last executing test programs: 13m12.720598462s ago: executing program 2 (id=1849): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000040)='7', 0x1) timer_create(0x0, 0x0, &(0x7f0000000300)) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) syz_usb_disconnect(r0) set_mempolicy_home_node(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 13m10.744087815s ago: executing program 2 (id=1865): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d93627", 0x4, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 13m10.628824341s ago: executing program 2 (id=1867): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 13m10.415745041s ago: executing program 2 (id=1868): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(r0, &(0x7f0000000040)='.\x00', 0x89901) 13m10.068469487s ago: executing program 2 (id=1869): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x10, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 13m9.164446169s ago: executing program 2 (id=1876): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 13m8.783535467s ago: executing program 32 (id=1876): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 9m50.344025349s ago: executing program 0 (id=2873): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000f80)=[{0x9, 0xbc01, 0x6f, &(0x7f0000000fc0)="2ade2b5536eef4e627779f314e50b69e36bb93a7fc2e31610c17cce52c1976b51af57f8fcbf81d785f264d95a3d296f53a8fbaaae13c33d60555361f0c3ca29e5b904b95fe3ff9b7e02a98703f0cbe68390a8356672cc9ca1d1ecb3ebd662670d41503a6769c8fd0570c2bc1129104"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m47.516900341s ago: executing program 0 (id=2885): signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x6) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x6f3) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) socket$netlink(0x10, 0x3, 0x14) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) memfd_create(&(0x7f0000000740)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdc\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`sOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\b\x00\x00\x00\x00\x00\x00\x00\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3a8bc000) 9m44.268045174s ago: executing program 0 (id=2896): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000100)={0x1c40aa80, 0x0, @ofdm}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000300)={0x0, {}, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0x1ab55000) read(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) 9m43.604670865s ago: executing program 0 (id=2897): syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x4c000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 9m42.634626611s ago: executing program 0 (id=2902): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, r0, 0x12084000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9m42.148665434s ago: executing program 0 (id=2904): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 9m41.772469371s ago: executing program 33 (id=2904): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 6.079030884s ago: executing program 1 (id=5603): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0) 5.710317251s ago: executing program 5 (id=5605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x3a, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x10000, 0x10000, 0x2, 0xffffffffffffffff, 0x8}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60044084) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 5.661659274s ago: executing program 1 (id=5606): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2d, 0x1001, 0xffffffffffffffff, 0x0) fanotify_mark(r3, 0x22, 0x40001017, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) 4.866021991s ago: executing program 3 (id=5609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x51}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.224157512s ago: executing program 1 (id=5610): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") open(&(0x7f0000000100)='./file1\x00', 0x1ad941, 0x176) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000008900)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 3.180805241s ago: executing program 3 (id=5612): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x26020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.817583207s ago: executing program 4 (id=5614): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x0) 2.588461588s ago: executing program 4 (id=5615): socket$inet(0xa, 0x800, 0x83) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ea", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 2.13970518s ago: executing program 4 (id=5616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) 2.001471236s ago: executing program 5 (id=5617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x2, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='E\x00\x00'], 0xfdef) 1.762281577s ago: executing program 1 (id=5618): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049']) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 1.617347134s ago: executing program 5 (id=5619): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) 1.454858491s ago: executing program 3 (id=5620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80, 0x51}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.406284064s ago: executing program 4 (id=5621): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x8043, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'aio_iiro_16\x00', [0x0, 0x0, 0xa17, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0x100000, 0x8, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) 1.374370865s ago: executing program 5 (id=5622): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x158}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0xfe, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) 1.079911689s ago: executing program 4 (id=5623): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x4) 1.079196289s ago: executing program 3 (id=5624): socket$inet(0xa, 0x800, 0x83) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ea", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 892.570728ms ago: executing program 4 (id=5625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x3a, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000240)={0x4, 0x37, 0x783, 0xfff, 0x2, "b850e43615b1b70500000000000400", 0x800, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x10000, 0x10000, 0x2, 0xffffffffffffffff, 0x8}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x60044084) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 771.909854ms ago: executing program 5 (id=5626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 709.047947ms ago: executing program 3 (id=5627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {0x2, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='E\x00\x00'], 0xfdef) 424.53899ms ago: executing program 5 (id=5628): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x26020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 388.344592ms ago: executing program 3 (id=5629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) 260.645108ms ago: executing program 1 (id=5630): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) 0s ago: executing program 1 (id=5631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendto$inet6(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="653a6d7967726f75702f6d796576656e742073636865642e73636865645f737769746368e80c4dee74f7cec9ec93624925b8e167b66d", 0x36) kernel console output (not intermixed with test programs): .5-1, WWAN/QMI device, 82:f1:b1:eb:16:3e [ 978.560196][ T28] usb 6-1: USB disconnect, device number 49 [ 978.566297][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 978.613026][ T28] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 978.740680][ T28] wwan wwan0: port wwan0qmi0 disconnected [ 978.899497][ T9772] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 978.936803][ T9772] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 979.185854][ T27] audit: type=1326 audit(1789886897.648:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.248879][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5018'. [ 979.263972][T21498] bond0: option min_links: invalid value (18446744072707910257) [ 979.316196][ T27] audit: type=1326 audit(1789886897.648:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.333817][T21498] bond0: option min_links: allowed values 0 - 2147483647 [ 979.404400][ T27] audit: type=1326 audit(1789886897.648:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.583432][ T27] audit: type=1326 audit(1789886897.648:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.702221][ T27] audit: type=1326 audit(1789886897.648:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.803362][ T27] audit: type=1326 audit(1789886897.648:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.939602][ T27] audit: type=1326 audit(1789886897.648:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 979.976489][ T27] audit: type=1326 audit(1789886897.648:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 980.008093][ T27] audit: type=1326 audit(1789886897.648:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 980.045986][ T27] audit: type=1326 audit(1789886897.648:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21497 comm="syz.4.5018" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 980.900101][T20104] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 981.104897][T20104] usb 4-1: unable to get BOS descriptor or descriptor too short [ 981.131831][T20104] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 981.173762][T20104] usb 4-1: config 12 has no interface number 0 [ 981.199824][T20104] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 981.199966][ T9772] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 981.247215][T20104] usb 4-1: config 12 interface 99 has no altsetting 0 [ 981.320462][T20104] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 981.352781][T20104] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.377159][T20104] usb 4-1: Product: syz [ 981.389872][T20104] usb 4-1: Manufacturer: syz [ 981.412486][T20104] usb 4-1: SerialNumber: syz [ 981.429781][ T9772] usb 5-1: Using ep0 maxpacket: 8 [ 981.441678][ T9772] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 981.467084][ T9772] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.507510][ T9772] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.553526][ T9772] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 981.579538][ T9772] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.600242][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 981.617606][ T9772] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 981.636979][ T9772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.801557][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 981.828183][ T5843] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 981.840176][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.848365][ T5843] usb 2-1: Product: syz [ 981.881305][ T5843] usb 2-1: Manufacturer: syz [ 981.885991][ T5843] usb 2-1: SerialNumber: syz [ 982.070377][ T28] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 982.101609][T20104] usb 4-1: no audio or video endpoints found [ 982.135304][T20104] usb 4-1: USB disconnect, device number 50 [ 982.137786][ T5843] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 982.173888][ T5843] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 982.199399][ T5843] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 982.222542][ T5843] usb 2-1: media controller created [ 982.260599][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 982.281395][ T28] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 982.305596][ T28] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 982.327133][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.349410][ T5843] zl10353_read_register: readreg error (reg=127, ret==-32) [ 982.466851][T21559] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 982.501526][T20104] usb 5-1: USB disconnect, device number 101 [ 982.579404][ T28] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 982.612334][ T28] wwan wwan0: port wwan0qmi0 attached [ 982.905479][ T5843] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 982.940038][ T5843] usb 2-1: USB disconnect, device number 2 [ 983.370745][T21570] netlink: 'syz.4.5032': attribute type 4 has an invalid length. [ 983.396857][T21570] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5032'. [ 983.574641][T21570] .`: renamed from bond0 (while UP) [ 983.760763][ C1] wdm_int_callback: 153 callbacks suppressed [ 983.760810][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.773684][ C1] wdm_int_callback: 153 callbacks suppressed [ 983.773705][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.786749][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.793499][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.800136][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.806883][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.815115][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.821872][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.828619][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.835359][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.842122][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.848876][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.855726][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.862478][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.868916][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.875666][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.882359][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.889094][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.895940][ C1] qmi_wwan 6-1:1.0: nonzero urb status received: -71 [ 983.902687][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - 0 bytes [ 983.947978][ T28] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 9e:37:de:4d:ae:59 [ 983.966668][ C1] qmi_wwan 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 983.976277][ T28] usb 6-1: USB disconnect, device number 50 [ 984.012241][ T28] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 984.084280][ T28] wwan wwan0: port wwan0qmi0 disconnected [ 984.742371][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 984.742387][ T27] audit: type=1326 audit(1789886903.208:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21589 comm="syz.1.5037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 984.831207][ T27] audit: type=1326 audit(1789886903.238:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21589 comm="syz.1.5037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 984.899848][ T27] audit: type=1326 audit(1789886903.238:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21589 comm="syz.1.5037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 984.980267][ T27] audit: type=1326 audit(1789886903.238:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21589 comm="syz.1.5037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 985.040019][ T27] audit: type=1326 audit(1789886903.238:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21589 comm="syz.1.5037" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 985.240581][ T5818] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 985.277263][T21605] fuse: Unknown parameter 'fd0x0000000000000003' [ 985.367682][T21606] fuse: Unknown parameter 'fd0x0000000000000003' [ 985.471485][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short [ 985.500313][ T5818] usb 5-1: config 12 has an invalid interface number: 99 but max is 0 [ 985.512694][ T5818] usb 5-1: config 12 has no interface number 0 [ 985.525186][ T5818] usb 5-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 985.553424][ T5818] usb 5-1: config 12 interface 99 has no altsetting 0 [ 985.593190][ T5818] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 985.633313][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.639278][T21610] netlink: 'syz.3.5043': attribute type 4 has an invalid length. [ 985.658843][T21610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5043'. [ 985.698310][ T5818] usb 5-1: Product: syz [ 985.729808][ T5818] usb 5-1: Manufacturer: syz [ 985.757144][ T5818] usb 5-1: SerialNumber: syz [ 985.817858][T21610] .