last executing test programs: 1m33.311897603s ago: executing program 3 (id=772): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket(0x1e, 0x4, 0x0) eventfd2(0xe5c, 0x80000) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m33.03360246s ago: executing program 3 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x8000) 1m32.786582266s ago: executing program 3 (id=776): socketpair(0x1e, 0x80005, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10410, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1m31.917698857s ago: executing program 3 (id=779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000134000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0x70846000) 1m31.598488955s ago: executing program 3 (id=782): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x1e, 0x4, 0x0) eventfd2(0xe5c, 0x80000) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m30.57766369s ago: executing program 3 (id=788): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b00)="b3", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m15.269033895s ago: executing program 32 (id=788): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b00)="b3", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xf0}}], 0x1, 0x24004c41) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.44394008s ago: executing program 2 (id=1431): memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xfffffffc, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c76, 0x1f, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.110741888s ago: executing program 2 (id=1434): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioprio_get$uid(0x0, 0x0) 1.896417034s ago: executing program 2 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) 1.755150377s ago: executing program 2 (id=1436): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) close(0xffffffffffffffff) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='rd_p', 0x4) close(r0) mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r1, &(0x7f0000001700)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001900)='1', 0x1) close(r2) 1.64952421s ago: executing program 2 (id=1438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54815}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb6201020301090212"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.556034322s ago: executing program 1 (id=1439): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x40, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x40, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "3c2383af19451f6282c4ee7ef3e2fd5806d0a534b56e4c23adf4b17a54dfa64aa8182b3b0f302859c103c1af931cd7e1"}}}}}}}, 0x0) 1.458689114s ago: executing program 1 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69"], 0xa4}}, 0x0) 1.457136444s ago: executing program 1 (id=1441): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000200)="fa", 0x1}], 0x1}}], 0x1, 0x800) 1.377289706s ago: executing program 1 (id=1443): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000000000000100000d0a00000004000000000000000600000003000013080000000000000108000000b602000006000000050000004e0000000300000008000000830d000000005f00002e613061"], &(0x7f0000000f40)=""/4089, 0x66, 0xff9, 0x8, 0x10}, 0x28) 1.318235038s ago: executing program 1 (id=1444): mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) 1.22684533s ago: executing program 1 (id=1445): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) 840.39915ms ago: executing program 0 (id=1451): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000580)="b8", 0x1}, {&(0x7f00000002c0)='y', 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000200)="fa", 0x1}], 0x1}}], 0x1, 0x800) 710.744653ms ago: executing program 4 (id=1452): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000000000000100000d0a00000004000000000000000600000003000013080000000000000108000000b602000006000000050000004e0000000300000008000000830d000000005f00002e613061"], &(0x7f0000000f40)=""/4089, 0x66, 0xff9, 0x8, 0x10}, 0x28) 709.885163ms ago: executing program 0 (id=1453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000000, 0x8, 0x0, 0x5, 0xd7}, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) write$tun(r1, &(0x7f0000000b80)={@val={0x0, 0xf5}, @void, @ipv6=@tcp={0x4, 0x6, "5a96b2", 0x14, 0x6, 0xff, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6, 0x0, 0x3}}}}}, 0x40) 562.781526ms ago: executing program 4 (id=1454): mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000640)=""/4130, 0x1022, 0x1000000000001) 390.46055ms ago: executing program 4 (id=1455): memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xb, 0xb}, {0x0, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xfffffffc, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c76, 0x1f, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 351.632862ms ago: executing program 0 (id=1456): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1, 0x1, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 286.186693ms ago: executing program 0 (id=1457): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) close(0xffffffffffffffff) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='rd_p', 0x4) close(r0) mkdir(&(0x7f0000001a00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/acls/naa.1234567890abcdef\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) write(r1, &(0x7f0000001700)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r2, &(0x7f0000001900)='1', 0x1) close(r2) 222.581405ms ago: executing program 4 (id=1458): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) 216.098635ms ago: executing program 0 (id=1459): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 99.085468ms ago: executing program 0 (id=1460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x2000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') 42.450829ms ago: executing program 4 (id=1461): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@deltclass={0x24, 0x29, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x7}, {0x8, 0xffe4}, {0xfff3, 0xc}}}, 0x24}}, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x58}}, 0x24000894) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 216.76µs ago: executing program 2 (id=1462): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f", 0x46}], 0x1}, 0x4) 0s ago: executing program 4 (id=1463): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0xfff3}, {}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): 1] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.174735][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.277441][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.616'. [ 213.419067][ T8011] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 213.648999][ T8014] syzkaller0: entered promiscuous mode [ 213.654889][ T8014] syzkaller0: entered allmulticast mode [ 213.937887][ T8017] netlink: 48 bytes leftover after parsing attributes in process `syz.0.626'. [ 213.968151][ T6188] usb 3-1: USB disconnect, device number 34 [ 215.396077][ T8044] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 216.184547][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.629'. [ 216.384387][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.635'. [ 216.668121][ T8065] capability: warning: `syz.3.640' uses 32-bit capabilities (legacy support in use) [ 216.689130][ T8065] program syz.3.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.792425][ T8067] TC_ACT_REPEAT abuse ? [ 217.011919][ T8069] syzkaller0: entered promiscuous mode [ 217.017488][ T8069] syzkaller0: entered allmulticast mode [ 218.107738][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'. [ 218.983287][ T8080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'. [ 219.336443][ T8107] loop1: detected capacity change from 0 to 1024 [ 219.376131][ T8107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.513101][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.554403][ T5811] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 219.738570][ T8118] syzkaller0: entered promiscuous mode [ 219.744112][ T8118] syzkaller0: entered allmulticast mode [ 219.759267][ T8120] syzkaller0: entered promiscuous mode [ 219.765207][ T8120] syzkaller0: entered allmulticast mode [ 219.771977][ T5811] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.781587][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.804873][ T5811] usb 4-1: Product: syz [ 219.809061][ T5811] usb 4-1: Manufacturer: syz [ 219.813676][ T5811] usb 4-1: SerialNumber: syz [ 219.829942][ T5811] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.852916][ T6120] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.271261][ T23] usb 4-1: USB disconnect, device number 39 [ 221.096452][ T6120] usb 4-1: Service connection timeout for: 256 [ 221.114333][ T6120] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 221.135366][ T6120] ath9k_htc: Failed to initialize the device [ 221.150557][ T23] usb 4-1: ath9k_htc: USB layer deinitialized [ 221.734326][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 221.884118][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 221.912380][ T8136] syzkaller0: entered promiscuous mode [ 221.926843][ T8136] syzkaller0: entered allmulticast mode [ 221.937195][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 221.986346][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.006099][ T23] usb 4-1: config 0 has no interfaces? [ 222.021565][ T23] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 222.031124][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.044316][ T23] usb 4-1: Product: syz [ 222.053095][ T23] usb 4-1: Manufacturer: syz [ 222.058082][ T23] usb 4-1: SerialNumber: syz [ 222.069907][ T23] usb 4-1: config 0 descriptor?? [ 222.328105][ T23] usb 4-1: USB disconnect, device number 40 [ 223.259633][ T8168] syzkaller0: entered promiscuous mode [ 223.265284][ T8168] syzkaller0: entered allmulticast mode [ 223.441379][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.459194][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.464800][ T6120] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 223.477324][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.510600][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.528234][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.536071][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.664237][ T6120] usb 4-1: Using ep0 maxpacket: 8 [ 223.681335][ T6120] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 223.704257][ T6120] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 223.725353][ T6120] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.768465][ T6120] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.794372][ T6120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.820064][ T6120] usbtmc 4-1:16.0: bulk endpoints not found [ 224.404822][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.416538][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.237423][ T8191] syzkaller0: entered promiscuous mode [ 225.274447][ T8191] syzkaller0: entered allmulticast mode [ 225.320087][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 225.339240][ T8191] tipc: Started in network mode [ 225.345581][ T8191] tipc: Node identity b626cc7bde5e, cluster identity 4711 [ 225.354294][ T8191] tipc: Enabled bearer , priority 0 [ 225.375503][ T8189] tipc: Resetting bearer [ 225.421340][ T8189] tipc: Disabling bearer [ 225.550075][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.565253][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.573113][ T8170] bridge_slave_0: entered allmulticast mode [ 225.579265][ T51] Bluetooth: hci3: command tx timeout [ 225.592303][ T8170] bridge_slave_0: entered promiscuous mode [ 225.602500][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.616035][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.627867][ T8170] bridge_slave_1: entered allmulticast mode [ 225.645646][ T8170] bridge_slave_1: entered promiscuous mode [ 225.703147][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.727966][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.804962][ T8200] tipc: Enabling of bearer rejected, failed to enable media [ 225.827780][ T8170] team0: Port device team_slave_0 added [ 225.835483][ T8200] syzkaller0: entered promiscuous mode [ 225.841003][ T8200] syzkaller0: entered allmulticast mode [ 225.860841][ T8170] team0: Port device team_slave_1 added [ 225.918325][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.934372][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.961127][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.975815][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.982950][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.011094][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.094506][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.107561][ T8170] hsr_slave_0: entered promiscuous mode [ 226.113326][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.121176][ T8170] hsr_slave_1: entered promiscuous mode [ 226.128358][ T8170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.131894][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.142842][ T8170] Cannot create hsr debugfs directory [ 226.152353][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.160806][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 226.168485][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.177987][ T5811] usb 4-1: USB disconnect, device number 41 [ 226.184368][ T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 226.384349][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 226.405171][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.420498][ T23] usb 1-1: config 0 has no interfaces? [ 226.429006][ T23] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 226.438630][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.464345][ T23] usb 1-1: Product: syz [ 226.468661][ T23] usb 1-1: Manufacturer: syz [ 226.473289][ T23] usb 1-1: SerialNumber: syz [ 226.494516][ T23] usb 1-1: config 0 descriptor?? [ 226.739824][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 226.773570][ T23] usb 1-1: USB disconnect, device number 21 [ 226.954406][ T8211] syzkaller0: entered promiscuous mode [ 226.960023][ T8211] syzkaller0: entered allmulticast mode [ 227.654569][ T5783] Bluetooth: hci3: command tx timeout [ 228.307097][ T5783] Bluetooth: hci1: command tx timeout [ 228.522683][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.533299][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.541044][ T8201] bridge_slave_0: entered allmulticast mode [ 228.549140][ T8201] bridge_slave_0: entered promiscuous mode [ 228.560635][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.574426][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.581673][ T8201] bridge_slave_1: entered allmulticast mode [ 228.589261][ T8201] bridge_slave_1: entered promiscuous mode [ 228.734869][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.767816][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.823389][ T8234] loop3: detected capacity change from 0 to 512 [ 228.843244][ T8170] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.865027][ T8170] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.874428][ T8234] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 228.902178][ T8201] team0: Port device team_slave_0 added [ 228.932239][ T8201] team0: Port device team_slave_1 added [ 228.949969][ T8170] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.970511][ T8234] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 228.997122][ T8170] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.026755][ T8234] EXT4-fs (loop3): 1 truncate cleaned up [ 229.033766][ T8234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.061661][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.079676][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.113805][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.134911][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.141896][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.168497][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.221242][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.244350][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 229.260346][ T8201] hsr_slave_0: entered promiscuous mode [ 229.285390][ T8201] hsr_slave_1: entered promiscuous mode [ 229.294023][ T8201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.303130][ T8201] Cannot create hsr debugfs directory [ 229.476546][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.491010][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.507412][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.522337][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.532754][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.577862][ T23] usb 1-1: config 0 descriptor?? [ 229.734359][ T5783] Bluetooth: hci3: command tx timeout [ 229.751159][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.838136][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.860010][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.867200][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.941396][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.948614][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.025761][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 230.100944][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 230.244041][ T8201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.270396][ T8201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.292160][ T8201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.309847][ T6121] usb 1-1: USB disconnect, device number 22 [ 230.327565][ T8201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.337908][ T8253] fido_id[8253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 230.375646][ T5783] Bluetooth: hci1: command tx timeout [ 230.550536][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.600086][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.623090][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.646870][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.654027][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.679582][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.686774][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.834681][ T8170] veth0_vlan: entered promiscuous mode [ 230.870817][ T8170] veth1_vlan: entered promiscuous mode [ 230.952798][ T8170] veth0_macvtap: entered promiscuous mode [ 230.986598][ T8170] veth1_macvtap: entered promiscuous mode [ 231.089071][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.120237][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.166434][ T8170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.188088][ T8170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.207217][ T8170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.226890][ T8170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.246516][ T8265] netlink: 144 bytes leftover after parsing attributes in process `syz.0.697'. [ 231.281604][ T8269] netlink: 144 bytes leftover after parsing attributes in process `syz.0.697'. [ 231.306379][ T8271] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.346087][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.373410][ T8265] syzkaller0: entered promiscuous mode [ 231.396252][ T8265] syzkaller0: entered allmulticast mode [ 231.578729][ T8275] tipc: Enabling of bearer rejected, failed to enable media [ 231.598109][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.608390][ T8275] syzkaller0: entered promiscuous mode [ 231.613932][ T8275] syzkaller0: entered allmulticast mode [ 231.625091][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.747326][ T8201] veth0_vlan: entered promiscuous mode [ 231.772582][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.793973][ T8201] veth1_vlan: entered promiscuous mode [ 231.798621][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.814951][ T5783] Bluetooth: hci3: command tx timeout [ 231.858395][ T8201] veth0_macvtap: entered promiscuous mode [ 231.872125][ T8201] veth1_macvtap: entered promiscuous mode [ 231.930191][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.943898][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.957309][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.970429][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.995173][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.008162][ T6120] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 232.018169][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.030267][ T8201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.039189][ T8201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.048544][ T6121] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 232.057492][ T8201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.067160][ T8201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.194833][ T6120] usb 4-1: Using ep0 maxpacket: 8 [ 232.202737][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.216373][ T6120] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.236173][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.254523][ T6120] usb 4-1: config 0 has no interfaces? [ 232.267738][ T6121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.295210][ T6120] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 232.305338][ T6121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.325060][ T6120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.333225][ T6120] usb 4-1: Product: syz [ 232.339577][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.344512][ T6121] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.368351][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.372395][ T6120] usb 4-1: Manufacturer: syz [ 232.388335][ T6121] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.402363][ T6120] usb 4-1: SerialNumber: syz [ 232.414077][ T6120] usb 4-1: config 0 descriptor?? [ 232.420593][ T6121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.454754][ T5783] Bluetooth: hci1: command tx timeout [ 232.470169][ T6121] usb 1-1: config 0 descriptor?? [ 232.687089][ T8288] se_device not configured yet, cannot port link [ 232.699329][ T6120] usb 4-1: USB disconnect, device number 42 [ 232.918958][ T8294] loop2: detected capacity change from 0 to 2048 [ 232.950194][ T6121] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 232.984848][ T6121] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 233.034921][ T8294] Alternate GPT is invalid, using primary GPT. [ 233.041357][ T8294] loop2: p2 p3 p7 [ 233.237141][ T6188] usb 1-1: USB disconnect, device number 23 [ 233.557320][ T8309] fuse: Unknown parameter 'user_id00000000000000000000' [ 233.771364][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 233.800488][ T6864] udevd[6864]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 233.823446][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 234.356895][ T8332] tipc: Enabling of bearer rejected, failed to enable media [ 234.367501][ T8332] syzkaller0: entered promiscuous mode [ 234.373014][ T8332] syzkaller0: entered allmulticast mode [ 234.465417][ T6120] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 234.545636][ T5783] Bluetooth: hci1: command tx timeout [ 234.578168][ T8315] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 234.584500][ T6121] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 234.669202][ T6120] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.671163][ T23] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 234.689116][ T6120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.706855][ T6120] usb 4-1: Product: syz [ 234.721925][ T6120] usb 4-1: Manufacturer: syz [ 234.734237][ T6120] usb 4-1: SerialNumber: syz [ 234.750567][ T6120] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 234.779356][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 234.791744][ T6121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.834430][ T6121] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.860463][ T6121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.884386][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 234.893149][ T6121] usb 2-1: config 0 descriptor?? [ 234.921287][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.975246][ T23] usb 1-1: config 0 has no interfaces? [ 235.008378][ T23] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 235.052205][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.061034][ T23] usb 1-1: Product: syz [ 235.070656][ T23] usb 1-1: Manufacturer: syz [ 235.079861][ T23] usb 1-1: SerialNumber: syz [ 235.097953][ T23] usb 1-1: config 0 descriptor?? [ 235.158460][ T6121] usbhid 2-1:0.0: can't add hid device: -71 [ 235.191805][ T6121] usbhid: probe of 2-1:0.0 failed with error -71 [ 235.206981][ T6121] usb 2-1: USB disconnect, device number 42 [ 235.369287][ T23] usb 1-1: USB disconnect, device number 24 [ 235.434720][ T6120] usb 4-1: USB disconnect, device number 43 [ 235.754291][ T6121] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 235.946368][ T6121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.965572][ T6121] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 235.996076][ T6121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.017732][ T6121] usb 2-1: config 0 descriptor?? [ 236.054945][ T8] usb 4-1: Service connection timeout for: 256 [ 236.071473][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 236.090281][ T8] ath9k_htc: Failed to initialize the device [ 236.122637][ T6120] usb 4-1: ath9k_htc: USB layer deinitialized [ 236.270357][ T8357] loop2: detected capacity change from 0 to 1024 [ 236.323119][ T8357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.397725][ T8364] team0 (unregistering): Port device team_slave_0 removed [ 236.411573][ T8364] team0 (unregistering): Port device team_slave_1 removed [ 236.477477][ T8328] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 236.493439][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.559222][ T6120] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 236.776713][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.804404][ T6120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.824604][ T6120] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.844399][ T6120] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.853572][ T6120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.871510][ T6120] usb 4-1: config 0 descriptor?? [ 237.003816][ T6121] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 237.024030][ T6121] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 237.310327][ T6120] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 237.345098][ T6120] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 237.390781][ T6120] usb 2-1: USB disconnect, device number 43 [ 237.396923][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 237.407762][ T8381] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.731'. [ 237.436175][ T8381] i2c i2c-0: Invalid block write size 59 [ 237.596375][ T8] usb 4-1: USB disconnect, device number 44 [ 238.880329][ T8400] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 239.084303][ T6120] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 239.343732][ T6120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.361668][ T6120] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 239.375053][ T8428] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.748'. [ 239.392129][ T6120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.406193][ T8428] i2c i2c-0: Invalid block write size 59 [ 239.439281][ T6120] usb 1-1: config 0 descriptor?? [ 239.670884][ T6120] usbhid 1-1:0.0: can't add hid device: -71 [ 239.691542][ T6120] usbhid: probe of 1-1:0.0 failed with error -71 [ 239.729061][ T6120] usb 1-1: USB disconnect, device number 25 [ 240.233972][ T6121] IPVS: starting estimator thread 0... [ 240.240079][ T6120] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.347088][ T8436] IPVS: using max 27 ests per chain, 64800 per kthread [ 240.436677][ T6120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.464334][ T6120] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 240.484858][ T6120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.506215][ T6120] usb 1-1: config 0 descriptor?? [ 240.840336][ T8448] loop1: detected capacity change from 0 to 512 [ 240.852064][ T8448] EXT4-fs: journaled quota format not specified [ 240.939417][ T8414] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 241.211201][ T8455] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.758'. [ 241.222870][ T8455] i2c i2c-0: Invalid block write size 59 [ 241.445084][ T6120] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 241.453613][ T6120] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 241.711713][ T8461] fuse: Unknown parameter 'group_id00000000000000000000' [ 241.833790][ T23] usb 1-1: USB disconnect, device number 26 [ 241.833828][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 241.850863][ T8463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.654749][ T8484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.769'. [ 242.855083][ T8487] fuse: Unknown parameter 'group_id00000000000000000000' [ 243.620928][ T8501] loop3: detected capacity change from 0 to 512 [ 243.662311][ T8501] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.776: iget: bad i_size value: 38620345925642 [ 243.678550][ T8501] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.776: couldn't read orphan inode 15 (err -117) [ 243.736047][ T8501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.886731][ T8501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.776: bg 0: block 5: invalid block