mds server is up or the cluster is laggy [ 112.942324][ T5815] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 113.112759][ T6330] loop1: detected capacity change from 0 to 512 [ 113.138483][ T6330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.176414][ T6330] EXT4-fs (loop1): 1 truncate cleaned up [ 113.181410][ T5815] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.187300][ T6330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.238992][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.291036][ T5815] usb 4-1: Product: syz [ 113.316315][ T5815] usb 4-1: Manufacturer: syz [ 113.320977][ T5815] usb 4-1: SerialNumber: syz [ 113.329219][ T6326] loop0: detected capacity change from 0 to 32768 [ 113.365439][ T6326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.103 (6326) [ 113.390644][ T5815] usb 4-1: config 0 descriptor?? [ 113.394735][ T6326] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.434906][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.437392][ T6326] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.485450][ T6326] BTRFS info (device loop0): setting nodatacow, compression disabled [ 113.493621][ T6326] BTRFS info (device loop0): turning on flush-on-commit [ 113.945299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.965286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.638358][ T5815] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 114.646059][ T5815] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 114.665178][ T6326] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 114.683670][ T6326] BTRFS info (device loop0): use lzo compression, level 0 [ 114.690988][ T6326] BTRFS info (device loop0): setting nodatasum [ 114.706016][ T6326] BTRFS info (device loop0): use no compression [ 114.745672][ T6326] BTRFS info (device loop0): trying to use backup root at mount time [ 114.775970][ T6326] BTRFS info (device loop0): max_inline at 0 [ 114.781985][ T6326] BTRFS info (device loop0): using free space tree [ 114.881710][ T59] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 114.930813][ T6326] BTRFS warning (device loop0): couldn't read tree root [ 114.945626][ T6326] BTRFS warning (device loop0): try to load backup roots slot 1 [ 114.959889][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 115.015791][ T6326] BTRFS warning (device loop0): couldn't read tree root [ 115.035326][ T6326] BTRFS warning (device loop0): try to load backup roots slot 2 [ 115.062042][ T59] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 115.094400][ T6326] BTRFS warning (device loop0): couldn't read tree root [ 115.130887][ T6326] BTRFS warning (device loop0): try to load backup roots slot 3 [ 115.185721][ T6326] BTRFS info (device loop0): enabling ssd optimizations [ 115.192723][ T6326] BTRFS info (device loop0): auto enabling async discard [ 115.253306][ T6326] BTRFS info (device loop0): rebuilding free space tree [ 115.303031][ T6326] BTRFS info (device loop0): checking UUID tree [ 115.661684][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.703803][ T5838] usb 4-1: USB disconnect, device number 4 [ 115.869920][ T6361] loop2: detected capacity change from 0 to 32768 [ 115.898936][ T6361] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 116.503312][ T5780] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 117.061150][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 117.189467][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 117.434473][ T6380] ceph: No mds server is up or the cluster is laggy [ 117.537400][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 117.543480][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 118.644653][ T6387] loop0: detected capacity change from 0 to 32768 [ 118.717559][ T6387] JBD2: Ignoring recovery information on journal [ 118.825756][ T6387] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.859560][ T6400] loop2: detected capacity change from 0 to 164 [ 118.890837][ T27] audit: type=1800 audit(1784985981.628:4): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.114" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 119.233123][ T6387] syz.0.114 (6387) used greatest stack depth: 18264 bytes left [ 119.273619][ T5771] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature [ 119.295720][ T5771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 119.315700][ T5771] OCFS2: File