`: renamed from bond0 (while UP) [ 986.419587][ T5818] usb 5-1: no audio or video endpoints found [ 986.458052][ T5818] usb 5-1: USB disconnect, device number 102 [ 986.637036][ T28] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 986.833001][ T28] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 986.865466][ T28] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 986.910173][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.008891][ T27] audit: type=1326 audit(1789886905.468:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21632 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 987.116584][ T27] audit: type=1326 audit(1789886905.498:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21632 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 987.189962][ T28] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 987.214730][ T28] wwan wwan0: port wwan0qmi0 attached [ 987.230553][ T27] audit: type=1326 audit(1789886905.508:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21632 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 987.320117][ T27] audit: type=1326 audit(1789886905.508:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21632 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 987.413538][ T27] audit: type=1326 audit(1789886905.508:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21632 comm="syz.1.5048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 987.713675][ T28] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 3a:cd:2f:2f:95:7b [ 987.786035][ T28] usb 6-1: USB disconnect, device number 51 [ 987.865068][ T28] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 988.031274][ T28] wwan wwan0: port wwan0qmi0 disconnected [ 988.109396][T21649] fuse: Unknown parameter 'fd0x0000000000000003' [ 988.252298][T21655] fuse: Unknown parameter 'fd0x0000000000000003' [ 988.413201][T21659] netlink: 'syz.3.5054': attribute type 4 has an invalid length. [ 988.485169][T21659] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5054'. [ 989.311206][T21685] can0: slcan on ttynull. [ 989.609905][ T5818] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 989.830932][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 989.852416][ T5818] usb 4-1: config 0 has no interfaces? [ 989.865655][ T5818] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 989.892077][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.926298][ T5818] usb 4-1: Product: syz [ 989.956371][ T5818] usb 4-1: Manufacturer: syz [ 989.962022][ T5818] usb 4-1: SerialNumber: syz [ 990.001282][ T5818] usb 4-1: config 0 descriptor?? [ 990.389044][T21688] loop4: detected capacity change from 0 to 32768 [ 990.411748][T21685] can0 (unregistered): slcan off ttynull. [ 990.435881][T20104] usb 4-1: USB disconnect, device number 51 [ 990.575704][T21688] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 990.913643][T21688] XFS (loop4): Ending clean mount [ 990.946469][T21688] XFS (loop4): Quotacheck needed: Please wait. [ 991.020193][ T9772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 991.065850][T21688] XFS (loop4): Quotacheck: Done. [ 991.176437][T21720] fuse: Bad value for 'fd' [ 991.222056][ T9772] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 991.262530][ T9772] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 991.336337][ T9772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.488290][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 991.488327][ T27] audit: type=1326 audit(1789886909.948:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.3.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 991.548648][ T27] audit: type=1326 audit(1789886909.948:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.3.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 991.625829][ T9772] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 991.642955][ T9772] wwan wwan0: port wwan0qmi0 attached [ 991.650081][ T27] audit: type=1326 audit(1789886909.988:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.3.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 991.758082][ T27] audit: type=1326 audit(1789886909.988:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.3.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 991.828056][ T27] audit: type=1326 audit(1789886909.988:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.3.5068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 991.979802][ T28] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 992.160239][ T28] usb 6-1: device descriptor read/64, error -71 [ 992.288402][T19482] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 993.003548][ T9772] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 02:9b:12:60:eb:87 [ 993.020176][ T9772] usb 2-1: USB disconnect, device number 3 [ 993.028102][ T9772] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 993.246758][ T9772] wwan wwan0: port wwan0qmi0 disconnected [ 993.274345][ T28] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 993.470074][ T28] usb 6-1: device descriptor read/64, error -71 [ 993.499212][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.505710][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.600187][ T28] usb usb6-port1: attempt power cycle [ 993.935568][T21750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 993.945903][T21750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.962625][T21750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 993.971862][T21750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.239817][ T28] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 994.281475][ T28] usb 6-1: device descriptor read/8, error -71 [ 994.589745][ T28] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 994.670285][ T28] usb 6-1: device descriptor read/8, error -71 [ 994.752766][T21761] fuse: Bad value for 'fd' [ 994.798174][ T27] audit: type=1326 audit(1789886913.258:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21766 comm="syz.5.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 994.804632][ T28] usb usb6-port1: unable to enumerate USB device [ 994.858253][ T27] audit: type=1326 audit(1789886913.288:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21766 comm="syz.5.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 994.967482][ T27] audit: type=1326 audit(1789886913.348:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21766 comm="syz.5.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 995.095315][ T27] audit: type=1326 audit(1789886913.348:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21766 comm="syz.5.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 995.186296][ T27] audit: type=1326 audit(1789886913.348:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21766 comm="syz.5.5078" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 996.504586][T21776] loop3: detected capacity change from 0 to 32768 [ 996.703230][T21777] loop1: detected capacity change from 0 to 40427 [ 996.732585][T21776] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 996.776240][T21777] F2FS-fs (loop1): invalid crc value [ 996.871292][T21777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 997.089385][T21776] XFS (loop3): Ending clean mount [ 997.153921][T21776] XFS (loop3): Quotacheck needed: Please wait. [ 997.224590][T21777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 997.314251][T21776] XFS (loop3): Quotacheck: Done. [ 997.435032][ T42] kworker/u4:2: attempt to access beyond end of device [ 997.435032][ T42] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 997.517345][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 998.180250][T21032] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 998.272673][T20962] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 998.339871][T21032] usb 5-1: device descriptor read/64, error -71 [ 998.653142][T21032] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 998.819834][T21032] usb 5-1: device descriptor read/64, error -71 [ 998.869788][ T27] audit: type=1326 audit(1789886917.328:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21824 comm="syz.5.5089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 998.941805][T21032] usb usb5-port1: attempt power cycle [ 998.970227][ T27] audit: type=1326 audit(1789886917.328:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21824 comm="syz.5.5089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 999.047084][ T27] audit: type=1326 audit(1789886917.328:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21824 comm="syz.5.5089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee999e159 code=0x7ffc0000 [ 999.199609][T21835] fuse: Bad value for 'group_id' [ 999.400106][T21032] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 999.400603][T19869] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 999.430697][T21032] usb 5-1: device descriptor read/8, error -71 [ 999.622771][T19869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 999.639330][T19869] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 999.648240][T19869] usb 4-1: config 12 has no interface number 0 [ 999.661672][T19869] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 999.686168][T19869] usb 4-1: config 12 interface 99 has no altsetting 0 [ 999.710372][T19869] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 999.731225][T19869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.739295][T19869] usb 4-1: Product: syz [ 999.746914][T19869] usb 4-1: Manufacturer: syz [ 999.755089][T19869] usb 4-1: SerialNumber: syz [ 999.770847][T21032] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 999.849507][T21032] usb 5-1: device descriptor read/8, error -71 [ 999.970695][T21032] usb usb5-port1: unable to enumerate USB device [ 1000.322426][T19869] usb 4-1: no audio or video endpoints found [ 1000.356688][T19869] usb 4-1: USB disconnect, device number 52 [ 1000.909857][ T27] audit: type=1326 audit(1789886919.368:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.5100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1000.984593][ T27] audit: type=1326 audit(1789886919.368:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.5100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1001.079904][ T27] audit: type=1326 audit(1789886919.408:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.5100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1001.176827][ T27] audit: type=1326 audit(1789886919.408:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21861 comm="syz.3.5100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1001.596999][T21876] nvmet: adding nsid 1 to subsystem testsubsys [ 1001.610067][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1001.702334][T21881] fuse: Bad value for 'group_id' [ 1001.823085][T21032] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e874fa20-29ad-41d5-9b00-e81a8d046565. [ 1001.856434][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1001.876256][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1001.894895][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1001.906578][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1001.933214][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1001.951547][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.972125][T21876] nvme nvme0: creating 2 I/O queues. [ 1001.989841][ T9] usb 5-1: Product: syz [ 1001.994741][ T9] usb 5-1: Manufacturer: syz [ 1002.008475][ T9] usb 5-1: SerialNumber: syz [ 1002.027100][T21876] nvme nvme0: new ctrl: "testsubsys" [ 1002.041627][ T9] usb 5-1: config 0 descriptor?? [ 1002.270388][ T9] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1002.477540][T21032] usb 5-1: USB disconnect, device number 107 [ 1002.490142][T19869] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1002.682582][T19869] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1002.694089][T19869] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 1002.710591][T19869] usb 4-1: config 12 has no interface number 0 [ 1002.720824][T19869] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 1002.740292][T19869] usb 4-1: config 12 interface 99 has no altsetting 0 [ 1002.761822][T19869] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1002.781758][ T9772] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1002.789432][T19869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.809743][T19869] usb 4-1: Product: syz [ 1002.814067][T19869] usb 4-1: Manufacturer: syz [ 1002.818697][T19869] usb 4-1: SerialNumber: syz [ 1002.940179][ T9772] usb 2-1: device descriptor read/64, error -71 [ 1003.193967][ T27] audit: type=1326 audit(1789886921.658:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21902 comm="syz.4.5111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1003.220444][ T9772] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1003.295737][ T27] audit: type=1326 audit(1789886921.658:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21902 comm="syz.4.5111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1003.357638][T19869] usb 4-1: no audio or video endpoints found [ 1003.378080][ T27] audit: type=1326 audit(1789886921.658:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21902 comm="syz.4.5111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1003.413380][ T9772] usb 2-1: device descriptor read/64, error -71 [ 1003.422617][T19869] usb 4-1: USB disconnect, device number 53 [ 1003.540223][ T9772] usb usb2-port1: attempt power cycle [ 1003.970129][ T9772] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1004.001538][ T9772] usb 2-1: device descriptor read/8, error -71 [ 1004.270112][ T9772] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1004.333981][ T9772] usb 2-1: device descriptor read/8, error -71 [ 1004.372453][T21923] fuse: Bad value for 'group_id' [ 1004.461223][ T9772] usb usb2-port1: unable to enumerate USB device [ 1005.276289][T21925] loop3: detected capacity change from 0 to 40427 [ 1005.352756][T21925] F2FS-fs (loop3): invalid crc value [ 1005.394941][T21929] loop5: detected capacity change from 0 to 32768 [ 1005.405233][T21925] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1005.506421][T21929] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1005.599545][T21925] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1005.738064][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 1005.738082][ T27] audit: type=1326 audit(1789886924.198:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21945 comm="syz.4.5120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1005.852033][T19533] kworker/u4:0: attempt to access beyond end of device [ 1005.852033][T19533] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1005.868086][ T27] audit: type=1326 audit(1789886924.198:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21945 comm="syz.4.5120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1005.940629][T19533] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1005.974318][ T27] audit: type=1326 audit(1789886924.198:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21945 comm="syz.4.5120" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1006.101436][T21929] XFS (loop5): Ending clean mount [ 1006.162211][T21929] XFS (loop5): Quotacheck needed: Please wait. [ 1006.264848][T21929] XFS (loop5): Quotacheck: Done. [ 1007.232944][ T27] audit: type=1326 audit(1789886925.698:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21975 comm="syz.1.5131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 1007.303845][ T27] audit: type=1326 audit(1789886925.728:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21975 comm="syz.1.5131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 1007.334643][T14634] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1007.391776][ T27] audit: type=1326 audit(1789886925.728:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21975 comm="syz.1.5131" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895f59e159 code=0x7ffc0000 [ 1008.288014][T21982] hub 8-0:1.0: USB hub found [ 1008.297806][T21982] hub 8-0:1.0: 1 port detected [ 1008.890856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1009.363737][T19869] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1009.560979][T19869] usb 5-1: device descriptor read/64, error -71 [ 1009.859909][T19869] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1010.059877][T19869] usb 5-1: device descriptor read/64, error -71 [ 1010.200284][T19869] usb usb5-port1: attempt power cycle [ 1010.231174][ T28] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1010.432259][ T28] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1010.469832][ T28] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1010.516415][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.808224][ T28] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 1010.859089][ T28] wwan wwan0: port wwan0qmi0 attached [ 1011.886188][ T28] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, da:d6:0c:36:71:9e [ 1011.944012][ T28] usb 6-1: USB disconnect, device number 56 [ 1011.953512][ T27] audit: type=1326 audit(1789886930.418:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.4.