bitmap [ 243.992191][ T8501] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 376 with error 28 [ 244.026197][ T8501] EXT4-fs (loop3): This should not happen!! Data will be lost [ 244.026197][ T8501] [ 244.057589][ T8501] EXT4-fs (loop3): Total free blocks count 0 [ 244.076453][ T8501] EXT4-fs (loop3): Free/Dirty block details [ 244.094279][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 244.109018][ T8501] EXT4-fs (loop3): free_blocks=0 [ 244.125355][ T8501] EXT4-fs (loop3): dirty_blocks=380 [ 244.154454][ T8501] EXT4-fs (loop3): Block reservation details [ 244.178039][ T8501] EXT4-fs (loop3): i_reserved_data_blocks=380 [ 244.300425][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 244.322486][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.348074][ T23] usb 1-1: Product: syz [ 244.352385][ T23] usb 1-1: Manufacturer: syz [ 244.375440][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'. [ 244.384468][ T23] usb 1-1: SerialNumber: syz [ 244.401545][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.426310][ T23] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 244.465640][ T6189] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 244.579312][ T8510] fuse: Unknown parameter 'group_id00000000000000000000' [ 244.847970][ T8517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.781'. [ 245.109529][ T6121] usb 1-1: USB disconnect, device number 27 [ 245.736713][ T6189] usb 1-1: Service connection timeout for: 256 [ 245.743030][ T6189] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 245.789715][ T6189] ath9k_htc: Failed to initialize the device [ 245.831070][ T6121] usb 1-1: ath9k_htc: USB layer deinitialized [ 245.943862][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 246.945704][ T8540] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.952870][ T8540] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 246.968797][ T8540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.975371][ T8540] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 246.982547][ T8540] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.988917][ T8540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 246.997504][ T8540] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 247.007505][ T8540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.013624][ T8540] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.025171][ T8540] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 247.267626][ T8564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.798'. [ 247.314518][ T6121] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 247.447778][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 247.536308][ T6121] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 247.553572][ T6121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.562703][ T6121] usb 2-1: Product: syz [ 247.576786][ T6121] usb 2-1: Manufacturer: syz [ 247.583785][ T6121] usb 2-1: SerialNumber: syz [ 247.605532][ T6121] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.628446][ T6120] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 247.919260][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 247.919285][ T28] audit: type=1107 audit(1785323550.069:60): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 247.919285][ T28] ,”' [ 248.028131][ T8577] can0: slcan on ttyS3. [ 248.136207][ T8577] can0 (unregistered): slcan off ttyS3. [ 248.155939][ T8577] Set syz1 is full, maxelem 65536 reached [ 248.214323][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 248.272732][ T6121] usb 2-1: USB disconnect, device number 44 [ 248.781297][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 248.935584][ T6120] usb 2-1: Service connection timeout for: 256 [ 248.947316][ T6120] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 248.955834][ T8609] syzkaller0: entered promiscuous mode [ 248.961799][ T8609] syzkaller0: entered allmulticast mode [ 248.968766][ T6120] ath9k_htc: Failed to initialize the device [ 248.980190][ T6121] usb 2-1: ath9k_htc: USB layer deinitialized [ 249.014628][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.020980][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.020991][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 249.527068][ T8624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.813'. [ 249.871563][ T8636] can0: slcan on ttyS3. [ 249.926493][ T8636] can0 (unregistered): slcan off ttyS3. [ 250.297198][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 250.355274][ T8639] fuse: Bad value for 'user_id' [ 250.762823][ T8645] syzkaller0: entered promiscuous mode [ 250.768689][ T8645] syzkaller0: entered allmulticast mode [ 251.064522][ T5810] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 251.094335][ T5783] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.095085][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 251.100746][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 251.301451][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 251.309660][ T5810] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 251.318296][ T5810] usb 2-1: config 0 has no interface number 0 [ 251.338585][ T5810] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 251.349216][ T5810] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 251.381532][ T5810] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 251.392711][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.407472][ T5810] usb 2-1: Product: syz [ 251.411797][ T5810] usb 2-1: Manufacturer: syz [ 251.418677][ T5810] usb 2-1: SerialNumber: syz [ 251.440520][ T5810] usb 2-1: config 0 descriptor?? [ 251.448679][ T8643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.456231][ T8643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.682778][ T8643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.692652][ T8643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.910832][ T5810] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 253.174294][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.180392][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.937215][ T8636] Set syz1 is full, maxelem 65536 reached [ 254.048125][ T5810] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 254.066037][ T5810] asix: probe of 2-1:0.34 failed with error -71 [ 254.082830][ T5810] usb 2-1: USB disconnect, device number 45 [ 254.968399][ T8710] loop0: detected capacity change from 0 to 512 [ 255.041898][ T8710] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.848: iget: bad i_size value: 38620345925642 [ 255.059117][ T8710] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.848: couldn't read orphan inode 15 (err -117) [ 255.072596][ T8710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.212058][ T8710] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.848: bg 0: block 5: invalid block bitmap [ 255.227002][ T8710] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 920 with error 28 [ 255.247616][ T8710] EXT4-fs (loop0): This should not happen!! Data will be lost [ 255.247616][ T8710] [ 255.274300][ T8710] EXT4-fs (loop0): Total free blocks count 0 [ 255.280350][ T8710] EXT4-fs (loop0): Free/Dirty block details [ 255.324332][ T8710] EXT4-fs (loop0): free_blocks=0 [ 255.329359][ T8710] EXT4-fs (loop0): dirty_blocks=924 [ 255.343058][ T8710] EXT4-fs (loop0): Block reservation details [ 255.349333][ T8710] EXT4-fs (loop0): i_reserved_data_blocks=924 [ 255.354015][ T8721] fuse: Bad value for 'fd' [ 255.531815][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.819500][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.826123][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.123302][ T8750] fuse: Bad value for 'fd' [ 256.381762][ T8762] syzkaller0: entered promiscuous mode [ 256.389475][ T8762] syzkaller0: entered allmulticast mode [ 256.870867][ T5811] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 256.876409][ T8779] fuse: Invalid rootmode [ 257.060893][ T8787] loop2: detected capacity change from 0 to 512 [ 257.090565][ T8787] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.877: iget: bad i_size value: 38620345925642 [ 257.108738][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 257.117621][ T8787] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.877: couldn't read orphan inode 15 (err -117) [ 257.131730][ T8787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.161208][ T5811] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 257.189837][ T5811] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.239746][ T5811] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 257.268473][ T5811] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 257.286333][ T5811] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.310110][ T5811] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.324304][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.356214][ T5811] usbtmc 1-1:16.0: bulk endpoints not found [ 257.906387][ T8787] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.877: bg 0: block 5: invalid block bitmap [ 257.934843][ T8787] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 257.948920][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.965905][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.975919][ T8787] EXT4-fs (loop2): This should not happen!! Data will be lost [ 257.975919][ T8787] [ 257.988001][ T8787] EXT4-fs (loop2): Total free blocks count 0 [ 257.994087][ T8787] EXT4-fs (loop2): Free/Dirty block details [ 258.001071][ T8787] EXT4-fs (loop2): free_blocks=0 [ 258.006124][ T8787] EXT4-fs (loop2): dirty_blocks=10096 [ 258.016560][ T8787] EXT4-fs (loop2): Block reservation details [ 258.024284][ T8787] EXT4-fs (loop2): i_reserved_data_blocks=10096 [ 258.059134][ T8803] fuse: Invalid rootmode [ 258.104590][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 258.504583][ T6188] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 258.706958][ T6188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.734735][ T6188] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.743896][ T6188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.773338][ T6188] usb 2-1: config 0 descriptor?? [ 259.000555][ T6188] usbhid 2-1:0.0: can't add hid device: -71 [ 259.008337][ T6188] usbhid: probe of 2-1:0.0 failed with error -71 [ 259.026910][ T6188] usb 2-1: USB disconnect, device number 46 [ 259.544598][ T6188] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 259.569954][ T5811] usb 1-1: USB disconnect, device number 28 [ 259.767585][ T6188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.783219][ T6188] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 259.804029][ T6188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.828470][ T6188] usb 2-1: config 0 descriptor?? [ 259.980732][ T8852] fuse: Invalid rootmode [ 260.542913][ T8862] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.675840][ T6188] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 260.694036][ T6188] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 261.103713][ T6120] usb 2-1: USB disconnect, device number 47 [ 261.103893][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 261.258836][ T8887] loop0: detected capacity change from 0 to 512 [ 261.322630][ T8887] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.899: iget: bad i_size value: 38620345925642 [ 261.394761][ T8887] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.899: couldn't read orphan inode 15 (err -117) [ 261.466487][ T8887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.687488][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.865207][ T8905] fuse: Bad value for 'rootmode' [ 262.017762][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.030786][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.058562][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.071216][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.080034][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 262.087460][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.452568][ T8931] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.908'. [ 262.492957][ T8931] i2c i2c-0: Invalid block write size 59 [ 262.537220][ T8931] lo: entered promiscuous mode [ 262.620594][ T8931] tunl0: entered promiscuous mode [ 262.659175][ T8931] gre0: entered promiscuous mode [ 262.765696][ T8931] gretap0: entered promiscuous mode [ 262.791902][ T8931] erspan0: entered promiscuous mode [ 262.821180][ T8931] ip_vti0: entered promiscuous mode [ 262.841670][ T8931] ip6_vti0: entered promiscuous mode [ 262.868382][ T8931] sit0: entered promiscuous mode [ 262.912729][ T8931] ip6tnl0: entered promiscuous mode [ 262.940138][ T8931] ip6gre0: entered promiscuous mode [ 262.966322][ T8931] syz_tun: entered promiscuous mode [ 262.991644][ T8931] ip6gretap0: entered promiscuous mode [ 263.019728][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.027658][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.036004][ T8931] bridge0: entered promiscuous mode [ 263.062538][ T8931] vcan0: entered promiscuous mode [ 263.075205][ T8931] bond0: entered promiscuous mode [ 263.080408][ T8931] bond_slave_0: entered promiscuous mode [ 263.086940][ T8931] bond_slave_1: entered promiscuous mode [ 263.116166][ T8931] team0: entered promiscuous mode [ 263.121243][ T8931] team_slave_0: entered promiscuous mode [ 263.127798][ T8931] team_slave_1: entered promiscuous mode [ 263.157555][ T8931] dummy0: entered promiscuous mode [ 263.183100][ T8931] nlmon0: entered promiscuous mode [ 263.198065][ T8931] caif0: entered promiscuous mode [ 263.211570][ T8931] batadv0: entered promiscuous mode [ 263.237639][ T8931] vxcan0: entered promiscuous mode [ 263.249826][ T8931] vxcan1: entered promiscuous mode [ 263.267862][ T8931] veth0: entered promiscuous mode [ 263.294780][ T8931] veth1: entered promiscuous mode [ 263.323133][ T8931] wg0: entered promiscuous mode [ 263.343382][ T8931] wg1: entered promiscuous mode [ 263.366385][ T8931] wg2: entered promiscuous mode [ 263.384058][ T8931] veth0_to_bridge: entered promiscuous mode [ 263.427003][ T8931] veth1_to_bridge: entered promiscuous mode [ 263.467458][ T8931] veth0_to_bond: entered promiscuous mode [ 263.503986][ T8931] veth1_to_bond: entered promiscuous mode [ 263.527735][ T8931] veth0_to_team: entered promiscuous mode [ 263.548052][ T8931] veth1_to_team: entered promiscuous mode [ 263.565371][ T8931] veth0_to_batadv: entered promiscuous mode [ 263.582643][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.595024][ T8931] batadv_slave_0: entered promiscuous mode [ 263.617006][ T8931] veth1_to_batadv: entered promiscuous mode [ 263.635227][ T8931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.643311][ T8931] batadv_slave_1: entered promiscuous mode [ 263.687064][ T8931] xfrm0: entered promiscuous mode [ 263.705565][ T8931] veth0_to_hsr: entered promiscuous mode [ 263.735305][ T8931] veth1_to_hsr: entered promiscuous mode [ 263.758858][ T8931] hsr0: entered promiscuous mode [ 263.767987][ T8931] veth1_virt_wifi: entered promiscuous mode [ 263.815186][ T8931] veth0_virt_wifi: entered promiscuous mode [ 263.831806][ T8931] virt_wifi0: entered promiscuous mode [ 263.909536][ T8931] vlan0: entered promiscuous mode [ 263.915376][ T8931] vlan1: entered promiscuous mode [ 263.922084][ T8931] macvlan0: entered promiscuous mode [ 263.939368][ T8931] macvlan1: entered promiscuous mode [ 263.956056][ T8931] ipvlan0: entered promiscuous mode [ 263.961803][ T8931] ipvlan1: entered promiscuous mode [ 263.976559][ T8931] macvtap0: entered promiscuous mode [ 264.025419][ T8931] macsec0: entered promiscuous mode [ 264.035558][ T8931] geneve0: entered promiscuous mode [ 264.045935][ T8931] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.061675][ T8931] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.071296][ T8931] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.081343][ T8931] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.090695][ T8931] geneve1: entered promiscuous mode [ 264.103705][ T8931] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 264.127413][ T8931] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 264.135412][ T51] Bluetooth: hci4: command tx timeout [ 264.146730][ T8931] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 264.158760][ T8931] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 264.172739][ T8931] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 264.186753][ T8931] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 264.222574][ T8909] chnl_net:caif_netlink_parms(): no params data found [ 264.303607][ T8944] loop2: detected capacity change from 0 to 512 [ 264.361359][ T8944] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.909: iget: bad i_size value: 38620345925642 [ 264.378677][ T8944] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.909: couldn't read orphan inode 15 (err -117) [ 264.407603][ T8944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.557030][ T8909] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.564383][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.571581][ T8909] bridge_slave_0: entered allmulticast mode [ 264.573020][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.583249][ T8909] bridge_slave_0: entered promiscuous mode [ 264.598883][ T8909] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.608464][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.623907][ T8909] bridge_slave_1: entered allmulticast mode [ 264.634186][ T8909] bridge_slave_1: entered promiscuous mode [ 264.782346][ T8909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.843967][ T8956] fuse: Bad value for 'rootmode' [ 264.854043][ T8909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.987065][ T8909] team0: Port device team_slave_0 added [ 265.012564][ T8909] team0: Port device team_slave_1 added [ 265.107182][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.120424][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.171517][ T8909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.195446][ T8967] netlink: 'syz.1.916': attribute type 4 has an invalid length. [ 265.271349][ T8909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.290934][ T8909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.347942][ T8909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.390320][ T8975] loop2: detected capacity change from 0 to 512 [ 265.444596][ T8975] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.918: iget: bad i_size value: 38620345925642 [ 265.503904][ T8975] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.918: couldn't read orphan inode 15 (err -117) [ 265.555875][ T8975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.573225][ T8909] hsr_slave_0: entered promiscuous mode [ 265.601775][ T8909] hsr_slave_1: entered promiscuous mode [ 265.619037][ T8909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.642522][ T8909] Cannot create hsr debugfs directory [ 265.654361][ T8978] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 265.693010][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.158187][ T8909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.189421][ T8909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.207327][ T8999] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.922'. [ 266.224376][ T51] Bluetooth: hci4: command tx timeout [ 266.248754][ T8909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.264687][ T8999] i2c i2c-0: Invalid block write size 59 [ 266.279813][ T8909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.792370][ T9019] fuse: Unknown parameter 'use00000000000000000000' [ 266.928768][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.973070][ T8909] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.016048][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.023222][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.077830][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.085191][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.223358][ T8909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.472986][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.574948][ T5775] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 267.790286][ T5775] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.802131][ T8909] veth0_vlan: entered promiscuous mode [ 267.814796][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.822837][ T5775] usb 2-1: Product: syz [ 267.839515][ T5775] usb 2-1: Manufacturer: syz [ 267.854849][ T5775] usb 2-1: SerialNumber: syz [ 267.863346][ T8909] veth1_vlan: entered promiscuous mode [ 267.873418][ T5775] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 267.902266][ T6123] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 267.958414][ T8909] veth0_macvtap: entered promiscuous mode [ 267.997024][ T8909] veth1_macvtap: entered promiscuous mode [ 268.036110][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.046761][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.058597][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.073377][ T8909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.083943][ T8909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.096507][ T8909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.142523][ T8909] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.158692][ T8909] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.173199][ T8909] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.194432][ T8909] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.304422][ T51] Bluetooth: hci4: command tx timeout [ 268.407937][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.433419][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.556198][ T6190] usb 2-1: USB disconnect, device number 48 [ 268.637236][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.645891][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.666086][ T9060] TC_ACT_REPEAT abuse ? [ 268.989982][ T9070] fuse: Unknown parameter 'use00000000000000000000' [ 269.174766][ T6123] usb 2-1: Service connection timeout for: 256 [ 269.204758][ T6123] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 269.218395][ T6123] ath9k_htc: Failed to initialize the device [ 269.224563][ T6288] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 269.264502][ T6190] usb 2-1: ath9k_htc: USB layer deinitialized [ 269.404588][ T6288] usb 5-1: Using ep0 maxpacket: 8 [ 269.415746][ T6288] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 269.424011][ T6288] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.449054][ T6288] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.495487][ T6288] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 269.528138][ T6288] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.558221][ T6288] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.593002][ T6288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.619094][ T6288] usbtmc 5-1:16.0: bulk endpoints not found [ 269.634357][ T6187] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 269.702556][ T9096] tipc: Started in network mode [ 269.710652][ T9096] tipc: Node identity a6b6796063bd, cluster identity 4711 [ 269.719945][ T9096] tipc: Enabled bearer , priority 0 [ 269.730785][ T9093] tipc: Disabling bearer [ 269.856677][ T6187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.871821][ T6187] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.897922][ T6187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.917659][ T6187] usb 3-1: config 0 descriptor?? [ 269.966692][ T9102] TC_ACT_REPEAT abuse ? [ 270.134128][ T6187] usbhid 3-1:0.0: can't add hid device: -71 [ 270.146206][ T6187] usbhid: probe of 3-1:0.0 failed with error -71 [ 270.158450][ T6187] usb 3-1: USB disconnect, device number 35 [ 270.191864][ T9107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.212402][ T9107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.311194][ T9113] fuse: Unknown parameter 'use00000000000000000000' [ 270.385217][ T51] Bluetooth: hci4: command tx timeout [ 270.695031][ T6187] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 270.906003][ T6187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.932492][ T6187] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 270.946188][ T6187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.957474][ T6187] usb 3-1: config 0 descriptor?? [ 270.986650][ T9134] tipc: Enabled bearer , priority 0 [ 271.001013][ T9133] tipc: Disabling bearer [ 271.060585][ T9137] TC_ACT_REPEAT abuse ? [ 271.825530][ T6187] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 271.873794][ T6290] usb 5-1: USB disconnect, device number 2 [ 271.889514][ T6187] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 272.261849][ T6301] usb 3-1: USB disconnect, device number 36 [ 272.262092][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 272.574724][ T6187] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 272.824363][ T6187] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.863669][ T6187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.919127][ T6187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.941152][ T6187] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.992821][ T6187] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.012985][ T6187] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.048766][ T6187] usb 5-1: Product: syz [ 273.052987][ T6187] usb 5-1: Manufacturer: syz [ 273.097899][ T6187] cdc_wdm 5-1:1.0: skipping garbage [ 273.129902][ T6187] cdc_wdm 5-1:1.0: skipping garbage [ 273.154343][ T6187] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 273.334949][ T6187] usb 5-1: USB disconnect, device number 3 [ 273.467804][ T9187] TC_ACT_REPEAT abuse ? [ 273.643348][ T9188] tipc: Enabled bearer , priority 0 [ 273.722365][ T9186] tipc: Disabling bearer [ 274.652144][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.974'. [ 274.945752][ T9232] tipc: Started in network mode [ 274.966308][ T9232] tipc: Node identity 2af432c09004, cluster identity 4711 [ 274.984500][ T9232] tipc: Enabled bearer , priority 0 [ 275.023113][ T9231] tipc: Disabling bearer [ 275.234392][ T6187] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 275.447807][ T6187] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.458008][ T6187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.484236][ T6187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.514283][ T6187] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.538291][ T6187] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.569249][ T6187] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.611344][ T6187] usb 5-1: Product: syz [ 275.620004][ T6187] usb 5-1: Manufacturer: syz [ 275.639594][ T6187] cdc_wdm 5-1:1.0: skipping garbage [ 275.665577][ T6187] cdc_wdm 5-1:1.0: skipping garbage [ 275.670845][ T6187] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 275.865480][ T6187] usb 5-1: USB disconnect, device number 4 [ 276.054617][ T9252] fuse: Unknown parameter 'user_id00000000000000000000' [ 276.305977][ T9256] tipc: Enabled bearer , priority 0 [ 276.364131][ T9254] tipc: Disabling bearer [ 276.894949][ T6290] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 277.094421][ T6290] usb 2-1: Using ep0 maxpacket: 8 [ 277.135666][ T6290] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 277.153156][ T6290] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.204336][ T6290] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.225085][ T6290] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 277.250147][ T6290] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 277.263758][ T6290] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.300592][ T6290] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.323527][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.419040][ T6290] usbtmc: probe of 2-1:16.0 failed with error -22 [ 277.814366][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 277.988963][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.032279][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.050963][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.095817][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.151219][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.209860][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.253344][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.321756][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.359630][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.398039][ T9] usb 1-1: Product: syz [ 278.413512][ T9] usb 1-1: Manufacturer: syz [ 278.440100][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 278.462443][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 278.499765][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 278.529154][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 278.692282][ T9289] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 278.753775][ T9] usb 1-1: USB disconnect, device number 29 [ 279.603377][ T9319] syzkaller0: entered promiscuous mode [ 279.610286][ T6290] usb 2-1: USB disconnect, device number 49 [ 279.651706][ T9319] syzkaller0: entered allmulticast mode [ 279.721322][ T9326] loop2: detected capacity change from 0 to 512 [ 279.801428][ T9326] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1014: iget: bad i_size value: 38620345925642 [ 279.886496][ T9326] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1014: couldn't read orphan inode 15 (err -117) [ 279.945397][ T9326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.127276][ T9326] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1014: bg 0: block 5: invalid block bitmap [ 280.164687][ T9326] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 592 with error 28 [ 280.207731][ T9326] EXT4-fs (loop2): This should not happen!! Data will be lost [ 280.207731][ T9326] [ 280.274250][ T9326] EXT4-fs (loop2): Total free blocks count 0 [ 280.299864][ T9326] EXT4-fs (loop2): Free/Dirty block details [ 280.317747][ T9326] EXT4-fs (loop2): free_blocks=0 [ 280.322970][ T9326] EXT4-fs (loop2): dirty_blocks=596 [ 280.336515][ T9326] EXT4-fs (loop2): Block reservation details [ 280.352302][ T9326] EXT4-fs (loop2): i_reserved_data_blocks=596 [ 280.615417][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.754389][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 280.832593][ T9346] 9pnet_virtio: no channels available for device .. [ 281.017638][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 281.027707][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.037990][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 281.048316][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.059321][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.071888][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 281.116635][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 281.183595][ T9] usb 1-1: Product: syz [ 281.244390][ T9] usb 1-1: Manufacturer: syz [ 281.280913][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 281.294369][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 281.303003][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 281.310837][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 281.494667][ T9339] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 281.513163][ T9] usb 1-1: USB disconnect, device number 30 [ 281.617178][ T9356] syzkaller0: entered promiscuous mode [ 281.622713][ T9356] syzkaller0: entered allmulticast mode [ 282.176581][ T9370] 9pnet_virtio: no channels available for device .. [ 282.464927][ T6187] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 282.612908][ T9388] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1037'. [ 282.627545][ T9388] i2c i2c-0: Invalid block write size 59 [ 282.636524][ T9388] lo: entered promiscuous mode [ 282.642278][ T9388] tunl0: entered promiscuous mode [ 282.644555][ T6187] usb 1-1: Using ep0 maxpacket: 16 [ 282.668803][ T9388] gre0: entered promiscuous mode [ 282.686273][ T6187] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 282.748677][ T6187] usb 1-1: config 0 has no interface number 0 [ 282.779950][ T6187] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 282.790360][ T6187] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 282.804580][ T6187] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 282.808412][ T9388] gretap0: entered promiscuous mode [ 282.814783][ T6187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.827520][ T6187] usb 1-1: Product: syz [ 282.831968][ T6187] usb 1-1: Manufacturer: syz [ 282.836989][ T6187] usb 1-1: SerialNumber: syz [ 282.852825][ T6187] usb 1-1: config 0 descriptor?? [ 282.867098][ T9371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.874911][ T9371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.892012][ T9388] erspan0: entered promiscuous mode [ 282.963182][ T9388] ip_vti0: entered promiscuous mode [ 282.993250][ T9388] ip6_vti0: entered promiscuous mode [ 283.051628][ T9388] sit0: entered promiscuous mode [ 283.105814][ T9371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.126410][ T9371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.221698][ T9388] ip6tnl0: entered promiscuous mode [ 283.277650][ T9388] ip6gre0: entered promiscuous mode [ 283.343339][ T9388] syz_tun: entered promiscuous mode [ 283.350639][ T6187] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 283.407148][ T9388] ip6gretap0: entered promiscuous mode [ 283.457358][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.464853][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.494632][ T9388] bridge0: entered promiscuous mode [ 283.537434][ T9388] vcan0: entered promiscuous mode [ 283.562983][ T9388] bond0: entered promiscuous mode [ 283.568294][ T9388] bond_slave_0: entered promiscuous mode [ 283.574921][ T9388] bond_slave_1: entered promiscuous mode [ 283.664418][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 283.697601][ T9388] team0: entered promiscuous mode [ 283.702796][ T9388] team_slave_0: entered promiscuous mode [ 283.712639][ T9388] team_slave_1: entered promiscuous mode [ 283.777361][ T9388] dummy0: entered promiscuous mode [ 283.851387][ T9388] nlmon0: entered promiscuous mode [ 283.868325][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.884101][ T9388] caif0: entered promiscuous mode [ 283.890088][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.915663][ T9388] batadv0: entered promiscuous mode [ 283.931943][ T9388] vxcan0: entered promiscuous mode [ 283.944333][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.973748][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.994439][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.013078][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.029674][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.039034][ T9] usb 3-1: Product: syz [ 284.043235][ T9] usb 3-1: Manufacturer: syz [ 284.053204][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 284.060884][ T9388] vxcan1: entered promiscuous mode [ 284.074771][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 284.085856][ T9388] veth0: entered promiscuous mode [ 284.093730][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 284.104245][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 284.150359][ T9388] veth1: entered promiscuous mode [ 284.180392][ T9388] wg0: entered promiscuous mode [ 284.213088][ T9388] wg1: entered promiscuous mode [ 284.247859][ T9388] wg2: entered promiscuous mode [ 284.280339][ T9393] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 284.303917][ T9388] veth0_to_bridge: entered promiscuous mode [ 284.316098][ T9] usb 3-1: USB disconnect, device number 37 [ 284.505197][ T9388] veth1_to_bridge: entered promiscuous mode [ 284.590957][ T9388] veth0_to_bond: entered promiscuous mode [ 284.682793][ T9388] veth1_to_bond: entered promiscuous mode [ 284.789605][ T9388] veth0_to_team: entered promiscuous mode [ 284.947100][ T9404] 9pnet_virtio: no channels available for device .. [ 284.965120][ T9388] veth1_to_team: entered promiscuous mode [ 285.049298][ T9388] veth0_to_batadv: entered promiscuous mode [ 285.083397][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.117961][ T9388] batadv_slave_0: entered promiscuous mode [ 285.162029][ T9388] veth1_to_batadv: entered promiscuous mode [ 285.186720][ T9388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.245808][ T9388] batadv_slave_1: entered promiscuous mode [ 285.329833][ T9388] xfrm0: entered promiscuous mode [ 285.386774][ T6187] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 285.418923][ T6187] asix: probe of 1-1:0.34 failed with error -71 [ 285.434114][ T9388] veth0_to_hsr: entered promiscuous mode [ 285.459896][ T6187] usb 1-1: USB disconnect, device number 31 [ 285.543304][ T9388] veth1_to_hsr: entered promiscuous mode [ 285.617187][ T9388] hsr0: entered promiscuous mode [ 285.654646][ T9388] veth1_virt_wifi: entered promiscuous mode [ 285.707130][ T9388] veth0_virt_wifi: entered promiscuous mode [ 285.731086][ T9388] virt_wifi0: entered promiscuous mode [ 285.850223][ T9388] vlan0: entered promiscuous mode [ 285.871334][ T9388] vlan1: entered promiscuous mode [ 285.935749][ T9388] macvlan0: entered promiscuous mode [ 286.039209][ T9388] macvlan1: entered promiscuous mode [ 286.074822][ T9388] ipvlan0: entered promiscuous mode [ 286.096344][ T9388] ipvlan1: entered promiscuous mode [ 286.261880][ T9388] macvtap0: entered promiscuous mode [ 286.311021][ T9388] macsec0: entered promiscuous mode [ 286.351580][ T9388] geneve0: entered promiscuous mode [ 286.430808][ T9388] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.448603][ T9388] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.477607][ T9388] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.499669][ T9388] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.518905][ T9388] geneve1: entered promiscuous mode [ 286.579658][ T9388] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 286.611414][ T9388] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 286.669956][ T9388] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 286.720440][ T9388] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 286.780567][ T9388] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 286.824924][ T9388] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 286.867402][ T9395] can0: slcan on ttyS3. [ 287.224280][ T9396] can0 (unregistered): slcan off ttyS3. [ 287.552173][ T9447] loop1: detected capacity change from 0 to 512 [ 287.636681][ T9447] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1052: iget: bad i_size value: 38620345925642 [ 287.718215][ T9447] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1052: couldn't read orphan inode 15 (err -117) [ 287.801948][ T9447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.903778][ T8170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.546265][ T9476] tipc: Enabling of bearer rejected, failed to enable media [ 288.666657][ T9475] syzkaller0: entered promiscuous mode [ 288.688225][ T9475] syzkaller0: entered allmulticast mode [ 289.024266][ T6301] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 289.033938][ T9487] syzkaller0: entered promiscuous mode [ 289.058255][ T9487] syzkaller0: entered allmulticast mode [ 289.245707][ T6301] usb 2-1: Using ep0 maxpacket: 8 [ 289.273664][ T6301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.304912][ T6301] usb 2-1: config 0 has no interfaces? [ 289.337972][ T6301] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 289.360316][ T6301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.410637][ T6301] usb 2-1: Product: syz [ 289.419739][ T6301] usb 2-1: Manufacturer: syz [ 289.451433][ T6301] usb 2-1: SerialNumber: syz [ 289.475714][ T6301] usb 2-1: config 0 descriptor?? [ 289.742135][ T6301] usb 2-1: USB disconnect, device number 50 [ 290.260632][ T9509] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.708821][ T9525] tipc: Enabling of bearer rejected, failed to enable media [ 291.098139][ T9536] loop2: detected capacity change from 0 to 512 [ 291.174988][ T9536] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1072: iget: bad i_size value: 38620345925642 [ 291.274799][ T9536] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1072: couldn't read orphan inode 15 (err -117) [ 291.305763][ T9540] syzkaller0: entered promiscuous mode [ 291.319448][ T9398] Set syz1 is full, maxelem 65536 reached [ 291.334886][ T9540] syzkaller0: entered allmulticast mode [ 291.361741][ T9536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.567676][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.014460][ T6301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 292.148920][ T9560] tipc: Enabling of bearer rejected, failed to enable media [ 292.220679][ T6301] usb 5-1: Using ep0 maxpacket: 16 [ 292.228731][ T6301] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 292.240468][ T6301] usb 5-1: config 0 has no interface number 0 [ 292.257858][ T6301] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 292.281735][ T6301] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 292.298482][ T6301] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 292.310106][ T6301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.334197][ T6301] usb 5-1: Product: syz [ 292.340465][ T6301] usb 5-1: Manufacturer: syz [ 292.350564][ T6301] usb 5-1: SerialNumber: syz [ 292.371964][ T6301] usb 5-1: config 0 descriptor?? [ 292.395043][ T9547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.414387][ T9547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.487845][ T9567] loop0: detected capacity change from 0 to 512 [ 292.556583][ T9567] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1083: iget: bad i_size value: 38620345925642 [ 292.599574][ T9567] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1083: couldn't read orphan inode 15 (err -117) [ 292.668028][ T9571] syzkaller0: entered promiscuous mode [ 292.678233][ T9571] syzkaller0: entered allmulticast mode [ 292.689616][ T9547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.699635][ T9547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 292.716271][ T9567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.851769][ T9567] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1083: bg 0: block 5: invalid block bitmap [ 292.867713][ T9567] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 660 with error 28 [ 292.880818][ T9567] EXT4-fs (loop0): This should not happen!! Data will be lost [ 292.880818][ T9567] [ 292.904083][ T9567] EXT4-fs (loop0): Total free blocks count 0 [ 292.912346][ T9567] EXT4-fs (loop0): Free/Dirty block details [ 292.919305][ T9567] EXT4-fs (loop0): free_blocks=0 [ 292.921448][ T6301] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 292.934621][ T9567] EXT4-fs (loop0): dirty_blocks=660 [ 292.934703][ T9567] EXT4-fs (loop0): Block reservation details [ 292.934718][ T9567] EXT4-fs (loop0): i_reserved_data_blocks=660 [ 293.115344][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.461424][ T9594] loop1: detected capacity change from 0 to 1024 [ 293.490345][ T9594] ======================================================= [ 293.490345][ T9594] WARNING: The mand mount option has been deprecated and [ 293.490345][ T9594] and is ignored by this kernel. Remove the mand [ 293.490345][ T9594] option from the mount to silence this warning. [ 293.490345][ T9594] ======================================================= [ 293.608188][ T9594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a015c01c, mo2=0002] [ 293.622248][ T9594] System zones: 0-1, 3-36 [ 293.631973][ T9594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.740648][ T8170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.851880][ T9606] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1094'. [ 293.863005][ T9606] i2c i2c-0: Invalid block write size 59 [ 294.013135][ T9610] loop2: detected capacity change from 0 to 512 [ 294.063193][ T9610] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.1097: iget: bad i_size value: 38620345925642 [ 294.100534][ T9610] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.1097: couldn't read orphan inode 15 (err -117) [ 294.114914][ T9610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.215231][ T9610] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.1097: bg 0: block 5: invalid block bitmap [ 294.234320][ T9610] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 728 with error 28 [ 294.262178][ T9610] EXT4-fs (loop2): This should not happen!! Data will be lost [ 294.262178][ T9610] [ 294.272457][ T9610] EXT4-fs (loop2): Total free