system is now read-only. [ 119.321236][ T5771] (syz-executor,5771,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30 [ 119.362227][ T5771] (syz-executor,5771,0):_ocfs2_free_clusters:2605 ERROR: status = -30 [ 119.382820][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 119.412630][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 119.431616][ T5771] (syz-executor,5771,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 119.502247][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 119.801689][ T6403] loop1: detected capacity change from 0 to 32768 [ 120.124376][ T6407] loop2: detected capacity change from 0 to 32768 [ 120.168477][ T6407] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 120.311737][ T6415] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 120.321279][ T5838] IPVS: starting estimator thread 0... [ 120.407417][ T6415] sctp: [Deprecated]: syz.1.124 (pid 6415) Use of int in max_burst socket option. [ 120.407417][ T6415] Use struct sctp_assoc_value instead [ 120.445611][ T6416] IPVS: using max 24 ests per chain, 57600 per kthread [ 120.492034][ T5984] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 121.575167][ T6437] loop0: detected capacity change from 0 to 164 [ 121.668927][ T5984] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.403737][ T6449] loop0: detected capacity change from 0 to 8 [ 122.687532][ T6435] loop2: detected capacity change from 0 to 32768 [ 122.772101][ T6435] JBD2: Ignoring recovery information on journal [ 123.358513][ T6435] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.720366][ T27] audit: type=1800 audit(1784985986.428:5): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.131" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 123.873872][ T5778] ocfs2: Unmounting device (7,2) on (node local) [ 123.928597][ T6472] loop1: detected capacity change from 0 to 164 [ 125.011913][ T6486] sctp: [Deprecated]: syz.1.147 (pid 6486) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.011913][ T6486] Use struct sctp_sack_info instead [ 125.091615][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 125.174018][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 125.308661][ T6488] ceph: No mds server is up or the cluster is laggy [ 126.073418][ T6505] loop1: detected capacity change from 0 to 164 [ 127.020989][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 127.419489][ T23] libceph: connect (1)[c::]:6789 error -101 [ 127.432082][ T6523] ceph: No mds server is up or the cluster is laggy [ 127.514441][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 128.269203][ T6502] loop3: detected capacity change from 0 to 32768 [ 128.313411][ T6536] loop0: detected capacity change from 0 to 164 [ 128.350300][ T6502] JBD2: Ignoring recovery information on journal [ 128.362125][ T5984] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.530960][ T6502] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 128.883602][ T27] audit: type=1800 audit(1784985991.618:6): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 129.178726][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 130.755974][ T174] libceph: connect (1)[c::]:6789 error -101 [ 130.782605][ T6557] ceph: No mds server is up or the cluster is laggy [ 130.839741][ T174] libceph: mon0 (1)[c::]:6789 connect error [ 131.726077][ T6569] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 131.846063][ T6569] sctp: [Deprecated]: syz.2.176 (pid 6569) Use of int in max_burst socket option. [ 131.846063][ T6569] Use struct sctp_assoc_value instead [ 133.170019][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.176380][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.608758][ T6593] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 136.315475][ T6607] binder: BINDER_SET_CONTEXT_MGR already set [ 136.397501][ T6607] binder: 6605:6607 ioctl 4018620d 200000004a80 returned -16 [ 136.449581][ T174] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 136.556958][ T5837] IPVS: starting estimator thread 0... [ 136.564249][ T6613] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 136.608071][ T6613] sctp: [Deprecated]: syz.3.190 (pid 6613) Use of int in max_burst socket option. [ 136.608071][ T6613] Use struct sctp_assoc_value instead [ 136.665988][ T6615] IPVS: using max 20 ests per chain, 48000 per kthread [ 136.691026][ T174] usb 1-1: Dual-Role OTG device on HNP