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1011.996559][ T28] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 1012.103019][ T27] audit: type=1326 audit(1789886930.418:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.4.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1012.210816][ T27] audit: type=1326 audit(1789886930.448:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.4.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1012.292370][ T28] wwan wwan0: port wwan0qmi0 disconnected [ 1012.309948][ T27] audit: type=1326 audit(1789886930.448:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.4.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1012.335776][ T27] audit: type=1326 audit(1789886930.448:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.4.5141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fa79e159 code=0x7ffc0000 [ 1013.942659][ T27] audit: type=1326 audit(1789886932.408:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22059 comm="syz.3.5152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1014.055382][ T27] audit: type=1326 audit(1789886932.408:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22059 comm="syz.3.5152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1014.153377][ T27] audit: type=1326 audit(1789886932.428:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22059 comm="syz.3.5152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1014.277093][ T27] audit: type=1326 audit(1789886932.428:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22059 comm="syz.3.5152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1014.313374][T22071] loop1: detected capacity change from 0 to 256 [ 1014.345370][ T27] audit: type=1326 audit(1789886932.428:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22059 comm="syz.3.5152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2ef9e159 code=0x7ffc0000 [ 1014.424048][T19953] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1014.449836][T22071] loop1: detected capacity change from 0 to 512 [ 1014.457583][T19953] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.488940][T19953] Buffer I/O error on dev loop1, logical block 0, async page read [ 1014.590753][T22071] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1014.650366][T22071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1014.673279][T22041] loop4: detected capacity change from 0 to 40427 [ 1014.720911][T22041] F2FS-fs (loop4): invalid crc value [ 1014.773323][T22041] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1014.791855][T22071] EXT4-fs (loop1): 1 truncate cleaned up [ 1014.890488][T22071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1015.221323][T22041] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1015.770813][ T49] kworker/u4:3: attempt to access beyond end of device [ 1015.770813][ T49] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1015.878002][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1015.949782][T19662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.350523][ T23] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1017.540121][ T23] usb 4-1: device descriptor read/64, error -71 [ 1017.830533][ T23] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1018.023070][ T23] usb 4-1: device descriptor read/64, error -71 [ 1018.161396][ T23] usb usb4-port1: attempt power cycle [ 1018.579835][ T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1018.639467][ T23] usb 4-1: device descriptor read/8, error -71 [ 1018.930492][T22160] zram0: detected capacity change from 0 to 65536 [ 1018.944846][ T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1019.123295][ T23] usb 4-1: device descriptor read/8, error -71 [ 1019.323171][ T23] usb usb4-port1: unable to enumerate USB device [ 1021.170627][ T5843] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1021.391330][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1021.422259][ T5843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1021.430635][ T5843] usb 4-1: can't read configurations, error -61 [ 1021.590084][ T5843] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1022.140424][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1022.326780][ T5843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1022.546410][ T5843] usb 4-1: can't read configurations, error -61 [ 1022.623599][ T5843] usb usb4-port1: attempt power cycle [ 1023.040129][ T5843] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1023.101182][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1023.122262][ T5843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1023.153664][ T5843] usb 4-1: can't read configurations, error -61 [ 1023.320175][ T5843] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1023.362797][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 1023.378153][ T5843] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1023.398029][ T5843] usb 4-1: can't read configurations, error -61 [ 1023.410777][ T5843] usb usb4-port1: unable to enumerate USB device [ 1023.610546][ T9772] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1023.817666][ T9772] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1023.864674][ T9772] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1023.892179][ T9772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.157948][ T9772] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 1024.167039][ T9772] wwan wwan0: port wwan0qmi0 attached [ 1024.375658][ T9772] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, e2:69:b4:10:12:9f [ 1024.390248][ T9772] usb 5-1: USB disconnect, device number 111 [ 1024.398455][ T9772] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 1024.590347][ T9772] wwan wwan0: port wwan0qmi0 disconnected [ 1025.161831][T22276] loop4: detected capacity change from 0 to 256 [ 1025.243754][T22276] loop4: detected capacity change from 0 to 512 [ 1025.262951][T22276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1025.320363][ T5843] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1025.352993][T22276] EXT4-fs (loop4): 1 truncate cleaned up [ 1025.387828][T22276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.719176][ T28] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1025.731291][ T5843] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.741766][ T5843] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1025.752853][ T5843] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1025.764695][ T5843] usb 2-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1025.778481][ T5843] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1025.812039][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.841152][T22271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1025.951339][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 1025.976351][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1026.018069][ T28] usb 4-1: can't read configurations, error -61 [ 1026.510078][ T5843] usbhid 2-1:2.0: can't add hid device: -71 [ 1026.540622][ T5843] usbhid: probe of 2-1:2.0 failed with error -71 [ 1026.580402][ T5843] usb 2-1: USB disconnect, device number 8 [ 1026.596132][ T28] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1026.663776][T19482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.843873][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 1026.856773][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1026.871353][T22285] fuse: Bad value for 'group_id' [ 1026.879885][ T28] usb 4-1: can't read configurations, error -61 [ 1026.894230][ T28] usb usb4-port1: attempt power cycle [ 1027.110345][ T5843] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1027.320123][ T28] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1027.329814][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1027.340291][ T5843] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.364454][ T5843] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.385342][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 1027.394436][ T5843] usb 2-1: config 2 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1027.412610][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1027.429323][ T28] usb 4-1: can't read configurations, error -61 [ 1027.442316][ T5843] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 1027.462598][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.483997][ T5843] ldusb 2-1:2.0: Interrupt out endpoint not found (using control endpoint instead) [ 1027.489514][T22286] loop4: detected capacity change from 0 to 32768 [ 1027.513790][ T5843] ldusb 2-1:2.0: LD USB Device #0 now attached to major 180 minor 0 [ 1027.610350][ T28] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1027.639034][T22286] [ 1027.639034][T22286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1027.639034][T22286] [ 1027.674202][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 1027.694962][ T9] usb 2-1: USB disconnect, device number 9 [ 1027.705711][ T9] ldusb 2-1:2.0: LD USB Device #0 now disconnected [ 1027.716501][ T28] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1027.760404][ T28] usb 4-1: can't read configurations, error -61 [ 1027.790494][ T28] usb usb4-port1: unable to enumerate USB device [ 1027.814190][T22286] [ 1027.814190][T22286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1027.814190][T22286] [ 1027.848425][T22286] [ 1027.848425][T22286] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1027.848425][T22286] [ 1027.926021][T19482] [ 1027.926021][T19482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1027.926021][T19482] [ 1027.949547][T19482] [ 1027.949547][T19482] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1027.949547][T19482] [ 1028.225114][T22293] loop5: detected capacity change from 0 to 8192 [ 1028.232663][T22293] ======================================================= [ 1028.232663][T22293] WARNING: The mand mount option has been deprecated and [ 1028.232663][T22293] and is ignored by this kernel. Remove the mand [ 1028.232663][T22293] option from the mount to silence this warning. [ 1028.232663][T22293] ======================================================= [ 1029.269978][T20104] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1029.372531][T21032] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1029.460238][T20104] usb 5-1: device descriptor read/64, error -71 [ 1029.573580][T21032] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1029.601478][T21032] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1029.622228][T21032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.740210][T20104] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1029.796702][T22322] fuse: Bad value for 'group_id' [ 1029.873281][T21032] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 1029.900436][T20104] usb 5-1: device descriptor read/64, error -71 [ 1029.933398][T21032] wwan wwan0: port wwan0qmi0 attached [ 1030.030376][T20104] usb usb5-port1: attempt power cycle [ 1030.154387][T21032] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, f2:56:22:c2:de:6f [ 1030.258796][T21032] usb 2-1: USB disconnect, device number 10 [ 1030.285895][T21032] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 1030.463628][T21032] wwan wwan0: port wwan0qmi0 disconnected [ 1030.469823][T20104] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1030.510857][T20104] usb 5-1: device descriptor read/8, error -71 [ 1030.780264][T20104] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1030.843680][T20104] usb 5-1: device descriptor read/8, error -71 [ 1030.900288][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1031.790096][T20104] usb usb5-port1: unable to enumerate USB device [ 1031.890881][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1031.925890][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1031.950055][ T9] usb 6-1: can't read configurations, error -61 [ 1032.130116][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1032.270518][T22370] fuse: Bad value for 'group_id' [ 1032.341829][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1032.380370][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1032.435928][ T9] usb 6-1: can't read configurations, error -61 [ 1032.486627][ T9] usb usb6-port1: attempt power cycle [ 1032.930399][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1032.980002][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1033.020438][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1033.028117][ T9] usb 6-1: can't read configurations, error -61 [ 1033.230076][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1033.271638][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1033.289562][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1033.330140][ T5819] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1033.343816][ T9] usb 6-1: can't read configurations, error -61 [ 1033.369451][ T9] usb usb6-port1: unable to enumerate USB device [ 1033.582161][ T5819] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1033.619989][ T5819] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1033.629375][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.695677][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5242'. [ 1033.718138][T22404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.957694][ T5819] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 1033.975714][T22404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.989156][ T5819] wwan wwan0: port wwan0qmi0 attached [ 1034.047293][T19869] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1034.177623][ T5819] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, a6:b8:fc:00:e5:7a [ 1034.211855][T19869] usb 2-1: device descriptor read/64, error -71 [ 1034.252028][ T5819] usb 5-1: USB disconnect, device number 116 [ 1034.268781][ T5819] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 1034.425901][ T5819] wwan wwan0: port wwan0qmi0 disconnected [ 1034.491552][T19869] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1034.671835][T19869] usb 2-1: device descriptor read/64, error -71 [ 1034.792382][T19869] usb usb2-port1: attempt power cycle [ 1035.365536][T19869] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1035.400530][T19869] usb 2-1: device descriptor read/8, error -71 [ 1036.331605][T19869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1036.400499][T19869] usb 2-1: device descriptor read/8, error -71 [ 1036.470017][T21032] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1036.737238][T21032] usb 6-1: Using ep0 maxpacket: 16 [ 1036.923560][T21032] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.134221][T21032] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1037.276610][T21032] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1037.312900][T19869] usb usb2-port1: unable to enumerate USB device [ 1037.361624][T21032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.404237][T22440] loop3: detected capacity change from 0 to 32768 [ 1037.410910][T21032] usb 6-1: Product: syz [ 1037.410934][T21032] usb 6-1: Manufacturer: syz [ 1037.410951][T21032] usb 6-1: SerialNumber: syz [ 1037.427303][T21032] usb 6-1: config 0 descriptor?? [ 