blocks count 0 [ 294.278661][ T9610] EXT4-fs (loop2): Free/Dirty block details [ 294.285246][ T9610] EXT4-fs (loop2): free_blocks=0 [ 294.295853][ T9610] EXT4-fs (loop2): dirty_blocks=732 [ 294.301201][ T9610] EXT4-fs (loop2): Block reservation details [ 294.307621][ T9610] EXT4-fs (loop2): i_reserved_data_blocks=732 [ 294.372394][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.655891][ T9625] tipc: Cannot configure node identity twice [ 294.943581][ T9634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.027465][ T6301] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 295.039452][ T6301] asix: probe of 5-1:0.34 failed with error -71 [ 295.046440][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 295.072192][ T6301] usb 5-1: USB disconnect, device number 5 [ 295.262305][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.283531][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.303777][ T9640] loop1: detected capacity change from 0 to 512 [ 295.344388][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.405528][ T8] usb 1-1: config 0 descriptor?? [ 295.413838][ T9640] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.1108: iget: bad i_size value: 38620345925642 [ 295.452266][ T9640] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1108: couldn't read orphan inode 15 (err -117) [ 295.474935][ T9640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.615136][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 295.621598][ T9640] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1108: bg 0: block 5: invalid block bitmap [ 295.631680][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 295.662218][ T8] usb 1-1: USB disconnect, device number 32 [ 295.734633][ T9640] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 240 with error 28 [ 295.756625][ T9640] EXT4-fs (loop1): This should not happen!! Data will be lost [ 295.756625][ T9640] [ 295.798254][ T9640] EXT4-fs (loop1): Total free blocks count 0 [ 295.812342][ T9640] EXT4-fs (loop1): Free/Dirty block details [ 295.931240][ T9640] EXT4-fs (loop1): free_blocks=0 [ 295.943796][ T9648] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 1544 at bInterval 1 > max ISOC 1023, may drop data! [ 295.963835][ T9640] EXT4-fs (loop1): dirty_blocks=244 [ 295.970568][ T9640] EXT4-fs (loop1): Block reservation details [ 295.982674][ T9640] EXT4-fs (loop1): i_reserved_data_blocks=244 [ 296.227811][ T8170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.264263][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 296.456190][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.501205][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 296.550225][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.622063][ T8] usb 1-1: config 0 descriptor?? [ 297.456467][ T8] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 297.473392][ T8] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 297.819587][ T6293] usb 1-1: USB disconnect, device number 33 [ 297.819620][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 298.057602][ T9694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.983609][ T9725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1139'. [ 299.046577][ T9725] bridge_slave_0: left allmulticast mode [ 299.052413][ T9725] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.066456][ T9725] bridge_slave_1: left allmulticast mode [ 299.072585][ T9725] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.090220][ T9725] bond0: (slave bond_slave_0): Releasing backup interface [ 299.103621][ T9725] bond0: (slave bond_slave_1): Releasing backup interface [ 299.121311][ T9725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.133802][ T9725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.186660][ T9726] netlink: 'syz.0.1139': attribute type 10 has an invalid length. [ 299.214249][ T9726] bridge0: left promiscuous mode [ 299.236425][ T9726] bridge0: entered promiscuous mode [ 299.252371][ T9726] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 299.330484][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 299.495586][ T9727] bond0: (slave bridge0): Releasing backup interface [ 299.529872][ T9727] bridge0 (unregistering): left promiscuous mode [ 300.149322][ T9753] syzkaller0: entered promiscuous mode [ 300.155085][ T9753] syzkaller0: entered allmulticast mode [ 300.494546][ T6301] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 300.722435][ T6301] usb 3-1: Using ep0 maxpacket: 8 [ 300.739999][ T6301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.765846][ T6301] usb 3-1: config 0 has no interfaces? [ 300.777655][ T6301] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 300.793228][ T6301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.814211][ T6301] usb 3-1: Product: syz [ 300.818423][ T6301] usb 3-1: Manufacturer: syz [ 300.823060][ T6301] usb 3-1: SerialNumber: syz [ 300.847261][ T6301] usb 3-1: config 0 descriptor?? [ 300.951820][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1160'. [ 300.976737][ T9784] bridge_slave_1: left allmulticast mode [ 300.982674][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.996676][ T9784] bridge_slave_0: left allmulticast mode [ 301.002673][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.113296][ T6187] usb 3-1: USB disconnect, device number 38 [ 301.334565][ T6301] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 301.544363][ T6301] usb 1-1: Using ep0 maxpacket: 8 [ 301.565913][ T6301] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 301.577007][ T6301] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.595901][ T6301] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.606988][ T6301] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.617346][ T6301] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.632594][ T6301] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 301.642075][ T6301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.868468][ T6301] usb 1-1: usb_control_msg returned -32 [ 301.892404][ T6301] usbtmc 1-1:16.0: can't read capabilities [ 301.934645][ T6301] usb 1-1: USB disconnect, device number 34 [ 302.335072][ T6301] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 302.494785][ T6301] usb 1-1: device descriptor read/64, error -71 [ 302.774514][ T6301] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 302.934533][ T6301] usb 1-1: device descriptor read/64, error -71 [ 303.065388][ T6301] usb usb1-port1: attempt power cycle [ 303.311780][ T9841] can0: slcan on ttyS3. [ 303.383198][ T9844] Set syz1 is full, maxelem 65536 reached [ 303.393016][ T9841] can0 (unregistered): slcan off ttyS3. [ 303.504787][ T6301] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 303.549897][ T6301] usb 1-1: device descriptor read/8, error -71 [ 303.834342][ T6301] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 303.871060][ T6301] usb 1-1: device descriptor read/8, error -71 [ 304.006939][ T6301] usb usb1-port1: unable to enumerate USB device [ 304.573719][ T9882] can0: slcan on ttyS3. [ 304.604249][ T6301] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 304.626140][ T9884] syzkaller0: entered promiscuous mode [ 304.631665][ T9884] syzkaller0: entered allmulticast mode [ 304.639344][ T9882] can0 (unregistered): slcan off ttyS3. [ 304.650468][ T9885] Set syz1 is full, maxelem 65536 reached [ 304.796333][ T6301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.807618][ T6301] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 304.817119][ T6301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.828107][ T6301] usb 1-1: config 0 descriptor?? [ 305.014290][ T6293] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 305.039993][ T6301] usbhid 1-1:0.0: can't add hid device: -71 [ 305.055685][ T6301] usbhid: probe of 1-1:0.0 failed with error -71 [ 305.068980][ T6301] usb 1-1: USB disconnect, device number 39 [ 305.194375][ T6293] usb 2-1: Using ep0 maxpacket: 8 [ 305.201675][ T6293] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 305.210553][ T6293] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.221627][ T6293] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.231565][ T6293] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.241858][ T6293] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.264638][ T6293] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.284384][ T6293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.511298][ T6293] usb 2-1: usb_control_msg returned -32 [ 305.530627][ T6293] usbtmc 2-1:16.0: can't read capabilities [ 305.565538][ T6293] usb 2-1: USB disconnect, device number 51 [ 305.614263][ T6301] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 305.777196][ T9907] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 305.816275][ T6301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.834245][ T6301] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 305.853662][ T6301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.866694][ T6301] usb 1-1: config 0 descriptor?? [ 305.954378][ T6293] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 306.124552][ T6293] usb 2-1: device descriptor read/64, error -71 [ 306.387779][ T9920] can0: slcan on ttyS3. [ 306.394543][ T6293] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 306.455307][ T9920] can0 (unregistered): slcan off ttyS3. [ 306.464396][ T9920] Set syz1 is full, maxelem 65536 reached [ 306.554317][ T6293] usb 2-1: device descriptor read/64, error -71 [ 306.674418][ T6293] usb usb2-port1: attempt power cycle [ 307.084562][ T6293] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 307.118293][ T6293] usb 2-1: device descriptor read/8, error -71 [ 307.394276][ T6293] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 307.430440][ T6293] usb 2-1: device descriptor read/8, error -71 [ 307.514290][ T5775] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 307.551382][ T6301] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 307.556731][ T6293] usb usb2-port1: unable to enumerate USB device [ 307.574924][ T6301] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 307.633931][ T6301] usb 1-1: USB disconnect, device number 40 [ 307.639993][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 307.705609][ T5775] usb 5-1: Using ep0 maxpacket: 16 [ 307.723135][ T5775] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 307.732113][ T5775] usb 5-1: config 0 has no interface number 0 [ 307.738872][ T5775] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 307.766680][ T5775] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 307.792750][ T5775] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 307.815589][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.831322][ T5775] usb 5-1: Product: syz [ 307.835890][ T5775] usb 5-1: Manufacturer: syz [ 307.840620][ T5775] usb 5-1: SerialNumber: syz [ 307.868928][ T5775] usb 5-1: config 0 descriptor?? [ 307.882629][ T9928] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 307.891536][ T9928] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 308.059711][ T9941] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1223'. [ 308.071714][ T9941] i2c i2c-0: Invalid block write size 59 [ 308.099814][ T9942] syzkaller0: entered promiscuous mode [ 308.105450][ T9942] syzkaller0: entered allmulticast mode [ 308.126163][ T9928] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 308.133456][ T9928] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 308.301701][ T9944] can0: slcan on ttyS3. [ 308.343811][ T5775] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 308.458178][ T9943] can0 (unregistered): slcan off ttyS3. [ 309.107936][ T9971] loop0: detected capacity change from 0 to 736 [ 309.264780][ T6293] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 309.478965][ T6293] usb 3-1: Using ep0 maxpacket: 8 [ 309.509523][ T6293] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 309.534267][ T6293] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.593789][ T6293] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.611365][ T6293] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.622922][ T6293] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.636924][ T6293] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.647375][ T6293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.861254][ T6293] usb 3-1: GET_CAPABILITIES returned 0 [ 309.889846][ T6293] usbtmc 3-1:16.0: can't read capabilities [ 310.060066][T10004] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1239'. [ 310.078015][T10004] i2c i2c-0: Invalid block write size 59 [ 310.080105][ T6293] usb 3-1: USB disconnect, device number 39 [ 310.283804][T10009] can0: slcan on ttyS3. [ 310.315389][T10009] Set syz1 is full, maxelem 65536 reached [ 310.393737][ T5775] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 310.414488][ T5775] asix: probe of 5-1:0.34 failed with error -71 [ 310.433377][ T5775] usb 5-1: USB disconnect, device number 6 [ 310.475695][ T6293] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 310.483756][T10008] can0 (unregistered): slcan off ttyS3. [ 310.634485][ T6293] usb 3-1: device descriptor read/64, error -71 [ 310.904443][ T6293] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 311.084359][ T6293] usb 3-1: device descriptor read/64, error -71 [ 311.231674][ T6293] usb usb3-port1: attempt power cycle [ 311.655920][ T6293] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 311.696837][ T6293] usb 3-1: device descriptor read/8, error -71 [ 311.839499][T10063] can0: slcan on ttyS3. [ 311.858089][T10063] Set syz1 is full, maxelem 65536 reached [ 311.949468][T10072] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1251'. [ 311.984285][ T6293] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 312.025153][T10072] i2c i2c-0: Invalid block write size 59 [ 312.054769][ T6293] usb 3-1: device descriptor read/8, error -71 [ 312.054915][T10060] can0 (unregistered): slcan off ttyS3. [ 312.066822][T10074] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1254'. [ 312.121202][T10074] bond0: (slave bond_slave_0): Releasing backup interface [ 312.149808][T10074] bond0: (slave bond_slave_1): Releasing backup interface [ 312.184849][ T6293] usb usb3-port1: unable to enumerate USB device [ 312.192898][T10074] team0: Port device team_slave_0 removed [ 312.208069][T10074] team0: Port device team_slave_1 removed [ 312.222750][T10074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.230879][T10074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.247184][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 313.334349][ T6293] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 313.523260][T10138] syz_tun: entered allmulticast mode [ 313.530754][ T6293] usb 1-1: Using ep0 maxpacket: 8 [ 313.562276][ T6293] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 313.581281][T10137] syz_tun: left allmulticast mode [ 313.595275][ T6293] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.617726][ T6293] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.634917][ T6293] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.655010][ T6293] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.686605][ T6293] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.720873][ T6293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.788464][T10147] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1268'. [ 313.807058][T10147] i2c i2c-0: Invalid block write size 59 [ 313.949005][ T6293] usb 1-1: GET_CAPABILITIES returned 0 [ 313.965629][ T6293] usbtmc 1-1:16.0: can't read capabilities [ 314.000857][T10152] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1271'. [ 314.017902][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 314.160944][ T6293] usb 1-1: USB disconnect, device number 41 [ 314.574577][ T6293] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 314.744254][ T6293] usb 1-1: device descriptor read/64, error -71 [ 315.024376][ T6293] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 315.204431][ T6293] usb 1-1: device descriptor read/64, error -71 [ 315.345104][ T6293] usb usb1-port1: attempt power cycle [ 315.503159][T10184] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1282'. [ 315.515197][T10184] i2c i2c-0: Invalid block write size 59 [ 315.732860][T10191] syzkaller0: entered promiscuous mode [ 315.742042][T10191] syzkaller0: entered allmulticast mode [ 315.774812][ T6293] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 315.816273][ T6293] usb 1-1: device descriptor read/8, error -71 [ 316.105271][ T6293] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 316.314842][T10213] loop0: detected capacity change from 0 to 736 [ 316.336338][ T6293] usb 1-1: device not accepting address 45, error -71 [ 316.361683][ T6293] usb usb1-port1: unable to enumerate USB device [ 316.842110][T10232] syzkaller0: entered promiscuous mode [ 316.851299][T10232] syzkaller0: entered allmulticast mode [ 317.184268][ T6293] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 317.259859][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.266399][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.350248][T10256] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1300'. [ 317.388636][T10256] i2c i2c-0: Invalid block write size 59 [ 317.394400][ T6293] usb 3-1: Using ep0 maxpacket: 8 [ 317.406880][ T6293] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 317.428139][ T6293] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 317.440868][ T6293] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 317.452581][ T6293] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.482478][ T6293] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.504522][ T6293] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 317.513789][ T6293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.742712][ T6293] usb 3-1: GET_CAPABILITIES returned 0 [ 317.758720][ T6293] usbtmc 3-1:16.0: can't read capabilities [ 317.953608][ T9] usb 3-1: USB disconnect, device number 44 [ 318.115046][ T5775] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 318.160141][T10275] loop4: detected capacity change from 0 to 512 [ 318.202794][T10275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.227351][T10277] syzkaller0: entered promiscuous mode [ 318.232866][T10277] syzkaller0: entered allmulticast mode [ 318.249023][T10275] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.325830][ T5775] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 318.337231][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 318.345488][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 318.355118][ T5775] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 318.364552][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 318.372776][ T5775] usb 1-1: Product: syz [ 318.377207][ T5775] usb 1-1: Manufacturer: syz [ 318.381993][ T5775] usb 1-1: SerialNumber: syz [ 318.391694][ T5775] usb 1-1: config 0 descriptor?? [ 318.402294][ T5775] usb 1-1: selecting invalid altsetting 0 [ 318.427564][ T8909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.494276][ T9] usb 3-1: device descriptor read/64, error -71 [ 318.717724][ T5775] usb 1-1: USB disconnect, device number 46 [ 318.797800][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 318.974259][ T9] usb 3-1: device descriptor read/64, error -71 [ 319.094826][ T9] usb usb3-port1: attempt power cycle [ 319.164247][ T5775] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 319.176526][T10300] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1316'. [ 319.188182][T10300] i2c i2c-0: Invalid block write size 59 [ 319.196269][T10300] lo: entered promiscuous mode [ 319.222205][T10300] tunl0: entered promiscuous mode [ 319.234500][T10300] gre0: entered promiscuous mode [ 319.304926][T10300] gretap0: entered promiscuous mode [ 319.314351][ T5775] usb 1-1: device descriptor read/64, error -71 [ 319.326337][T10300] erspan0: entered promiscuous mode [ 319.375396][T10300] ip_vti0: entered promiscuous mode [ 319.394583][T10300] ip6_vti0: entered promiscuous mode [ 319.420241][T10300] sit0: entered promiscuous mode [ 319.463274][T10300] ip6tnl0: entered promiscuous mode [ 319.489825][T10300] ip6gre0: entered promiscuous mode [ 319.504447][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 319.514756][T10300] syz_tun: entered promiscuous mode [ 319.545354][ T9] usb 3-1: device descriptor read/8, error -71 [ 319.552302][T10300] ip6gretap0: entered promiscuous mode [ 319.579522][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.587100][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.595381][T10300] bridge0: entered promiscuous mode [ 319.604257][ T5775] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 319.652813][T10300] vcan0: entered promiscuous mode [ 319.693014][T10300] bond0: entered promiscuous mode [ 319.701675][T10300] bond_slave_0: entered promiscuous mode [ 319.712062][T10300] bond_slave_1: entered promiscuous mode [ 319.772242][ T5775] usb 1-1: device descriptor read/64, error -71 [ 319.780129][T10300] team0: entered promiscuous mode [ 319.789080][T10300] team_slave_0: entered promiscuous mode [ 319.804471][T10300] team_slave_1: entered promiscuous mode [ 319.817003][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 319.864899][ T9] usb 3-1: device descriptor read/8, error -71 [ 319.865352][T10300] dummy0: entered promiscuous mode [ 319.897013][ T5775] usb usb1-port1: attempt power cycle [ 319.949444][T10300] nlmon0: entered promiscuous mode [ 319.961076][T10300] caif0: entered promiscuous mode [ 319.979749][T10300] batadv0: entered promiscuous mode [ 319.993257][ T9] usb usb3-port1: unable to enumerate USB device [ 320.019460][T10300] vxcan0: entered promiscuous mode [ 320.032793][T10300] vxcan1: entered promiscuous mode [ 320.050612][T10300] veth0: entered promiscuous mode [ 320.105351][T10300] veth1: entered promiscuous mode [ 320.171857][T10300] wg0: entered promiscuous mode [ 320.211368][T10300] wg1: entered promiscuous mode [ 320.244549][T10300] wg2: entered promiscuous mode [ 320.277478][T10300] veth0_to_bridge: entered promiscuous mode [ 320.325203][ T5775] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 320.365305][T10300] veth1_to_bridge: entered promiscuous mode [ 320.385571][ T5775] usb 1-1: device descriptor read/8, error -71 [ 320.440897][T10300] veth0_to_bond: entered promiscuous mode [ 320.485790][T10300] veth1_to_bond: entered promiscuous mode [ 320.519899][T10300] veth0_to_team: entered promiscuous mode [ 320.564819][T10300] veth1_to_team: entered promiscuous mode [ 320.607271][T10300] veth0_to_batadv: entered promiscuous mode [ 320.621831][T10300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.635161][T10300] batadv_slave_0: entered promiscuous mode [ 320.654289][ T5775] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 320.676764][T10300] veth1_to_batadv: entered promiscuous mode [ 320.691674][T10300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.704787][ T5775] usb 1-1: device descriptor read/8, error -71 [ 320.717620][T10300] batadv_slave_1: entered promiscuous mode [ 320.743976][T10300] xfrm0: entered promiscuous mode [ 320.772195][T10300] veth0_to_hsr: entered promiscuous mode [ 320.812675][T10300] veth1_to_hsr: entered promiscuous mode [ 320.834751][ T5775] usb usb1-port1: unable to enumerate USB device [ 320.887622][T10300] hsr0: entered promiscuous mode [ 320.928410][T10300] veth1_virt_wifi: entered promiscuous mode [ 320.962300][T10300] veth0_virt_wifi: entered promiscuous mode [ 320.992037][T10300] virt_wifi0: entered promiscuous mode [ 321.097771][T10300] vlan0: entered promiscuous mode [ 321.103010][T10300] vlan1: entered promiscuous mode [ 321.119239][T10300] macvlan0: entered promiscuous mode [ 321.174591][T10300] macvlan1: entered promiscuous mode [ 321.187257][T10300] ipvlan0: entered promiscuous mode [ 321.220874][T10300] ipvlan1: entered promiscuous mode [ 321.270734][T10300] macvtap0: entered promiscuous mode [ 321.298399][T10300] macsec0: entered promiscuous mode [ 321.324860][T10300] geneve0: entered promiscuous mode [ 321.351225][T10300] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.360315][T10300] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.369732][T10300] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.378705][T10300] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.388185][T10300] geneve1: entered promiscuous mode [ 321.413457][T10300] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 321.435764][T10300] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 321.457577][T10300] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 321.479593][T10300] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 321.503234][T10300] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 321.528675][T10300] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 322.513503][T10360] syzkaller0: entered promiscuous mode [ 322.520412][T10360] syzkaller0: entered allmulticast mode [ 322.946735][T10372] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1340'. [ 323.135406][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'. [ 323.238761][T10382] syzkaller0: entered promiscuous mode [ 323.244995][T10382] syzkaller0: entered allmulticast mode [ 323.802401][T10396] syzkaller0: entered promiscuous mode [ 323.822403][T10396] syzkaller0: entered allmulticast mode [ 323.930987][T10400] Bad se_dev_ci, not a valid se_dev_ci pointer: ffff888074e9a188 [ 324.074289][ T6190] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 324.150271][T10408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 324.308889][ T6190] usb 2-1: Using ep0 maxpacket: 8 [ 324.327239][ T6190] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 324.346003][ T6190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.382795][ T6190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.763059][ T6190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.813325][ T6190] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.879824][ T6190] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.079993][T10411] syzkaller0: entered promiscuous mode [ 325.086199][ T6190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.094499][T10411] syzkaller0: entered allmulticast mode [ 325.250024][T10418] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1356'. [ 325.262273][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 325.284462][T10418] bridge_slave_1: left allmulticast mode [ 325.290346][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.312868][ T6190] usb 2-1: GET_CAPABILITIES returned 0 [ 325.318807][ T6190] usbtmc 2-1:16.0: can't read capabilities [ 325.367091][T10418] bridge_slave_0: left allmulticast mode [ 325.373027][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.534367][ T5775] usb 2-1: USB disconnect, device number 56 [ 325.650798][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1363'. [ 326.697667][T10442] 0: reclassify loop, rule prio 0, protocol 03 [ 326.744237][ T5775] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 326.778515][T10445] syzkaller0: entered promiscuous mode [ 326.793337][T10445] syzkaller0: entered allmulticast mode [ 327.024518][T10455] loop1: detected capacity change from 0 to 512 [ 327.064025][T10455] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.1372: corrupted in-inode xattr: invalid ea_ino [ 327.077743][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 327.095594][T10460] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1374'. [ 327.105399][T10455] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.1372: couldn't read orphan inode 15 (err -117) [ 327.117941][T10460] netlink: 'syz.0.1374': attribute type 10 has an invalid length. [ 327.128849][T10455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.142074][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 327.266831][ T8170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.275965][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 327.290520][ T9] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 327.309935][ T9] usb 5-1: config 0 has no interface number 0 [ 327.334278][ T6187] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 327.345106][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 327.361176][ T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 327.400621][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 327.412201][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.430688][ T9] usb 5-1: Product: syz [ 327.438168][T10465] loop1: detected capacity change from 0 to 128 [ 327.448111][ T9] usb 5-1: Manufacturer: syz [ 327.452742][ T9] usb 5-1: SerialNumber: syz [ 327.465978][ T9] usb 5-1: config 0 descriptor?? [ 327.496859][T10449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.505174][T10449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.518988][T10465] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.545812][T10465] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 327.556847][ T6187] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 327.566539][ T6187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.576902][ T6187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 327.586316][ T6187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.600132][ T6187] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 327.619541][ T6187] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 327.637819][ T6187] usb 3-1: Product: syz [ 327.644427][ T6187] usb 3-1: Manufacturer: syz [ 327.668878][ T8170] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.686319][ T6187] cdc_wdm 3-1:1.0: skipping garbage [ 327.691562][ T6187] cdc_wdm 3-1:1.0: skipping garbage [ 327.724534][ T6187] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 327.730645][ T6187] cdc_wdm 3-1:1.0: Unknown control protocol [ 