port [ 136.706714][ T174] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 136.732309][ T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.773005][ T174] gspca_main: spca501-2.14.0 probing 0000:0000 [ 136.792962][ T174] gspca_spca501: reg write: error -32 [ 136.804537][ T6622] loop1: detected capacity change from 0 to 512 [ 136.814703][ T174] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 136.827180][ T6622] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.837303][ T174] spca501: probe of 1-1:1.0 failed with error -22 [ 136.848797][ C0] general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] PREEMPT SMP KASAN [ 136.860547][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 136.868991][ C0] CPU: 0 PID: 174 Comm: kworker/0:2 Not tainted syzkaller #0 [ 136.876381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.886453][ C0] Workqueue: usb_hub_wq hub_event [ 136.891532][ C0] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 136.897194][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 136.916821][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010002 [ 136.922917][ C0] RAX: 00000000000000e6 RBX: ffff88807cd2c120 RCX: ffff88801bb51e00 [ 136.930924][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 136.938918][ C0] RBP: ffff88807cd2c100 R08: 0000000000000000 R09: 00000000eed9a316 [ 136.946912][ C0] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88807cd2c730 [ 136.954908][ C0] R13: dffffc0000000000 R14: ffff88807cd2c128 R15: 0000000000000730 [ 136.962908][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 136.971855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.978500][ C0] CR2: 00007f62e9c4cc6b CR3: 000000005f954000 CR4: 00000000003506f0 [ 136.986490][ C0] Call Trace: [ 136.989775][ C0] [ 136.992631][ C0] f_midi2_set_alt+0x100/0x800 [ 136.997414][ C0] composite_setup+0x1ffe/0x33a0 [ 137.002384][ C0] configfs_composite_setup+0xc7/0x100 [ 137.007868][ C0] dummy_timer+0x1309/0x3420 [ 137.012503][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 137.017565][ C0] ? lock_chain_count+0x20/0x20 [ 137.022438][ C0] ? dummy_free_streams+0x520/0x520 [ 137.027661][ C0] ? dummy_free_streams+0x520/0x520 [ 137.032875][ C0] __hrtimer_run_queues+0x525/0xc10 [ 137.038107][ C0] ? hrtimer_interrupt+0x980/0x980 [ 137.043245][ C0] ? read_tsc+0x9/0x20 [ 137.047344][ C0] hrtimer_run_softirq+0x177/0x290 [ 137.052497][ C0] handle_softirqs+0x27d/0x820 [ 137.057288][ C0] ? read_tsc+0x9/0x20 [ 137.061383][ C0] ? ktime_get+0x24b/0x280 [ 137.065821][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 137.070602][ C0] ? do_softirq+0x1a0/0x1a0 [ 137.075123][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 137.080348][ C0] __irq_exit_rcu+0xd3/0x190 [ 137.084961][ C0] ? irq_exit_rcu+0x20/0x20 [ 137.089580][ C0] irq_exit_rcu+0x9/0x20 [ 137.093846][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 137.099518][ C0] [ 137.102463][ C0] [ 137.105406][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.111415][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 137.117954][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2b 5f c6 f6 65 8b 05 9c 2d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 137.137580][ C0] RSP: 0018:ffffc90002df6880 EFLAGS: 00000206 [ 137.143670][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: b8db7336802c6a00 [ 137.151664][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 137.159657][ C0] RBP: ffffc90002df6910 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 137.167649][ C0] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 137.175644][ C0] R13: dffffc0000000000 R14: ffff888022fdc000 R15: 1ffff920005bed10 [ 137.183644][ C0] ? _raw_spin_unlock+0x40/0x40 [ 137.188493][ C0] ? kobject_get+0xcc/0x120 [ 137.192985][ C0] dummy_urb_enqueue+0x587/0x780 [ 137.197915][ C0] usb_hcd_submit_urb+0x318/0x1aa0 [ 137.203029][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 137.208564][ C0] usb_start_wait_urb+0x140/0x580 [ 137.213586][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 137.219419][ C0] usb_control_msg+0x235/0x3e0 [ 137.224176][ C0] usb_set_interface+0x51f/0x13f0 [ 137.229192][ C0] snd_usb_midi_v2_create+0x62f/0x48a0 [ 137.234661][ C0] ? proc_audio_usbbus_read+0x170/0x170 [ 137.240196][ C0] ? snd_card_rw_proc_new+0x10d/0x130 [ 137.245574][ C0] ? validate_midi_out_jack+0xb0/0xb0 [ 137.250959][ C0] ? usb_ifnum_to_if+0x262/0x2e0 [ 137.255898][ C0] snd_usb_create_stream+0x262/0x5d0 [ 137.261176][ C0] usb_audio_probe+0xead/0x1f00 [ 137.266023][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 137.271078][ C0] ? snd_usb_autosuspend+0x1c0/0x1c0 [ 137.276399][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 137.282287][ C0] usb_probe_interface+0x5c2/0xaf0 [ 137.287393][ C0] ? usb_register_driver+0x3c0/0x3c0 [ 137.292670][ C0] really_probe+0x247/0xae0 [ 137.297171][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 137.302365][ C0] __driver_probe_device+0x1f5/0x390 [ 137.307649][ C0] driver_probe_device+0x4f/0x420 [ 137.312667][ C0] __device_attach_driver+0x2ca/0x510 [ 137.318053][ C0] bus_for_each_drv+0x252/0x2e0 [ 137.322897][ C0] ? coredump_store+0x90/0x90 [ 137.327564][ C0] ? bus_find_device+0x300/0x300 [ 137.332516][ C0] __device_attach+0x2c1/0x420 [ 137.337291][ C0] ? device_attach+0x20/0x20 [ 137.341881][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 137.347069][ C0] bus_probe_device+0x180/0x260 [ 137.351910][ C0] device_add+0x87c/0xc40 [ 137.356229][ C0] usb_set_configuration+0x1ad0/0x2150 [ 137.361687][ C0] usb_generic_driver_probe+0x8d/0x150 [ 137.367151][ C0] usb_probe_device+0x12a/0x260 [ 137.372028][ C0] ? usb_register_device_driver+0x230/0x230 [ 137.377934][ C0] really_probe+0x247/0xae0 [ 137.382430][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 137.387618][ C0] __driver_probe_device+0x1f5/0x390 [ 137.392925][ C0] driver_probe_device+0x4f/0x420 [ 137.397961][ C0] __device_attach_driver+0x2ca/0x510 [ 137.403324][ C0] bus_for_each_drv+0x252/0x2e0 [ 137.408169][ C0] ? coredump_store+0x90/0x90 [ 137.412834][ C0] ? bus_find_device+0x300/0x300 [ 137.417763][ C0] __device_attach+0x2c1/0x420 [ 137.422517][ C0] ? device_attach+0x20/0x20 [ 137.427092][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 137.432112][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 137.437304][ C0] bus_probe_device+0x180/0x260 [ 137.442173][ C0] device_add+0x87c/0xc40 [ 137.446493][ C0] usb_new_device+0x995/0x1550 [ 137.451266][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 137.456101][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.461286][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 137.466471][ C0] hub_event+0x29d5/0x4a80 [ 137.470890][ C0] ? hub_post_resume+0x120/0x120 [ 137.475827][ C0] ? read_lock_is_recursive+0x20/0x20 [ 137.481203][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.486390][ C0] ? process_scheduled_works+0x975/0x1600 [ 137.492099][ C0] ? process_scheduled_works+0x975/0x1600 [ 137.497817][ C0] process_scheduled_works+0xa60/0x1600 [ 137.503375][ C0] ? worker_attach_to_pool+0x370/0x370 [ 137.508822][ C0] ? assign_work+0x3cc/0x5d0 [ 137.513406][ C0] worker_thread+0xa5e/0xfe0 [ 137.517985][ C0] ? _raw_spin_unlock+0x40/0x40 [ 137.522867][ C0] ? __kthread_parkme+0x71/0x1c0 [ 137.527792][ C0] kthread+0x2fa/0x390 [ 137.531854][ C0] ? pr_cont_work+0x550/0x550 [ 137.536523][ C0] ? kthread_blkcg+0xd0/0xd0 [ 137.541113][ C0] ret_from_fork+0x48/0x80 [ 137.545515][ C0] ? kthread_blkcg+0xd0/0xd0 [ 137.550087][ C0] ret_from_fork_asm+0x11/0x20 [ 137.554875][ C0] [ 137.557899][ C0] Modules linked in: [ 137.561812][ C0] ---[ end trace 0000000000000000 ]--- [ 137.567262][ C0] RIP: 0010:f_midi2_stop_eps+0x286/0x4c0 [ 137.572887][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 df f4 0a fb 41 bf 30 07 00 00 4d 03 3e 4c 89 f8 48 c1 e8 03 48 89 44 24 18 <42> 0f b6 04 28 84 c0 0f 85 05 02 00 00 41 8b 1f 31 ff 89 de e8 e1 [ 137.592487][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00010002 [ 137.598547][ C0] RAX: 00000000000000e6 RBX: ffff88807cd2c120 RCX: ffff88801bb51e00 [ 137.606503][ C0] RDX: 0000000000000100 RSI: ffffffff8b1d0640 RDI: ffffffff8b1d0600 [ 137.614462][ C0] RBP: ffff88807cd2c100 R08: 0000000000000000 R09: 00000000eed9a316 [ 137.622433][ C0] R10: 000000005c29093d R11: 0000000000000100 R12: ffff88807cd2c730 [ 137.630391][ C0] R13: dffffc0000000000 R14: ffff88807cd2c128 R15: 0000000000000730 [ 137.638350][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 137.647265][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.653833][ C0] CR2: 00007f62e9c4cc6b CR3: 000000005f954000 CR4: 00000000003506f0 [ 137.661816][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 137.669248][ C0] Kernel Offset: disabled [ 137.673558][ C0] Rebooting in 86400 seconds..