1037.429386][T22468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1037.498553][T22440] [ 1037.498553][T22440] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1037.498553][T22440] [ 1037.569120][T22468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1037.597540][T22440] [ 1037.597540][T22440] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1037.597540][T22440] [ 1037.653383][T22440] [ 1037.653383][T22440] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1037.653383][T22440] [ 1037.685010][T22454] netlink: 'syz.5.5251': attribute type 4 has an invalid length. [ 1037.724814][T22454] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5251'. [ 1037.776357][ T5819] usb 6-1: USB disconnect, device number 61 [ 1037.830354][T20962] [ 1037.830354][T20962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1037.830354][T20962] [ 1037.860316][T20962] [ 1037.860316][T20962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1037.860316][T20962] [ 1038.528768][T22495] binder: 22494:22495 ioctl 80605414 200000000000 returned -22 [ 1038.598513][ T9] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1038.748182][T22496] binder: 22494:22496 ioctl c0206434 2000000002c0 returned -22 [ 1038.788164][T22496] binder: 22494:22496 ioctl 7a7 200000000040 returned -22 [ 1039.667389][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1039.690980][T22496] binder: 22494:22496 ioctl 7a0 200000000240 returned -22 [ 1039.721466][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1039.782228][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.119681][ C1] sched: RT throttling activated [ 1040.121516][ T9] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 1040.208377][ T9] wwan wwan0: port wwan0qmi0 attached [ 1040.473364][ T9] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 7a:61:f7:86:f2:a3 [ 1040.603109][ T9] usb 5-1: USB disconnect, device number 117 [ 1040.642303][T22508] loop3: detected capacity change from 0 to 256 [ 1040.674102][ T9] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 1040.726925][T22500] loop1: detected capacity change from 0 to 131072 [ 1040.737667][T22500] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 1040.744754][T22500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1040.763579][T22508] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1040.775561][T22500] F2FS-fs (loop1): invalid crc value [ 1040.781535][T22508] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1040.797661][T22500] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1040.854100][T22500] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 1040.861795][T22500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1040.888126][T22508] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 1040.933029][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 1040.952266][T22508] exFAT-fs (loop3): failed to load alloc-bitmap [ 1040.958888][T22508] exFAT-fs (loop3): failed to recognize exfat type [ 1041.108033][T19954] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1041.440068][ T28] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1042.073627][ T28] usb 6-1: device descriptor read/64, error -71 [ 1042.381616][ T28] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1042.550316][ T28] usb 6-1: device descriptor read/64, error -71 [ 1042.670323][ T28] usb usb6-port1: attempt power cycle [ 1043.099907][ T28] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1043.172632][ T28] usb 6-1: device descriptor read/8, error -71 [ 1043.460137][ T28] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1043.486122][T22539] binder: 22538:22539 ioctl 80605414 200000000000 returned -22 [ 1043.510928][ T28] usb 6-1: device descriptor read/8, error -71 [ 1043.550014][T22530] loop1: detected capacity change from 0 to 32768 [ 1043.570889][T22530] [ 1043.570889][T22530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.570889][T22530] [ 1043.591302][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1043.639976][ T28] usb usb6-port1: unable to enumerate USB device [ 1043.651301][T22540] binder: 22538:22540 ioctl c0206434 2000000002c0 returned -22 [ 1043.670352][T22540] binder: 22538:22540 ioctl 7a7 200000000040 returned -22 [ 1043.678429][T22530] [ 1043.678429][T22530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.678429][T22530] [ 1043.700616][T22540] binder: 22538:22540 ioctl 7a0 200000000240 returned -22 [ 1043.702576][T22530] [ 1043.702576][T22530] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.702576][T22530] [ 1043.792122][T19662] [ 1043.792122][T19662] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.792122][T19662] [ 1043.800798][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1043.813690][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.832792][T19662] [ 1043.832792][T19662] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1043.832792][T19662] [ 1043.853627][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1043.891550][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1043.910150][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.949736][ T9] usb 5-1: Product: syz [ 1043.953987][ T9] usb 5-1: Manufacturer: syz [ 1043.986220][ T9] usb 5-1: SerialNumber: syz [ 1044.009167][ T9] usb 5-1: config 0 descriptor?? [ 1044.268380][T22533] netlink: 'syz.4.5269': attribute type 4 has an invalid length. [ 1044.321659][T22533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5269'. [ 1044.364151][ T9] usb 5-1: USB disconnect, device number 118 [ 1045.204654][ T1145] tipc: Left network mode [ 1047.236305][T22576] binder: 22574:22576 ioctl 80605414 200000000000 returned -22 [ 1047.469839][ T5843] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1047.709852][ T5843] usb 2-1: device descriptor read/64, error -71 [ 1048.079218][T22580] binder: 22574:22580 ioctl c0206434 2000000002c0 returned -22 [ 1048.122996][ T5843] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1048.220585][T22584] fuse: Unknown parameter 'group_id00000000000000000000' [ 1048.270355][T22579] binder: 22574:22579 ioctl 7a7 200000000040 returned -22 [ 1048.300660][T22579] binder: 22574:22579 ioctl 7a0 200000000240 returned -22 [ 1048.320166][ T5843] usb 2-1: device descriptor read/64, error -71 [ 1048.451210][ T5843] usb usb2-port1: attempt power cycle [ 1048.900594][ T5843] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1048.941266][ T5843] usb 2-1: device descriptor read/8, error -71 [ 1049.847579][ T1145] gretap0 (unregistering): left allmulticast mode [ 1049.899778][ T5843] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1049.972666][ T5843] usb 2-1: device descriptor read/8, error -71 [ 1050.110269][ T5843] usb usb2-port1: unable to enumerate USB device [ 1050.152409][T14473] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1050.169285][T14473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1050.178855][T14473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1050.188560][T14473] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1050.196952][T14473] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1050.204774][T14473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1050.453758][T22606] loop1: detected capacity change from 0 to 64 [ 1051.013075][T22613] nvme_fabrics: missing parameter 'nqn=%s' [ 1051.873065][T22633] fuse: Unknown parameter 'group_id00000000000000000000' [ 1052.182156][ T1145] hsr_slave_0: left promiscuous mode [ 1052.231607][ T1145] hsr_slave_1: left promiscuous mode [ 1052.259769][ T28] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1052.269523][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.290380][T14473] Bluetooth: hci3: command tx timeout [ 1052.299378][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.432652][ T28] usb 5-1: device descriptor read/64, error -71 [ 1052.473600][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.518332][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.570654][ T1145] bridge_slave_1: left allmulticast mode [ 1052.576385][ T1145] bridge_slave_1: left promiscuous mode [ 1052.586947][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.596624][ T1145] bridge_slave_0: left allmulticast mode [ 1052.602413][ T1145] bridge_slave_0: left promiscuous mode [ 1052.609888][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.847633][ T28] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1053.101965][ T28] usb 5-1: device descriptor read/64, error -71 [ 1053.206446][ T1145] veth1_macvtap: left promiscuous mode [ 1053.227624][ T1145] veth0_macvtap: left promiscuous mode [ 1053.255699][ T1145] veth1_vlan: left promiscuous mode [ 1053.275877][ T1145] veth0_vlan: left promiscuous mode [ 1053.315807][ T28] usb usb5-port1: attempt power cycle [ 1053.760031][ T28] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1053.851558][ T28] usb 5-1: device descriptor read/8, error -71 [ 1054.149884][ T28] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1054.273312][ T28] usb 5-1: device descriptor read/8, error -71 [ 1054.445374][T14473] Bluetooth: hci3: command tx timeout [ 1054.455621][ T28] usb usb5-port1: unable to enumerate USB device [ 1054.658579][T22650] loop3: detected capacity change from 0 to 1024 [ 1054.677541][T22650] EXT4-fs: Ignoring removed bh option [ 1054.893177][T22650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.944100][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.953793][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.303458][T22656] nvme_fabrics: missing parameter 'nqn=%s' [ 1055.348074][T20962] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.626360][T22665] fuse: Unknown parameter 'group_id00000000000000000000' [ 1056.091388][T22680] fuse: Unknown parameter 'grou00000000000000000000' [ 1056.557081][T14473] Bluetooth: hci3: command tx timeout [ 1057.651346][ T5818] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1057.719558][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 1057.822631][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 1057.855376][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 1057.866541][ T5818] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1057.877248][ T5818] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1057.886020][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.907155][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.927854][ T5818] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1057.957936][ T5818] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1057.977826][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.990936][ T5818] usb 5-1: config 0 descriptor?? [ 1058.049123][ T1145] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.610496][T14473] Bluetooth: hci3: command tx timeout [ 1058.686610][ T1145] .` (unregistering): Released all slaves [ 1059.382744][T22600] chnl_net:caif_netlink_parms(): no params data found [ 1059.602012][T22703] nvme_fabrics: missing parameter 'nqn=%s' [ 1060.180000][T22600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.216106][T22600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.239392][T22600] bridge_slave_0: entered allmulticast mode [ 1060.275076][T22600] bridge_slave_0: entered promiscuous mode [ 1060.334347][T22718] fuse: Unknown parameter 'grou00000000000000000000' [ 1060.343213][T22600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.355232][ T1145] IPVS: stop unused estimator thread 0... [ 1060.392517][T22600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.474437][T22600] bridge_slave_1: entered allmulticast mode [ 1060.507608][ T5818] usb 5-1: USB disconnect, device number 123 [ 1060.559961][T22600] bridge_slave_1: entered promiscuous mode [ 1060.829765][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5315'. [ 1060.917994][T22600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.023962][T22600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.241148][T22600] team0: Port device team_slave_0 added [ 1061.282677][T22600] team0: Port device team_slave_1 added [ 1061.593959][ T1145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.665297][T22600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.692522][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.799823][T22600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.932565][ T1145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.982948][T22600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.001828][T22600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.069326][T22600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.195426][T22763] loop1: detected capacity change from 0 to 1024 [ 1062.213347][T22763] EXT4-fs: Ignoring removed bh option [ 1062.299968][ T9772] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1062.368899][T22767] fuse: Unknown parameter 'grou00000000000000000000' [ 1062.411178][T22763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.622531][ T9772] usb 5-1: Using ep0 maxpacket: 32 [ 1062.630375][ T9772] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1062.638784][ T9772] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1062.647541][ T9772] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.659507][ T9772] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1062.668854][ T9772] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1062.678433][ T9772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.690598][ T9772] usb 5-1: config 0 descriptor?? [ 1062.756935][ T1145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.890191][T19662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.921253][T22771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5325'. [ 1063.038677][ T1145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.107405][T22600] hsr_slave_0: entered promiscuous mode [ 1063.150636][T22600] hsr_slave_1: entered promiscuous mode [ 1063.186013][T22600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1063.197135][T22600] Cannot create hsr debugfs directory [ 1063.649182][T19869] nvmet: connect request for invalid subsystem test! [ 1063.671684][T22784] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "test" [ 1064.819583][T22822] fuse: Unknown parameter 'group_i00000000000000000000' [ 1065.339525][ T5818] usb 5-1: USB disconnect, device number 124 [ 1065.814344][T22836] loop4: detected capacity change from 0 to 1024 [ 1065.834988][T22836] EXT4-fs: Ignoring removed bh option [ 1065.990681][T22836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.293421][T19482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.633564][T21032] nvmet: connect request for invalid subsystem test! [ 1066.656043][T22848] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "test" [ 1066.784941][T22600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1066.815863][T22600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1066.956576][T22600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1067.027444][T22600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1067.159482][T22866] fuse: Unknown parameter 'group_i00000000000000000000' [ 1067.250430][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.490136][T21032] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1067.690930][T21032] usb 4-1: Using ep0 maxpacket: 32 [ 1067.742067][T21032] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1067.807053][T21032] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1067.857705][T21032] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.918701][T21032] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1067.928948][T21032] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1067.971447][T21032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.055505][T21032] usb 4-1: config 0 descriptor?? [ 1068.076211][ T1145] hsr_slave_0: left promiscuous mode [ 1068.114834][ T1145] hsr_slave_1: left promiscuous mode [ 1068.123716][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.132153][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.151773][ T1145] bridge_slave_1: left allmulticast mode [ 1068.160017][ T1145] bridge_slave_1: left promiscuous mode [ 1068.187324][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.230613][ T1145] bridge_slave_0: left allmulticast mode [ 1068.236367][ T1145] bridge_slave_0: left promiscuous mode [ 1068.254821][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.411039][ T1145] veth1_macvtap: left promiscuous mode [ 1068.419785][ T1145] veth0_macvtap: left promiscuous mode [ 1068.435905][ T1145] veth1_vlan: left promiscuous mode [ 1068.445979][ T1145] veth0_vlan: left promiscuous mode [ 1068.560179][ T5780] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1068.949294][ T1145] bond0 (unregistering): (slave veth3): Releasing active interface [ 1069.298633][ T5780] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1069.314497][ T5780] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1069.344786][ T5780] usb 5-1: can't read configurations, error -71 [ 1069.424001][ T1145] bond0 (unregistering): Released all slaves [ 1069.456960][ T1145] pim6reg (unregistering): left allmulticast mode [ 1070.216058][T21032] usb 4-1: USB disconnect, device number 66 [ 1070.451718][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 1070.578127][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 1070.668741][ T1145] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.811696][ T1145] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.466033][ T1145] .