327.753360][T10449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.771337][T10449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 327.995212][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 328.164476][ T5775] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 328.236053][T10477] syzkaller0: entered promiscuous mode [ 328.241611][T10477] syzkaller0: entered allmulticast mode [ 328.344237][ T5775] usb 2-1: Using ep0 maxpacket: 8 [ 328.351323][ T5775] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 328.360123][ T5775] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.370107][ T5775] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.380424][ T5775] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 328.391004][ T5775] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.404783][ T5775] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 328.413928][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.608082][T10481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1383'. [ 328.621820][T10481] netlink: 'syz.0.1383': attribute type 10 has an invalid length. [ 328.631017][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 328.646217][ T5775] usb 2-1: GET_CAPABILITIES returned 0 [ 328.651775][ T5775] usbtmc 2-1:16.0: can't read capabilities [ 328.874721][ T5775] usb 2-1: USB disconnect, device number 58 [ 329.261246][T10491] loop0: detected capacity change from 0 to 512 [ 329.285522][T10491] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.1388: iget: bad i_size value: 38620345925642 [ 329.305934][T10491] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1388: couldn't read orphan inode 15 (err -117) [ 329.326087][T10491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.401814][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.793610][T10501] syzkaller0: entered promiscuous mode [ 329.799496][T10501] syzkaller0: entered allmulticast mode [ 329.918034][T10503] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1393'. [ 329.930040][T10503] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 329.945902][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 330.046609][ T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 330.071433][ T9] asix: probe of 5-1:0.34 failed with error -71 [ 330.105577][ T9] usb 5-1: USB disconnect, device number 7 [ 330.154622][ T6187] usb 3-1: USB disconnect, device number 49 [ 330.240293][T10511] loop2: detected capacity change from 0 to 512 [ 330.324870][T10511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.561589][ T8201] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.753099][T10523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1400'. [ 331.153029][T10531] syzkaller0: entered promiscuous mode [ 331.164311][T10531] syzkaller0: entered allmulticast mode [ 331.404457][T10535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1404'. [ 331.804503][ T6187] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 331.824826][T10547] syzkaller0: entered promiscuous mode [ 331.830337][T10547] syzkaller0: entered allmulticast mode [ 331.986320][ T6187] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 332.014249][ T6187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.031487][ T6187] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 332.041200][ T6187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.054957][T10552] tipc: Enabled bearer , priority 0 [ 332.072299][T10554] syzkaller0: entered promiscuous mode [ 332.082497][ T6187] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 332.084241][T10554] syzkaller0: entered allmulticast mode [ 332.103191][ T6187] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 332.111471][ T6187] usb 2-1: Product: syz [ 332.115985][ T6187] usb 2-1: Manufacturer: syz [ 332.136964][ T6187] cdc_wdm 2-1:1.0: skipping garbage [ 332.142218][ T6187] cdc_wdm 2-1:1.0: skipping garbage [ 332.169725][ T6187] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 332.194759][ T6187] cdc_wdm 2-1:1.0: Unknown control protocol [ 332.434270][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 332.625904][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 332.649203][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.679803][ T9] usb 1-1: config 0 has no interfaces? [ 332.699801][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 332.717988][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.734549][ T9] usb 1-1: Product: syz [ 332.743334][ T9] usb 1-1: Manufacturer: syz [ 332.754734][ T9] usb 1-1: SerialNumber: syz [ 332.770362][ T9] usb 1-1: config 0 descriptor?? [ 332.880646][T10572] syz_tun: entered allmulticast mode [ 332.887839][T10571] syz_tun: left allmulticast mode [ 332.991014][T10552] tipc: Resetting bearer [ 333.036558][ T9] usb 1-1: USB disconnect, device number 51 [ 333.053078][T10550] tipc: Resetting bearer [ 333.113902][T10550] tipc: Disabling bearer [ 333.141020][T10576] syzkaller0: entered promiscuous mode [ 333.146842][T10576] syzkaller0: entered allmulticast mode [ 333.159899][T10576] tipc: Enabled bearer , priority 0 [ 333.168912][T10575] tipc: Resetting bearer [ 333.209663][T10575] tipc: Disabling bearer [ 333.438848][T10579] syzkaller0: entered promiscuous mode [ 333.444733][T10579] syzkaller0: entered allmulticast mode [ 333.754863][T10589] lo: Caught tx_queue_len zero misconfig [ 333.780687][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'. [ 334.206917][ T28] audit: type=1326 audit(1785323636.359:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.249792][ T28] audit: type=1326 audit(1785323636.359:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.274924][ T28] audit: type=1326 audit(1785323636.389:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.307525][ T28] audit: type=1326 audit(1785323636.399:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.332180][ T28] audit: type=1326 audit(1785323636.399:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.368368][ T28] audit: type=1326 audit(1785323636.399:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.411446][ T28] audit: type=1326 audit(1785323636.399:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.450314][ T28] audit: type=1326 audit(1785323636.399:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.475387][ T28] audit: type=1326 audit(1785323636.399:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.2.1434" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe27519de99 code=0x7ffc0000 [ 334.576702][ T6293] usb 2-1: USB disconnect, device number 59 [ 334.702520][T10614] tipc: Enabled bearer , priority 0 [ 334.716672][T10614] syzkaller0: entered promiscuous mode [ 334.722550][T10614] syzkaller0: entered allmulticast mode [ 335.014443][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 335.224277][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 335.240131][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.258710][ T9] usb 3-1: config 0 has no interfaces? [ 335.270109][ T9] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 335.285285][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.296495][ T9] usb 3-1: Product: syz [ 335.300721][ T9] usb 3-1: Manufacturer: syz [ 335.311670][ T9] usb 3-1: SerialNumber: syz [ 335.323479][ T9] usb 3-1: config 0 descriptor?? [ 335.334301][ T6293] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 335.447410][T10638] netlink: 'syz.4.1450': attribute type 10 has an invalid length. [ 335.455679][T10638] team0: left promiscuous mode [ 335.463584][T10638] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.473209][T10638] team0: entered promiscuous mode [ 335.479822][T10638] bond0: (slave team0): Enslaving as an active interface with an up link [ 335.536773][ T6293] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.552817][ T6293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.558998][T10614] tipc: Resetting bearer [ 335.592227][ T6293] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.601475][ T9] usb 3-1: USB disconnect, device number 50 [ 335.611478][ T6293] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.638099][T10613] tipc: Resetting bearer [ 335.657204][ T6293] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.676717][ T6293] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.688267][T10613] tipc: Disabling bearer [ 335.695042][ T6293] usb 2-1: Product: syz [ 335.701969][ T6293] usb 2-1: Manufacturer: syz [ 335.721782][ T6293] cdc_wdm 2-1:1.0: skipping garbage [ 335.739782][ T6293] cdc_wdm 2-1:1.0: skipping garbage [ 335.755197][ T6293] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 335.771317][ T6293] cdc_wdm 2-1:1.0: Unknown control protocol [ 336.165193][T10664] dvmrp8: entered allmulticast mode [ 336.306664][T10668] [ 336.309059][T10668] ====================================================== [ 336.316110][T10668] WARNING: possible circular locking dependency detected [ 336.323179][T10668] syzkaller #0 Not tainted [ 336.327617][T10668] ------------------------------------------------------ [ 336.334670][T10668] syz.0.1460/10668 is trying to acquire lock: [ 336.340771][T10668] ffffffff8ddf6d10 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 336.350574][T10668] [ 336.350574][T10668] but task is already holding lock: [ 336.357964][T10668] ffff888073036ef0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 336.367673][T10668] [ 336.367673][T10668] which lock already depends on the new lock. [ 336.367673][T10668] [ 336.378099][T10668] [ 336.378099][T10668] the existing dependency chain (in reverse order) is: [ 336.387136][T10668] [ 336.387136][T10668] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 336.395847][T10668] down_write+0x97/0x200 [ 336.400651][T10668] configfs_depend_item_unlocked+0x157/0x430 [ 336.407189][T10668] usbg_make_tpg+0x1f7/0x580 [ 336.412345][T10668] target_fabric_make_tpg+0xa4/0x6d0 [ 336.418182][T10668] configfs_mkdir+0x515/0x9e0 [ 336.423392][T10668] vfs_mkdir+0x2a5/0x470 [ 336.428167][T10668] do_mkdirat+0x1dc/0x450 [ 336.433069][T10668] __x64_sys_mkdir+0x6e/0x80 [ 336.438196][T10668] do_syscall_64+0x55/0xb0 [ 336.443145][T10668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.449572][T10668] [ 336.449572][T10668] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 336.457230][T10668] __mutex_lock+0x135/0xc80 [ 336.462270][T10668] tcm_set_name+0x2a/0x90 [ 336.467143][T10668] function_make+0x199/0x350 [ 336.472267][T10668] configfs_mkdir+0x515/0x9e0 [ 336.477486][T10668] vfs_mkdir+0x2a5/0x470 [ 336.482267][T10668] do_mkdirat+0x1dc/0x450 [ 336.487135][T10668] __x64_sys_mkdir+0x6e/0x80 [ 336.492291][T10668] do_syscall_64+0x55/0xb0 [ 336.497247][T10668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.503680][T10668] [ 336.503680][T10668] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 336.511952][T10668] __lock_acquire+0x37ef/0x7d80 [ 336.517347][T10668] lock_acquire+0x19e/0x420 [ 336.522393][T10668] __mutex_lock+0x135/0xc80 [ 336.527434][T10668] configfs_rmdir+0x63c/0x980 [ 336.532648][T10668] vfs_rmdir+0x352/0x4b0 [ 336.537429][T10668] do_rmdir+0x29f/0x590 [ 336.542118][T10668] __x64_sys_rmdir+0x49/0x50 [ 336.547264][T10668] do_syscall_64+0x55/0xb0 [ 336.552222][T10668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.558653][T10668] [ 336.558653][T10668] other info that might help us debug this: [ 336.558653][T10668] [ 336.568903][T10668] Chain exists of: [ 336.568903][T10668] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 336.568903][T10668] [ 336.583650][T10668] Possible unsafe locking scenario: [ 336.583650][T10668] [ 336.591120][T10668] CPU0 CPU1 [ 336.596638][T10668] ---- ---- [ 336.602033][T10668] lock(&sb->s_type->i_mutex_key#23); [ 336.607537][T10668] lock(&opts->dep_lock); [ 336.614513][T10668] lock(&sb->s_type->i_mutex_key#23); [ 336.622524][T10668] lock(gadget_subsys.su_mutex); [ 336.627557][T10668] [ 336.627557][T10668] *** DEADLOCK *** [ 336.627557][T10668] [ 336.635715][T10668] 3 locks held by syz.0.1460/10668: [ 336.640927][T10668] #0: ffff888143288418 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 336.650217][T10668] #1: ffff88805d748160 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 336.661057][T10668] #2: ffff888073036ef0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 336.671218][T10668] [ 336.671218][T10668] stack backtrace: [ 336.677160][T10668] CPU: 1 PID: 10668 Comm: syz.0.1460 Not tainted syzkaller #0 [ 336.684643][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 336.694726][T10668] Call Trace: [ 336.698026][T10668] [ 336.700977][T10668] dump_stack_lvl+0x18c/0x250 [ 336.705684][T10668] ? load_image+0x420/0x420 [ 336.710214][T10668] ? show_regs_print_info+0x20/0x20 [ 336.715436][T10668] ? print_circular_bug+0x12b/0x1a0 [ 336.720667][T10668] check_noncircular+0x2fc/0x400 [ 336.725636][T10668] ? print_deadlock_bug+0x5d0/0x5d0 [ 336.730866][T10668] ? lockdep_lock+0xf5/0x230 [ 336.735496][T10668] ? _find_first_zero_bit+0xd6/0x100 [ 336.740814][T10668] __lock_acquire+0x37ef/0x7d80 [ 336.745714][T10668] ? verify_lock_unused+0x140/0x140 [ 336.750979][T10668] ? verify_lock_unused+0x140/0x140 [ 336.756192][T10668] lock_acquire+0x19e/0x420 [ 336.760714][T10668] ? configfs_rmdir+0x63c/0x980 [ 336.765578][T10668] ? __might_sleep+0xe0/0xe0 [ 336.770191][T10668] ? read_lock_is_recursive+0x20/0x20 [ 336.775582][T10668] __mutex_lock+0x135/0xc80 [ 336.780126][T10668] ? configfs_rmdir+0x63c/0x980 [ 336.785020][T10668] ? configfs_rmdir+0x63c/0x980 [ 336.789899][T10668] ? mutex_lock_nested+0x20/0x20 [ 336.794853][T10668] ? __lock_acquire+0x7d80/0x7d80 [ 336.799892][T10668] ? lockref_put_or_lock+0x72/0xb0 [ 336.805036][T10668] ? dput+0x3b/0x1e0 [ 336.808952][T10668] ? dput+0x3b/0x1e0 [ 336.812868][T10668] configfs_rmdir+0x63c/0x980 [ 336.817625][T10668] vfs_rmdir+0x352/0x4b0 [ 336.821886][T10668] do_rmdir+0x29f/0x590 [ 336.826052][T10668] ? __check_object_size+0x4fc/0xa40 [ 336.831362][T10668] ? d_delete_notify+0x150/0x150 [ 336.836316][T10668] ? getname_flags+0x20a/0x500 [ 336.841110][T10668] __x64_sys_rmdir+0x49/0x50 [ 336.845720][T10668] do_syscall_64+0x55/0xb0 [ 336.850157][T10668] ? clear_bhb_loop+0x40/0x90 [ 336.854848][T10668] ? clear_bhb_loop+0x40/0x90 [ 336.859565][T10668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.865479][T10668] RIP: 0033:0x7f135a79de99 [ 336.869914][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.889534][T10668] RSP: 002b:00007f135b62c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 336.897978][T10668] RAX: ffffffffffffffda RBX: 00007f135aa25fa0 RCX: 00007f135a79de99 [ 336.905960][T10668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000800 [ 336.913939][T10668] RBP: 00007f135a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 336.921935][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.929916][T10668] R13: 00007f135aa26038 R14: 00007f135aa25fa0 R15: 00007ffe3742ca08 [ 336.937905][T10668] [ 338.069887][ T6190] usb 2-1: USB disconnect, device number 60