` (unregistering): Released all slaves [ 1071.726242][T22600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.807174][T22600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.838268][T21736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.845505][T21736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.878820][T21736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.886121][T21736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.049480][ T1145] IPVS: stop unused estimator thread 0... [ 1072.274022][T22600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.586302][T22600] veth0_vlan: entered promiscuous mode [ 1072.606019][T22600] veth1_vlan: entered promiscuous mode [ 1072.651402][T22600] veth0_macvtap: entered promiscuous mode [ 1072.665594][T22600] veth1_macvtap: entered promiscuous mode [ 1072.692644][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.703792][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.714744][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.727161][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.737753][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.757733][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.767704][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.778843][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.791534][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.802393][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.812509][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.823067][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.833310][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.844593][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.860450][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.875359][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.887728][T22600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.916562][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.927664][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.938145][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.948926][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.959609][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.973086][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.984413][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.997814][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.007832][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.023421][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.033430][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.044519][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.054846][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.065383][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.076023][T22600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.086992][T22600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.111634][T22600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.132174][T22600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.141749][T22600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.152332][T22600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.161770][T22600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.282940][T11024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.291719][T11024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.348453][T21736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.356593][T21736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.650273][T22919] loop4: detected capacity change from 0 to 1024 [ 1073.664901][T22919] EXT4-fs: Ignoring removed bh option [ 1074.029074][T22922] loop1: detected capacity change from 0 to 1024 [ 1074.394547][T22922] futex_wake_op: syz.1.5353 tries to shift op by -1; fix this program [ 1074.901099][T22919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.021906][ T5817] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1075.078250][T19482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.220529][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 1075.228535][ T5817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.240518][ T5817] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1075.256403][ T5817] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1075.266161][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.275302][ T5817] usb 6-1: Product: syz [ 1075.279618][ T5817] usb 6-1: Manufacturer: syz [ 1075.284503][ T5817] usb 6-1: SerialNumber: syz [ 1075.292954][ T5817] usb 6-1: config 0 descriptor?? [ 1075.508403][T22918] netlink: 'syz.5.5284': attribute type 4 has an invalid length. [ 1075.516953][T22918] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5284'. [ 1075.536594][T22918] .`: renamed from bond0 (while UP) [ 1075.579775][T19869] usb 6-1: USB disconnect, device number 66 [ 1076.307020][T22934] loop5: detected capacity change from 0 to 1024 [ 1076.320726][T22934] EXT4-fs: Ignoring removed bh option [ 1076.407463][T22934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.820355][T22600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.894830][ T9772] nvmet: connect request for invalid subsystem testsubs! [ 1076.911596][T22933] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubs" [ 1077.071122][T22945] fuse: Unknown parameter 'group_i00000000000000000000' [ 1077.820155][ T9772] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1078.030142][ T9772] usb 6-1: Using ep0 maxpacket: 16 [ 1078.037602][ T9772] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1078.069722][ T9772] usb 6-1: config 0 has no interface number 0 [ 1078.082252][ T9772] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1078.101248][T22956] loop1: detected capacity change from 0 to 32768 [ 1078.115796][ T9772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.150104][ T9772] usb 6-1: Product: syz [ 1078.154365][ T9772] usb 6-1: Manufacturer: syz [ 1078.159015][ T9772] usb 6-1: SerialNumber: syz [ 1078.167483][T22956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5358 (22956) [ 1078.228719][ T9772] usb 6-1: config 0 descriptor?? [ 1078.273808][ T9772] hub 6-1:0.132: bad descriptor, ignoring hub [ 1078.308426][ T9772] hub: probe of 6-1:0.132 failed with error -5 [ 1078.352840][T22956] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1078.379548][T22956] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1078.403803][T22956] BTRFS info (device loop1): force clearing of disk cache [ 1078.425001][T22956] BTRFS info (device loop1): enabling auto defrag [ 1078.458249][T22974] fuse: Unknown parameter 'group_id00000000000000000000' [ 1078.463515][T22956] BTRFS info (device loop1): max_inline at 0 [ 1078.493581][T22953] netlink: 'syz.5.5357': attribute type 4 has an invalid length. [ 1078.499824][T22956] BTRFS info (device loop1): enabling disk space caching [ 1078.508521][T22956] BTRFS info (device loop1): disk space caching is enabled [ 1078.527385][T22953] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5357'. [ 1078.710708][ T5817] usb 6-1: USB disconnect, device number 67 [ 1078.783870][T22992] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5367'. [ 1078.801423][T22956] BTRFS info (device loop1): enabling ssd optimizations [ 1078.873640][T22956] BTRFS info (device loop1): rebuilding free space tree [ 1078.934567][ T28] nvmet: connect request for invalid subsystem testsubs! [ 1078.948014][T22988] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubs" [ 1079.202415][T22956] BTRFS info (device loop1): disabling free space tree [ 1079.209503][T22956] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1079.269922][T22956] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1079.909113][ T2984] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 1080.055105][T23015] fuse: Unknown parameter 'group_id00000000000000000000' [ 1080.210274][ T9772] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1080.570636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 1081.389807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1082.181211][ T9772] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1082.221812][ T9772] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1082.256935][ T9772] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1082.281773][ T9772] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1082.299015][ T9772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.314291][T19662] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1082.344146][ T9772] usb 4-1: config 0 descriptor?? [ 1082.501704][ T28] nvmet: connect request for invalid subsystem testsubs! [ 1082.521378][T23026] nvme nvme1: Connect Invalid Data Parameter, subsysnqn "testsubs" [ 1082.816251][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.835666][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.850235][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.858106][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.865782][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.873947][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.881532][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.888936][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.896634][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.962760][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1082.979719][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.010447][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.017682][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.103167][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.131135][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.160927][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.184214][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1083.741886][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.043537][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.051117][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.060348][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.067556][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.075089][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.082892][ T9772] zeroplus 0003:0C12:0005.006C: unknown main item tag 0x0 [ 1084.094642][ T9772] zeroplus 0003:0C12:0005.006C: hidraw0: USB HID v0.10 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 1084.106173][ T9772] zeroplus 0003:0C12:0005.006C: no inputs found [ 1084.116492][ T9772] usb 4-1: USB disconnect, device number 67 [ 1084.417295][T23040] fido_id[23040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1084.465977][T23046] fuse: Unknown parameter 'group_id00000000000000000000' [ 1085.259775][ T5819] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1085.460885][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 1085.482119][ T5819] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1085.530525][ T5819] usb 5-1: config 0 has no interface number 0 [ 1085.553646][ T5819] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1085.580067][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.610368][ T5819] usb 5-1: Product: syz [ 1085.632094][ T5819] usb 5-1: Manufacturer: syz [ 1085.647074][ T5819] usb 5-1: SerialNumber: syz [ 1085.713271][ T5819] usb 5-1: config 0 descriptor?? [ 1085.720702][T23071] fuse: Bad value for 'fd' [ 1085.751335][ T5819] hub 5-1:0.132: bad descriptor, ignoring hub [ 1085.783082][ T5819] hub: probe of 5-1:0.132 failed with error -5 [ 1085.849303][T23064] loop5: detected capacity change from 0 to 32768 [ 1085.890374][T23064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5386 (23064) [ 1085.963489][T23064] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1085.976895][T23052] netlink: 'syz.4.5377': attribute type 4 has an invalid length. [ 1085.997998][T23064] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1086.006805][T23052] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5377'. [ 1086.070189][T23064] BTRFS info (device loop5): force clearing of disk cache [ 1086.077413][T23064] BTRFS info (device loop5): use zlib compression, level 3 [ 1086.089603][T23064] BTRFS info (device loop5): enabling ssd optimizations [ 1086.127086][T23064] BTRFS info (device loop5): using spread ssd allocation scheme [ 1086.142165][ T5819] usb 5-1: USB disconnect, device number 127 [ 1086.180028][T23064] BTRFS info (device loop5): using free space tree [ 1086.402526][T23064] BTRFS info (device loop5): auto enabling async discard [ 1086.470272][T23064] BTRFS info (device loop5): rebuilding free space tree [ 1086.533079][T23064] BTRFS info (device loop5): checking UUID tree [ 1087.010582][T23099] fuse: Bad value for 'fd' [ 1087.154463][ T27] audit: type=1800 audit(1789887005.618:641): pid=23095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5386" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1087.395060][T22600] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1087.978589][T23107] fuse: Bad value for 'user_id' [ 1088.079319][T23100] loop3: detected capacity change from 0 to 32768 [ 1088.140366][T23100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.5390 (23100) [ 1088.202852][T23100] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1088.240075][T23100] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1088.248817][T23100] BTRFS info (device loop3): force clearing of disk cache [ 1088.316009][T23100] BTRFS info (device loop3): enabling auto defrag [ 1088.351164][T23100] BTRFS info (device loop3): max_inline at 0 [ 1088.409752][T23100] BTRFS info (device loop3): enabling disk space caching [ 1088.433984][T23100] BTRFS info (device loop3): disk space caching is enabled [ 1088.613464][T23118] loop1: detected capacity change from 0 to 1024 [ 1088.679893][T23118] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 1088.696359][T23118] JBD2: no valid journal superblock found [ 1088.712869][T23100] BTRFS info (device loop3): enabling ssd optimizations [ 1088.782858][T23100] BTRFS info (device loop3): rebuilding free space tree [ 1088.798557][T23118] EXT4-fs (loop1): Could not load journal inode [ 1088.860915][T23100] BTRFS info (device loop3): disabling free space tree [ 1088.922916][T23100] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1088.983104][T23100] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1089.029751][T19953] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1089.472276][T21736] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 1089.934854][T20962] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1090.131248][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1090.329806][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 1090.347710][ T5818] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1090.456693][ T5818] usb 5-1: config 0 has no interface number 0 [ 1090.547464][ T5818] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1090.596628][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.650020][ T5818] usb 5-1: Product: syz [ 1090.706599][ T5818] usb 5-1: Manufacturer: syz [ 1090.748136][ T5818] usb 5-1: SerialNumber: syz [ 1090.795134][ T5818] usb 5-1: config 0 descriptor?? [ 1090.822722][ T5818] hub 5-1:0.132: bad descriptor, ignoring hub [ 1090.846614][ T5818] hub: probe of 5-1:0.132 failed with error -5 [ 1090.957560][T23145] fuse: Bad value for 'fd' [ 1091.240143][ T5818] usb 5-1: USB disconnect, device number 2 [ 1091.852902][T23155] fuse: Bad value for 'user_id' [ 1092.231762][T23149] loop3: detected capacity change from 0 to 32768 [ 1092.253428][T23149] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.5401 (23149) [ 1092.330196][T23149] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1092.342643][T19869] nvmet: creating nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e874fa20-29ad-41d5-9b00-e81a8d046565. [ 1092.373243][T23149] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1092.399262][T23159] nvme nvme1: creating 2 I/O queues. [ 1092.417220][T23149] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1092.468661][T23159] nvme nvme1: new ctrl: "testsubsys" [ 1092.488929][T23149] BTRFS info (device loop3): use zstd compression, level 3 [ 1092.561870][T23149] BTRFS info (device loop3): using free space tree [ 1092.731044][T23149] BTRFS info (device loop3): enabling ssd optimizations [ 1092.738379][T23149] BTRFS info (device loop3): auto enabling async discard [ 1092.811043][ T27] audit: type=1800 audit(1789887011.268:642): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5401" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1092.990116][T19869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1093.179901][T19869] usb 5-1: Using ep0 maxpacket: 32 [ 1093.200698][T19869] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1093.220123][T19869] usb 5-1: config 0 has no interface number 0 [ 1093.250050][T19869] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1093.277459][T19869] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1093.320840][T19869] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1093.341220][T19869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.363435][T19869] usb 5-1: Product: syz [ 1093.368228][T19869] usb 5-1: Manufacturer: syz [ 1093.389681][T19869] usb 5-1: SerialNumber: syz [ 1093.425658][T19869] usb 5-1: config 0 descriptor?? [ 1093.441467][T23182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1093.479129][T20962] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1093.847889][T23196] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5411'. [ 1094.070206][ T9772] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1094.332512][ T9772] usb 6-1: Using ep0 maxpacket: 16 [ 1094.341734][ T9772] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1094.363843][ T9772] usb 6-1: config 0 has no interface number 0 [ 1094.386413][ T9772] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1094.410377][T19869] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 1094.419021][ T9772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.445542][ T9772] usb 6-1: Product: syz [ 1094.456930][T19869] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 1094.476429][ T9772] usb 6-1: Manufacturer: syz [ 1094.481640][ T9772] usb 6-1: SerialNumber: syz [ 1094.504893][ T9772] usb 6-1: config 0 descriptor?? [ 1094.521331][ T9772] hub 6-1:0.132: bad descriptor, ignoring hub [ 1094.534337][ T9772] hub: probe of 6-1:0.132 failed with error -5 [ 1094.552044][ T9772] usbhid 6-1:0.132: couldn't find an input interrupt endpoint [ 1094.757962][T23192] netlink: 'syz.5.5412': attribute type 4 has an invalid length. [ 1094.770237][T23192] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5412'. [ 1094.960171][ T9772] usb 6-1: USB disconnect, device number 68 [ 1095.228744][T23209] fuse: Bad value for 'user_id' [ 1095.411232][T23214] fuse: Bad value for 'fd' [ 1095.788513][T23202] loop1: detected capacity change from 0 to 32768 [ 1095.804446][ T9772] usb 5-1: USB disconnect, device number 3 [ 1095.943326][T23202] (syz.1.5413,23202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1096.013261][T23202] (syz.1.5413,23202,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1096.249007][T23202] JBD2: Ignoring recovery information on journal [ 1096.632340][ T9772] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1096.711394][T23202] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1096.924060][T23233] fuse: Invalid rootmode [ 1098.490617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1099.236723][T19662] ocfs2: Unmounting device (7,1) on (node local) [ 1099.328830][T23251] fuse: Bad value for 'fd' [ 1099.902112][T19869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1100.110224][T19869] usb 5-1: Using ep0 maxpacket: 16 [ 1100.117779][T19869] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1100.135901][T19869] usb 5-1: config 0 has no interface number 0 [ 1100.173620][T19869] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1100.210062][T19869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.271997][T19869] usb 5-1: Product: syz [ 1100.290103][T19869] usb 5-1: Manufacturer: syz [ 1100.305397][T19869] usb 5-1: SerialNumber: syz [ 1100.413504][T19869] usb 5-1: config 0 descriptor?? [ 1100.443178][T19869] hub 5-1:0.132: bad descriptor, ignoring hub [ 1100.474677][T19869] hub: probe of 5-1:0.132 failed with error -5 [ 1100.503843][T19869] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1100.666958][T23254] netlink: 'syz.4.5425': attribute type 4 has an invalid length. [ 1100.717487][T23254] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5425'. [ 1101.106610][T19869] usb 5-1: USB disconnect, device number 4 [ 1101.951074][T23282] loop3: detected capacity change from 0 to 512 [ 1102.008823][T23282] EXT4-fs: Mount option(s) incompatible with ext2 [ 1102.098372][T23286] fuse: Invalid rootmode [ 1103.039571][T23291] fuse: Bad value for 'fd' [ 1103.345767][T23297] loop1: detected capacity change from 0 to 512 [ 1103.458799][T23297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.497862][T23297] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.127610][T23280] loop5: detected capacity change from 0 to 32768 [ 1104.782462][T19662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.107595][T23295] loop3: detected capacity change from 0 to 32768 [ 1106.200018][T23295] (syz.3.5437,23295,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1106.222607][T23295] (syz.3.5437,23295,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1106.311036][T23295] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1106.311560][T23295] (syz.3.5437,23295,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 1106.338753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1106.351785][T23321] loop5: detected capacity change from 0 to 128 [ 1106.400499][T23295] (syz.3.5437,23295,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 1106.406907][T23321] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1106.532651][T23323] fuse: Invalid rootmode [ 1106.650537][T23325] fuse: Bad value for 'fd' [ 1106.709807][ T5819] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1106.928996][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 1106.960837][ T5819] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1106.991431][ T5819] usb 2-1: config 0 has no interface number 0 [ 1107.020770][ T5819] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1107.031979][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.058986][ T5819] usb 2-1: Product: syz [ 1107.088991][ T5819] usb 2-1: Manufacturer: syz [ 1107.148982][ T5819] usb 2-1: SerialNumber: syz [ 1107.201100][ T5819] usb 2-1: config 0 descriptor?? [ 1107.261003][ T5819] hub 2-1:0.132: bad descriptor, ignoring hub [ 1107.319136][ T5819] hub: probe of 2-1:0.132 failed with error -5 [ 1107.417601][T23316] netlink: 'syz.1.5442': attribute type 4 has an invalid length. [ 1107.432682][ T5819] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1107.469738][T23316] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5442'. [ 1107.740973][ T28] usb 2-1: USB disconnect, device number 19 [ 1110.081939][T23353] fuse: Bad value for 'fd' [ 1111.342699][T23365] fuse: Bad value for 'rootmode' [ 1111.355662][T23351] loop5: detected capacity change from 0 to 32768 [ 1111.414169][T23351] (syz.5.5454,23351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1111.480544][T23351] (syz.5.5454,23351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1111.612290][T23351] JBD2: Ignoring recovery information on journal [ 1113.487499][T23351] JBD2: journal reset failed [ 1113.503952][T23351] (syz.5.5454,23351,1):ocfs2_journal_load:1168 ERROR: Failed to load journal! [ 1113.561056][T23351] (syz.5.5454,23351,0):ocfs2_check_volume:2430 ERROR: ocfs2 journal load failed! -4 [ 1113.852598][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1114.069966][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1114.083338][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1114.100516][ T9] usb 2-1: config 0 has no interface number 0 [ 1114.122361][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1114.139983][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.148110][ T9] usb 2-1: Product: syz [ 1114.170611][ T9] usb 2-1: Manufacturer: syz [ 1114.175336][ T9] usb 2-1: SerialNumber: syz [ 1114.197852][ T9] usb 2-1: config 0 descriptor?? [ 1114.214099][ T9] hub 2-1:0.132: bad descriptor, ignoring hub [ 1114.240093][ T9] hub: probe of 2-1:0.132 failed with error -5 [ 1114.248499][ T9] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1114.420284][T23374] netlink: 'syz.1.5461': attribute type 4 has an invalid length. [ 1114.439956][T23374] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5461'. [ 1114.622183][T21032] usb 2-1: USB disconnect, device number 20 [ 1114.734654][T23389] fuse: Bad value for 'fd' [ 1115.317430][ T28] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1115.335808][T23387] loop3: detected capacity change from 0 to 32768 [ 1115.520123][ T28] usb 6-1: Using ep0 maxpacket: 8 [ 1116.535818][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.548557][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.597794][ T28] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.608883][ T28] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1116.619740][ T28] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1116.631611][ T28] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1116.643457][ T28] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1116.652770][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.667442][ T28] hub 6-1:1.0: bad descriptor, ignoring hub [ 1116.675642][ T28] hub: probe of 6-1:1.0 failed with error -5 [ 1116.682456][ T28] cdc_wdm 6-1:1.0: skipping garbage [ 1116.687922][ T28] cdc_wdm 6-1:1.0: skipping garbage [ 1116.695617][ T28] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1116.701899][ T28] cdc_wdm 6-1:1.0: Unknown control protocol [ 1117.213423][T23415] fuse: Bad value for 'rootmode' [ 1117.512119][T23419] fuse: Bad value for 'fd' [ 1118.150129][ T5843] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1118.390047][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 1118.404392][ T28] usb 6-1: USB disconnect, device number 69 [ 1118.449221][ T5843] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1118.510855][ T5843] usb 5-1: config 0 has no interface number 0 [ 1118.549305][ T5843] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1118.591252][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.599423][ T5843] usb 5-1: Product: syz [ 1118.641923][ T5843] usb 5-1: Manufacturer: syz [ 1118.646617][ T5843] usb 5-1: SerialNumber: syz [ 1118.663871][ T5843] usb 5-1: config 0 descriptor?? [ 1118.698724][ T5843] hub 5-1:0.132: bad descriptor, ignoring hub [ 1118.728523][ T5843] hub: probe of 5-1:0.132 failed with error -5 [ 1118.747326][ T5843] usbhid 5-1:0.132: couldn't find an input interrupt endpoint [ 1118.896668][T23421] netlink: 'syz.4.5476': attribute type 4 has an invalid length. [ 1118.904843][T23421] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1119.050750][T21032] usb 5-1: USB disconnect, device number 5 [ 1119.132203][T23433] Cannot find add_set index 0 as target [ 1119.215889][ T5780] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1119.501584][ T5780] usb 6-1: Using ep0 maxpacket: 32 [ 1119.538071][ T5780] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1119.571492][ T5780] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1119.629385][ T5780] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1119.700651][ T5780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1119.748077][ T5780] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1119.771024][ T5780] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1119.849182][ T5780] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1119.878264][ T5780] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1119.897762][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.939088][ T5780] usb 6-1: config 0 descriptor?? [ 1120.197638][T23446] fuse: Invalid rootmode [ 1120.364285][T23450] fuse: Bad value for 'rootmode' [ 1122.018502][ T5780] usb 6-1: USB disconnect, device number 70 [ 1122.479979][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1122.575216][T23472] fuse: Invalid rootmode [ 1122.660001][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1122.673293][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1122.688416][ T9] usb 2-1: config 0 has no interface number 0 [ 1122.718163][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1122.738090][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.796112][ T9] usb 2-1: Product: syz [ 1122.810245][ T9] usb 2-1: Manufacturer: syz [ 1122.820263][ T9] usb 2-1: SerialNumber: syz [ 1122.842557][ T9] usb 2-1: config 0 descriptor?? [ 1122.852075][ T9] hub 2-1:0.132: bad descriptor, ignoring hub [ 1122.858341][ T9] hub: probe of 2-1:0.132 failed with error -5 [ 1122.948269][ T9] usbhid 2-1:0.132: couldn't find an input interrupt endpoint [ 1123.060487][T23462] netlink: 'syz.1.5490': attribute type 4 has an invalid length. [ 1123.077299][T23462] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1123.230053][ T5843] usb 2-1: USB disconnect, device number 21 [ 1124.909779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 1125.800649][T23490] fuse: Unknown parameter 'use00000000000000000000' [ 1126.262229][T23498] fuse: Invalid rootmode [ 1127.369957][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1127.580024][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1127.598135][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1127.625998][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1127.645833][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1127.667332][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1127.688501][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1127.716083][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1127.757272][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1127.794832][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1127.829533][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.861181][ T9] usb 6-1: config 0 descriptor?? [ 1129.210589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 1131.177413][T20104] usb 6-1: USB disconnect, device number 71 [ 1131.265906][T23537] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1131.691970][ T5780] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1131.910311][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 1131.927184][ T5780] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1131.954212][ T5780] usb 4-1: config 0 has no interface number 0 [ 1131.966843][T23546] fuse: Unknown parameter 'use00000000000000000000' [ 1131.998277][ T5780] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1132.022569][T23545] fuse: Bad value for 'rootmode' [ 1132.030319][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.061907][ T5780] usb 4-1: Product: syz [ 1132.076404][ T5780] usb 4-1: Manufacturer: syz [ 1132.101251][ T5780] usb 4-1: SerialNumber: syz [ 1132.131595][ T5780] usb 4-1: config 0 descriptor?? [ 1132.149019][ T5780] hub 4-1:0.132: bad descriptor, ignoring hub [ 1132.161914][ T5780] hub: probe of 4-1:0.132 failed with error -5 [ 1132.211588][ T5780] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input93 [ 1133.630214][ T5843] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1134.000045][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1134.008566][ T5843] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1134.026343][ T5843] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1134.097470][ T5843] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1134.106662][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1134.117860][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1134.358024][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1134.560401][ T5843] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1134.693220][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1134.752628][ T5843] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1134.772395][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.911730][ T5843] usb 2-1: config 0 descriptor?? [ 1135.020543][T23576] fuse: Bad value for 'rootmode' [ 1135.382509][ T5843] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1135.701165][T23588] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1136.129212][ T9] usb 2-1: USB disconnect, device number 22 [ 1136.188827][ T9] usblp0: removed [ 1136.265953][T23591] fuse: Unknown parameter 'use00000000000000000000' [ 1136.830411][T21032] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1137.043193][T21032] usb 2-1: Using ep0 maxpacket: 16 [ 1137.053138][T21032] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1137.072763][T21032] usb 2-1: config 0 has no interface number 0 [ 1137.108441][T21032] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1137.138688][T21032] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.169244][T21032] usb 2-1: Product: syz [ 1137.218414][T21032] usb 2-1: Manufacturer: syz [ 1137.234828][T21032] usb 2-1: SerialNumber: syz [ 1137.253810][T21032] usb 2-1: config 0 descriptor?? [ 1137.276642][T21032] hub 2-1:0.132: bad descriptor, ignoring hub [ 1137.289857][T21032] hub: probe of 2-1:0.132 failed with error -5 [ 1137.305520][ T5780] usb 4-1: USB disconnect, device number 68 [ 1137.318424][T21032] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input94 [ 1137.685803][T23613] fuse: Bad value for 'rootmode' [ 1137.780618][T21032] usb 2-1: USB disconnect, device number 23 [ 1138.900580][T21032] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1139.090923][T21032] usb 4-1: Using ep0 maxpacket: 32 [ 1139.105769][T21032] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1139.132491][T21032] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1139.173988][T21032] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1139.196038][T21032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1139.216264][T23634] fuse: Unknown parameter 'use00000000000000000000' [ 1139.223486][T21032] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1139.314193][T21032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1139.548456][T21032] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1139.789780][T21032] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1139.852628][T21032] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1139.915903][T21032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.012707][T21032] usb 4-1: config 0 descriptor?? [ 1140.257532][T21032] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1140.478433][T23653] loop4: detected capacity change from 0 to 2048 [ 1140.525769][T23653] loop4: p2 p3 < > p4 < p5 > [ 1140.531780][T23653] loop4: partition table partially beyond EOD, truncated [ 1140.544793][T23653] loop4: p3 start 4225 is beyond EOD, truncated [ 1140.577445][T23655] binder: 23654:23655 ioctl 80605414 200000000000 returned -22 [ 1140.610664][T21032] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1140.799736][T21032] usb 6-1: Using ep0 maxpacket: 16 [ 1140.837947][T23656] binder: 23654:23656 ioctl c0206434 2000000002c0 returned -22 [ 1140.846269][T21032] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1140.864972][T21032] usb 6-1: config 0 has no interface number 0 [ 1140.871834][ T5818] usb 4-1: USB disconnect, device number 69 [ 1140.890737][T23656] binder: 23654:23656 ioctl 7a7 200000000040 returned -22 [ 1140.907116][T21032] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1140.919339][ T5818] usblp0: removed [ 1140.931379][T23656] binder: 23654:23656 ioctl 7a0 200000000240 returned -22 [ 1140.938626][T21032] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.964182][T21032] usb 6-1: Product: syz [ 1140.982115][T21032] usb 6-1: Manufacturer: syz [ 1140.998156][T21032] usb 6-1: SerialNumber: syz [ 1141.017229][T21032] usb 6-1: config 0 descriptor?? [ 1141.032365][T21032] hub 6-1:0.132: bad descriptor, ignoring hub [ 1141.038531][T21032] hub: probe of 6-1:0.132 failed with error -5 [ 1141.064133][T21032] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input95 [ 1141.303498][T23662] fuse: Unknown parameter 'use00000000000000000000' [ 1141.651425][T21032] usb 6-1: USB disconnect, device number 72 [ 1141.852909][T23664] loop3: detected capacity change from 0 to 32768 [ 1141.916547][T23664] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1141.956148][T23664] XFS (loop3): Ending clean mount [ 1141.989177][T23664] XFS (loop3): Quotacheck needed: Please wait. [ 1142.136441][T23664] XFS (loop3): Quotacheck: Done. [ 1142.881725][ T27] audit: type=1800 audit(1789887061.168:643): pid=23689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5556" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0 [ 1143.153027][T20962] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1143.182490][ T5780] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1143.455156][ T5780] usb 2-1: Using ep0 maxpacket: 32 [ 1143.686324][ T5780] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1143.763715][ T5780] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1143.839556][ T5780] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1143.870060][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1143.966882][ T5780] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1144.034990][ T5780] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1144.097930][ T5780] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1144.173807][ T5780] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1144.235005][ T5780] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1144.268599][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.297870][ T5780] usb 2-1: config 0 descriptor?? [ 1144.331718][T23699] fuse: Unknown parameter 'use00000000000000000000' [ 1145.297852][ T5780] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1145.827835][ T5780] usb 2-1: USB disconnect, device number 24 [ 1145.864192][ T5780] usblp0: removed [ 1145.912063][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1146.236770][T23730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1146.270246][T23727] loop1: detected capacity change from 0 to 32768 [ 1146.315553][T23727] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1146.380482][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1146.395481][ T23] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1146.404845][ T23] usb 5-1: config 0 has no interface number 0 [ 1146.420624][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1146.462887][T23727] XFS (loop1): Ending clean mount [ 1146.477341][T23727] XFS (loop1): Quotacheck needed: Please wait. [ 1146.495927][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.537836][ T23] usb 5-1: Product: syz [ 1146.546473][ T23] usb 5-1: Manufacturer: syz [ 1146.552259][ T23] usb 5-1: SerialNumber: syz [ 1146.586003][ T23] usb 5-1: config 0 descriptor?? [ 1146.593270][T23740] fuse: Unknown parameter 'user_i00000000000000000000' [ 1146.607693][ T23] hub 5-1:0.132: bad descriptor, ignoring hub [ 1146.624293][T23727] XFS (loop1): Quotacheck: Done. [ 1146.645212][ T23] hub: probe of 5-1:0.132 failed with error -5 [ 1146.885351][ T23] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input96 [ 1147.194753][ T27] audit: type=1800 audit(1789887065.558:644): pid=23746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5574" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0 [ 1147.650410][ T23] usb 5-1: USB disconnect, device number 6 [ 1147.659108][T19662] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1148.389740][ T28] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1148.571700][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1148.589892][ T28] usb 6-1: Using ep0 maxpacket: 32 [ 1148.600612][ T28] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1148.610656][ T28] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1148.629889][ T28] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1148.638950][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1148.669039][ T28] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1148.684358][ T28] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1148.719431][T23772] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1148.719949][ T28] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1148.749694][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.774445][T23771] null_blk: disk nullb1 created [ 1148.781469][ T28] usb 6-1: config 0 descriptor?? [ 1148.811573][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1148.830277][ T23] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1148.839470][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.874423][ T5819] nvmet: creating nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e874fa20-29ad-41d5-9b00-e81a8d046565. [ 1148.903352][T23772] nvme nvme2: creating 2 I/O queues. [ 1148.920242][T23772] nvme nvme2: new ctrl: "testsubsys" [ 1149.004474][ T28] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1149.127496][ T23] qmi_wwan 2-1:1.0: cdc-wdm1: USB WDM device [ 1149.146475][ T23] wwan wwan0: port wwan0qmi0 attached [ 1149.635819][ C0] usblp0: nonzero read bulk status received: -71 [ 1149.647701][ T5819] usb 6-1: USB disconnect, device number 73 [ 1149.811773][T23783] fuse: Unknown parameter 'user_i00000000000000000000' [ 1150.274016][T23766] usblp0: removed [ 1150.346697][ T23] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 76:8a:76:e6:9f:a2 [ 1150.386462][ T23] usb 2-1: USB disconnect, device number 25 [ 1150.405252][ T23] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 1150.522745][ T23] wwan wwan0: port wwan0qmi0 disconnected [ 1150.579978][ T9772] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1150.800030][ T9772] usb 4-1: Using ep0 maxpacket: 16 [ 1150.811334][ T9772] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1150.831063][ T9772] usb 4-1: config 0 has no interface number 0 [ 1150.846928][ T9772] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1150.874661][ T9772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.889235][ T9772] usb 4-1: Product: syz [ 1150.896720][ T9772] usb 4-1: Manufacturer: syz [ 1150.902150][ T9772] usb 4-1: SerialNumber: syz [ 1150.926471][ T9772] usb 4-1: config 0 descriptor?? [ 1150.940566][ T9772] hub 4-1:0.132: bad descriptor, ignoring hub [ 1150.947858][ T9772] hub: probe of 4-1:0.132 failed with error -5 [ 1150.985772][ T9772] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input97 [ 1152.379936][ T5818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1152.570143][ T9772] usb 4-1: USB disconnect, device number 70 [ 1152.610121][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 1152.632759][ T5818] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1152.670520][ T5818] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1152.676917][T23830] loop1: detected capacity change from 0 to 512 [ 1152.679188][ T5818] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1152.679243][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1152.749167][ T5818] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1152.793940][T23830] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1152.805480][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1152.834476][T23830] EXT4-fs (loop1): Remounting filesystem read-only [ 1152.849443][T23830] EXT4-fs (loop1): 1 truncate cleaned up [ 1152.850976][T23836] loop5: detected capacity change from 0 to 256 [ 1152.861641][T23830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1152.891952][ T5818] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1152.902862][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.920284][ T5818] usb 5-1: config 0 descriptor?? [ 1153.185522][ T5818] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1153.203338][T19662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.855982][ T9772] usb 5-1: USB disconnect, device number 7 [ 1153.908394][ T9772] usblp0: removed [ 1154.365852][T23860] loop1: detected capacity change from 0 to 2048 [ 1154.461182][T23860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1155.478026][T20104] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1156.410345][T20104] usb 6-1: Using ep0 maxpacket: 16 [ 1156.463982][T20104] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1156.493154][T20104] usb 6-1: config 0 has no interface number 0 [ 1156.573659][T20104] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1156.620298][T20104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.655687][T20104] usb 6-1: Product: syz [ 1156.681547][T20104] usb 6-1: Manufacturer: syz [ 1156.693592][T20104] usb 6-1: SerialNumber: syz [ 1156.722063][T20104] usb 6-1: config 0 descriptor?? [ 1156.738315][T20104] hub 6-1:0.132: bad descriptor, ignoring hub [ 1156.750520][T20104] hub: probe of 6-1:0.132 failed with error -5 [ 1156.783804][T20104] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input98 [ 1156.822663][T23890] serial 00:04: in use; can't configure [ 1156.970262][ T5820] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1157.080768][T23825] usb 6-1: USB disconnect, device number 74 [ 1157.211900][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 1157.219179][ T5820] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1157.228538][ T5820] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1157.250993][ T5820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1157.271243][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1157.290246][ T5820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1157.320054][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1157.359718][ T5820] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1157.368974][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.394738][ T5820] usb 4-1: config 0 descriptor?? [ 1157.418697][T23883] loop1: detected capacity change from 0 to 32768 [ 1157.453522][T23883] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1157.481866][T23883] JBD2: Ignoring recovery information on journal [ 1157.564825][T23883] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1157.631885][ T5820] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1157.838267][T23901] syz.1.5610 (23901) used greatest stack depth: 19288 bytes left [ 1158.061209][T19662] ocfs2: Unmounting device (7,1) on (node local) [ 1158.237511][T23909] fuse: Unknown parameter 'user_id00000000000000000000' [ 1158.262721][T21032] usb 4-1: USB disconnect, device number 71 [ 1158.300734][T21032] usblp0: removed [ 1158.444931][T23913] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 1159.340605][ T9772] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1159.540698][ T9772] usb 5-1: Using ep0 maxpacket: 16 [ 1159.549382][ T9772] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1159.559050][ T9772] usb 5-1: config 0 has no interface number 0 [ 1159.570522][ T9772] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1159.582232][ T9772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.591120][ T9772] usb 5-1: Product: syz [ 1159.596571][ T9772] usb 5-1: Manufacturer: syz [ 1159.618483][ T9772] usb 5-1: SerialNumber: syz [ 1159.626698][T23943] fuse: Unknown parameter 'user_id00000000000000000000' [ 1159.641897][ T9772] usb 5-1: config 0 descriptor?? [ 1159.662252][ T9772] hub 5-1:0.132: bad descriptor, ignoring hub [ 1159.681017][ T9772] hub: probe of 5-1:0.132 failed with error -5 [ 1159.702379][ T9772] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input99 [ 1159.712210][T23825] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1160.340021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1160.344795][ C0] ------------[ cut here ]------------ [ 1160.354175][ C0] WARNING: CPU: 0 PID: 23947 at net/mac80211/tx.c:5049 __ieee80211_beacon_get+0x1141/0x1520 [ 1160.364411][ C0] Modules linked in: [ 1160.368331][ C0] CPU: 0 PID: 23947 Comm: syz.1.5631 Not tainted syzkaller #0 [ 1160.375880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1160.385982][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1160.392466][ C0] Code: f7 4c 89 ef e8 c0 6f b6 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 80 78 f7 0f 0b e9 61 f8 ff ff e8 0f 80 78 f7 <0f> 0b e9 85 fb ff ff e8 03 80 78 f7 48 c7 c7 60 6b 65 8e 4c 89 e6 [ 1160.412218][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 1160.418317][ C0] RAX: ffffffff8a0f0b41 RBX: dffffc0000000000 RCX: ffff88802d811e00 [ 1160.426454][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1160.434524][ C0] RBP: 0000000000000000 R08: ffff88802d811e00 R09: 0000000000000003 [ 1160.442582][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888068882440 [ 1160.450647][ C0] R13: ffff88806ae84024 R14: ffff888068882930 R15: ffff88806ae84000 [ 1160.451401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1160.458649][ C0] FS: 00007f89603996c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1160.476039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.482672][ C0] CR2: 0000555585ff64a0 CR3: 00000000547a3000 CR4: 00000000003506f0 [ 1160.490697][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 1160.498691][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1160.506705][ C0] Call Trace: [ 1160.510116][ C0] [ 1160.513007][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1160.518638][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1160.524154][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1160.530978][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1160.536579][ C0] __iterate_interfaces+0x225/0x4c0 [ 1160.541827][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1160.548093][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1160.555385][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1160.561678][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1160.568833][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1160.574091][ C0] ? hw_scan_work+0xf10/0xf10 [ 1160.578894][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1160.584217][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1160.589353][ C0] ? read_tsc+0x9/0x20 [ 1160.593610][ C0] hrtimer_run_softirq+0x177/0x290 [ 1160.598746][ C0] handle_softirqs+0x27d/0x820 [ 1160.603573][ C0] ? read_tsc+0x9/0x20 [ 1160.607690][ C0] ? ktime_get+0x24b/0x280 [ 1160.612163][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1160.616945][ C0] ? do_softirq+0x1a0/0x1a0 [ 1160.621522][ C0] __irq_exit_rcu+0xd3/0x190 [ 1160.621539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1160.634529][ C0] ? irq_exit_rcu+0x20/0x20 [ 1160.639063][ C0] irq_exit_rcu+0x9/0x20 [ 1160.643357][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1160.649098][ C0] [ 1160.652099][ C0] [ 1160.655110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1160.661212][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 1160.668082][ C0] Code: f0 28 7c 7e 65 8b 0d f1 28 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 00 74 52 8b 8a 00 16 00 00 <83> f9 03 75 47 48 8b 8a 08 16 00 00 44 8b 8a 04 16 00 00 49 c1 e1 [ 1160.687774][ C0] RSP: 0000:ffffc9000ec8e910 EFLAGS: 00000246 [ 1160.693895][ C0] RAX: ffffffff81eb09e2 RBX: ffffffff81eb09b2 RCX: 0000000000000000 [ 1160.701918][ C0] RDX: ffff88802d811e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1160.709936][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 1160.718010][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 00fff00000000000 [ 1160.726015][ C0] R13: dffffc0000000000 R14: ffffea00013ac3c0 R15: ffffea00013ac3c0 [ 1160.734041][ C0] ? page_ext_get+0x22/0x2b0 [ 1160.738691][ C0] ? page_ext_get+0x52/0x2b0 [ 1160.743328][ C0] page_ext_get+0x52/0x2b0 [ 1160.747769][ C0] __page_table_check_zero+0x138/0x4b0 [ 1160.753284][ C0] get_page_from_freelist+0x2181/0x22a0 [ 1160.758884][ C0] ? verify_lock_unused+0x140/0x140 [ 1160.764133][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 1160.769766][ C0] __alloc_pages+0x1f0/0x460 [ 1160.770538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1160.774511][ C0] ? zone_statistics+0x170/0x170 [ 1160.787775][ C0] __folio_alloc+0x10/0x20 [ 1160.792245][ C0] vma_alloc_folio+0x474/0x8f0 [ 1160.797037][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 1160.802892][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 1160.807857][ C0] ? folio_put+0xd0/0xd0 [ 1160.812190][ C0] ? __vm_enough_memory+0x11a/0x370 [ 1160.817413][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 1160.823035][ C0] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 1160.828780][ C0] ? put_swap_device+0x230/0x230 [ 1160.833768][ C0] ? xas_load+0x12b/0x140 [ 1160.838144][ C0] ? filemap_get_entry+0xce/0x3f0 [ 1160.843217][ C0] ? filemap_get_entry+0xce/0x3f0 [ 1160.848292][ C0] ? filemap_get_entry+0x375/0x3f0 [ 1160.853481][ C0] ? page_cache_prev_miss+0x390/0x390 [ 1160.858892][ C0] shmem_get_folio_gfp+0xe1d/0x2b40 [ 1160.864161][ C0] shmem_write_begin+0xf2/0x430 [ 1160.869035][ C0] generic_perform_write+0x2fe/0x5c0 [ 1160.874399][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 1160.880270][ C0] ? down_write+0x16e/0x200 [ 1160.884899][ C0] ? file_update_time+0x98/0x1a0 [ 1160.889892][ C0] shmem_file_write_iter+0xfb/0x120 [ 1160.895122][ C0] __kernel_write_iter+0x29f/0x6d0 [ 1160.900282][ C0] ? vfs_read+0x990/0x990 [ 1160.904676][ C0] ? get_dump_page+0x156/0x200 [ 1160.909469][ C0] ? __asan_memset+0x22/0x40 [ 1160.914197][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1160.919019][ C0] dump_user_range+0x418/0x840 [ 1160.923848][ C0] ? dump_skip+0x40/0x40 [ 1160.928107][ C0] ? dump_emit+0x78/0xe0 [ 1160.932402][ C0] ? dump_emit+0xa6/0xe0 [ 1160.936671][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1160.941669][ C0] elf_core_dump+0x320e/0x37c0 [ 1160.946467][ C0] ? load_elf_binary+0x2850/0x2850 [ 1160.951672][ C0] ? verify_lock_unused+0x140/0x140 [ 1160.956904][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1160.961981][ C0] ? mas_next_slot+0x94c/0x980 [ 1160.966817][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1160.972321][ C0] ? 0xffffffffff600000 [ 1160.976510][ C0] do_coredump+0x1791/0x24a0 [ 1160.981167][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1160.986310][ C0] ? lock_chain_count+0x20/0x20 [ 1160.991216][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1160.996434][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1161.001680][ C0] get_signal+0x10da/0x1390 [ 1161.006219][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1161.011854][ C0] ? get_sigframe_size+0x20/0x20 [ 1161.016904][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1161.022968][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1161.028454][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1161.033826][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1161.039397][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1161.044909][ C0] exc_page_fault+0x8c/0x100 [ 1161.049526][ C0] asm_exc_page_fault+0x26/0x30 [ 1161.054427][ C0] RIP: 0033:0x7f895f59e161 [ 1161.058863][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1161.078525][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1161.084649][ C0] RAX: 0000000000000000 RBX: 00007f895f826090 RCX: 00007f895f59e159 [ 1161.092696][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1161.100747][ C0] RBP: 00007f895f63506b R08: 0000000000000000 R09: 0000000000000000 [ 1161.108736][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1161.116753][ C0] R13: 00007f895f826128 R14: 00007f895f826090 R15: 00007ffdc953bd98 [ 1161.124812][ C0] [ 1161.127850][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1161.135165][ C0] CPU: 0 PID: 23947 Comm: syz.1.5631 Not tainted syzkaller #0 [ 1161.142635][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.152706][ C0] Call Trace: [ 1161.155997][ C0] [ 1161.158868][ C0] dump_stack_lvl+0x18c/0x250 [ 1161.163594][ C0] ? show_regs_print_info+0x20/0x20 [ 1161.168905][ C0] ? load_image+0x420/0x420 [ 1161.173438][ C0] panic+0x2ca/0x720 [ 1161.177352][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1161.181900][ C0] __warn+0x2e0/0x470 [ 1161.185918][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1161.191663][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1161.197399][ C0] report_bug+0x2be/0x4f0 [ 1161.201811][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1161.207543][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1161.213298][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 1161.219030][ C0] handle_bug+0xcf/0x120 [ 1161.223296][ C0] exc_invalid_op+0x1a/0x50 [ 1161.227819][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1161.232704][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1161.239048][ C0] Code: f7 4c 89 ef e8 c0 6f b6 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 1b 80 78 f7 0f 0b e9 61 f8 ff ff e8 0f 80 78 f7 <0f> 0b e9 85 fb ff ff e8 03 80 78 f7 48 c7 c7 60 6b 65 8e 4c 89 e6 [ 1161.258756][ C0] RSP: 0000:ffffc90000007a18 EFLAGS: 00010246 [ 1161.264840][ C0] RAX: ffffffff8a0f0b41 RBX: dffffc0000000000 RCX: ffff88802d811e00 [ 1161.272865][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.280932][ C0] RBP: 0000000000000000 R08: ffff88802d811e00 R09: 0000000000000003 [ 1161.288999][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888068882440 [ 1161.296985][ C0] R13: ffff88806ae84024 R14: ffff888068882930 R15: ffff88806ae84000 [ 1161.304975][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1161.310721][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1161.316451][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1161.322013][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1161.327482][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1161.334300][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1161.339882][ C0] __iterate_interfaces+0x225/0x4c0 [ 1161.345123][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1161.351394][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1161.358618][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1161.364900][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1161.371975][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1161.377195][ C0] ? hw_scan_work+0xf10/0xf10 [ 1161.381887][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1161.387184][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1161.392322][ C0] ? read_tsc+0x9/0x20 [ 1161.396422][ C0] hrtimer_run_softirq+0x177/0x290 [ 1161.401568][ C0] handle_softirqs+0x27d/0x820 [ 1161.406381][ C0] ? read_tsc+0x9/0x20 [ 1161.410470][ C0] ? ktime_get+0x24b/0x280 [ 1161.414917][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1161.419833][ C0] ? do_softirq+0x1a0/0x1a0 [ 1161.424399][ C0] __irq_exit_rcu+0xd3/0x190 [ 1161.429020][ C0] ? irq_exit_rcu+0x20/0x20 [ 1161.433563][ C0] irq_exit_rcu+0x9/0x20 [ 1161.437873][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1161.443533][ C0] [ 1161.446485][ C0] [ 1161.449430][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1161.455439][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 1161.462334][ C0] Code: f0 28 7c 7e 65 8b 0d f1 28 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 16 00 00 00 74 52 8b 8a 00 16 00 00 <83> f9 03 75 47 48 8b 8a 08 16 00 00 44 8b 8a 04 16 00 00 49 c1 e1 [ 1161.481971][ C0] RSP: 0000:ffffc9000ec8e910 EFLAGS: 00000246 [ 1161.488059][ C0] RAX: ffffffff81eb09e2 RBX: ffffffff81eb09b2 RCX: 0000000000000000 [ 1161.496049][ C0] RDX: ffff88802d811e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1161.504039][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 1161.512037][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 00fff00000000000 [ 1161.520059][ C0] R13: dffffc0000000000 R14: ffffea00013ac3c0 R15: ffffea00013ac3c0 [ 1161.528051][ C0] ? page_ext_get+0x22/0x2b0 [ 1161.532674][ C0] ? page_ext_get+0x52/0x2b0 [ 1161.537299][ C0] page_ext_get+0x52/0x2b0 [ 1161.541738][ C0] __page_table_check_zero+0x138/0x4b0 [ 1161.547222][ C0] get_page_from_freelist+0x2181/0x22a0 [ 1161.552807][ C0] ? verify_lock_unused+0x140/0x140 [ 1161.558036][ C0] ? __next_zones_zonelist+0x9d/0x130 [ 1161.563535][ C0] __alloc_pages+0x1f0/0x460 [ 1161.568162][ C0] ? zone_statistics+0x170/0x170 [ 1161.573157][ C0] __folio_alloc+0x10/0x20 [ 1161.577589][ C0] vma_alloc_folio+0x474/0x8f0 [ 1161.582379][ C0] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 1161.588208][ C0] shmem_alloc_folio+0x1a9/0x2a0 [ 1161.593206][ C0] ? folio_put+0xd0/0xd0 [ 1161.597486][ C0] ? __vm_enough_memory+0x11a/0x370 [ 1161.602723][ C0] ? shmem_inode_acct_block+0x35e/0x460 [ 1161.608291][ C0] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 1161.614038][ C0] ? put_swap_device+0x230/0x230 [ 1161.618999][ C0] ? xas_load+0x12b/0x140 [ 1161.623351][ C0] ? filemap_get_entry+0xce/0x3f0 [ 1161.628396][ C0] ? filemap_get_entry+0xce/0x3f0 [ 1161.633452][ C0] ? filemap_get_entry+0x375/0x3f0 [ 1161.638587][ C0] ? page_cache_prev_miss+0x390/0x390 [ 1161.643991][ C0] shmem_get_folio_gfp+0xe1d/0x2b40 [ 1161.649237][ C0] shmem_write_begin+0xf2/0x430 [ 1161.654124][ C0] generic_perform_write+0x2fe/0x5c0 [ 1161.659463][ C0] ? generic_file_direct_write+0x3e0/0x3e0 [ 1161.665292][ C0] ? down_write+0x16e/0x200 [ 1161.669831][ C0] ? file_update_time+0x98/0x1a0 [ 1161.674801][ C0] shmem_file_write_iter+0xfb/0x120 [ 1161.680054][ C0] __kernel_write_iter+0x29f/0x6d0 [ 1161.685235][ C0] ? vfs_read+0x990/0x990 [ 1161.689636][ C0] ? get_dump_page+0x156/0x200 [ 1161.694451][ C0] ? __asan_memset+0x22/0x40 [ 1161.699064][ C0] ? iov_iter_bvec+0xd4/0x1b0 [ 1161.703762][ C0] dump_user_range+0x418/0x840 [ 1161.708548][ C0] ? dump_skip+0x40/0x40 [ 1161.712885][ C0] ? dump_emit+0x78/0xe0 [ 1161.717147][ C0] ? dump_emit+0xa6/0xe0 [ 1161.721397][ C0] ? elf_core_dump+0x2dbb/0x37c0 [ 1161.726397][ C0] elf_core_dump+0x320e/0x37c0 [ 1161.731197][ C0] ? load_elf_binary+0x2850/0x2850 [ 1161.736337][ C0] ? verify_lock_unused+0x140/0x140 [ 1161.741554][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1161.746627][ C0] ? mas_next_slot+0x94c/0x980 [ 1161.751491][ C0] ? rcu_read_lock_any_held+0xb4/0x140 [ 1161.756986][ C0] ? 0xffffffffff600000 [ 1161.761167][ C0] do_coredump+0x1791/0x24a0 [ 1161.765793][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1161.770936][ C0] ? lock_chain_count+0x20/0x20 [ 1161.775812][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1161.781030][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1161.786245][ C0] get_signal+0x10da/0x1390 [ 1161.790777][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 1161.796347][ C0] ? get_sigframe_size+0x20/0x20 [ 1161.801301][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1161.807305][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1161.812783][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1161.818086][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1161.823647][ C0] irqentry_exit_to_user_mode+0x9/0x30 [ 1161.829144][ C0] exc_page_fault+0x8c/0x100 [ 1161.833751][ C0] asm_exc_page_fault+0x26/0x30 [ 1161.838622][ C0] RIP: 0033:0x7f895f59e161 [ 1161.843072][ C0] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1161.862695][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 1161.868781][ C0] RAX: 0000000000000000 RBX: 00007f895f826090 RCX: 00007f895f59e159 [ 1161.876788][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 1161.884810][ C0] RBP: 00007f895f63506b R08: 0000000000000000 R09: 0000000000000000 [ 1161.892800][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1161.900847][ C0] R13: 00007f895f826128 R14: 00007f895f826090 R15: 00007ffdc953bd98 [ 1161.908868][ C0] [ 1161.912601][ C0] Kernel Offset: disabled [ 1161.917015][ C0] Rebooting in 86400 seconds..