last executing test programs: 6.245834695s ago: executing program 4 (id=5511): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 6.082255597s ago: executing program 4 (id=5513): r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x100842) read$hidraw(r2, 0x0, 0x0) 3.906162834s ago: executing program 0 (id=5527): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488ad8ca9dbc4a9509a000000000000"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x21, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005001901070000000800"], 0x398}}, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000140)={0x1d, r8}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 3.863881042s ago: executing program 2 (id=5528): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) 3.830347637s ago: executing program 3 (id=5529): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="e3052a20e3991b03ae9fab14fad049e36162b7925f20e170e95c97af0532f3", 0x1f) 3.757452227s ago: executing program 2 (id=5530): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@discard}, {@nodatacow}, {@commit={'commit', 0x3d, 0x80000001}}, {@usebackuproot}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x65, 0x25]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000ac0)=""/4096, 0x1000) 3.701772221s ago: executing program 3 (id=5532): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x8e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.653980566s ago: executing program 0 (id=5533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x2, &(0x7f0000000440)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x5, 0x1}, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 3.562741893s ago: executing program 3 (id=5534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000280)="b81fe260a47e9d899e5fa6acf9b6c920d8f2c00245b9a67bab06ae0a40c8845c4cbfe63efc081c057bb213d098ba0746c655fb3ce86a528a1e68585dc28cd648cdaf05908474c316f6e61cb45186100e6609eaed94b091ba7d8355af6a895dc3b658db58038afc63a9ce397a8acade7600855d294b00", &(0x7f0000000000)=@udp, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x1, '\x00', {}, 0x3}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3.372328166s ago: executing program 4 (id=5535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) 2.514294985s ago: executing program 4 (id=5536): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.430361957s ago: executing program 3 (id=5537): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x8, 0x42, 0x40}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) close(0xffffffffffffffff) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r6], 0x20}, 0x1, 0x6}, 0x0) 2.363414958s ago: executing program 0 (id=5538): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 2.236088897s ago: executing program 0 (id=5539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000c40)={@val, @val={0x3, 0x4, 0x0, 0x1}, @x25={0x0, 0x0, 0x0, "894659b59ea25c60053249df5082206eaa92b978a059262d48fafdf6138eeccec66b39ecbbe341ca9ba2cd7578f963eedeee62f8b8558a446b"}}, 0x4a) 1.954737836s ago: executing program 3 (id=5541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x1, '\x00', {}, 0x3}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast}, {@in6=@dev, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-avx2\x00'}}}, @replay_esn_val={0x1c}]}, 0x158}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.942432354s ago: executing program 4 (id=5542): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@discard}, {@nodatacow}, {@commit={'commit', 0x3d, 0x80000001}}, {@usebackuproot}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x65, 0x25]}}]}, 0x3, 0x510e, &(0x7f000000a240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000ac0)=""/4096, 0x1000) 1.858072065s ago: executing program 0 (id=5544): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x8e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.72896258s ago: executing program 0 (id=5545): r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x100842) read$hidraw(r1, 0x0, 0x0) 1.722831655s ago: executing program 3 (id=5546): syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x1200014, &(0x7f00000004c0)=ANY=[], 0x3, 0x119f4, &(0x7f00000234c0)="$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") 1.277045134s ago: executing program 1 (id=5549): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) 1.214223105s ago: executing program 2 (id=5550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x0, 0x20000570, 0x200005a0], 0x0, 0x0, &(0x7f0000000540)=[{}, {}, {}]}, 0x108) 1.159564266s ago: executing program 1 (id=5551): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 930.684805ms ago: executing program 1 (id=5552): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 552.179791ms ago: executing program 1 (id=5553): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 465.132914ms ago: executing program 2 (id=5554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 368.836261ms ago: executing program 1 (id=5555): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x8e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 192.337895ms ago: executing program 1 (id=5556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xc1, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 52.533724ms ago: executing program 4 (id=5557): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0xa7c}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500ff000004", 0x30}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 36.444645ms ago: executing program 2 (id=5558): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b05d25a", 0xa}], 0x1}, 0x0) 0s ago: executing program 2 (id=5559): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xffd, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x368, 0x180, 0x228, 0xffffffff, 0x180, 0xd8, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {0x22e}, [@common=@addrtype={{0x30}, {0x0, 0xa9c}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xc, @multicast1, @empty, @port=0x4e24, @gre_key=0xbf3c}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x34}, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @remote, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'veth1_to_team\x00', 'pim6reg\x00', {}, {}, 0x0, 0x0, 0x2d}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @port=0x4e21, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x8, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{}, 0x0, &(0x7f0000001380)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/572], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r8}, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 79384][T16460] bcachefs (loop3): marking filesystem clean [ 717.821053][T16460] bcachefs (loop3): shutdown complete [ 717.983813][ T5139] cdc_ncm 1-1:1.0: bind() failure [ 717.995289][ T5139] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 718.025114][ T5139] cdc_ncm 1-1:1.1: bind() failure [ 718.041489][ T5139] usb 1-1: USB disconnect, device number 33 [ 718.189719][ T45] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 718.226725][ T45] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 718.255202][ T45] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 718.436650][T19041] syz.2.4336 (19041): drop_caches: 1 [ 718.494247][ T5087] usb 2-1: USB disconnect, device number 29 [ 718.652249][T19049] loop3: detected capacity change from 0 to 512 [ 718.689459][T19049] EXT4-fs (loop3): unsupported inode size: 0 [ 718.706759][T19049] EXT4-fs (loop3): blocksize: 2048 [ 719.142347][ T5087] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 719.342467][ T5087] usb 5-1: config 253 has an invalid interface number: 174 but max is 1 [ 719.372561][ T5087] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 719.402515][ T5087] usb 5-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 719.419541][T19041] syz.2.4336 (19041): drop_caches: 1 [ 719.427792][ T5087] usb 5-1: config 253 has no interface number 0 [ 719.460458][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 719.494877][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 719.530354][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 719.569891][ T5087] usb 5-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 719.596300][ T5087] usb 5-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 719.630022][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 719.679023][ T5087] usb 5-1: config 253 interface 174 has no altsetting 0 [ 719.701605][ T5087] usb 5-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 719.704351][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4348'. [ 719.729231][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.959460][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4354'. [ 720.185406][ T45] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 720.186642][ T5087] usb 5-1: string descriptor 0 read error: -71 [ 720.206172][ T5087] usb 5-1: USB disconnect, device number 30 [ 720.392460][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 720.415654][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 720.428468][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 720.443160][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 720.444003][T19096] loop1: detected capacity change from 0 to 512 [ 720.452430][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.455174][ T45] usb 1-1: config 0 descriptor?? [ 720.468217][T19096] EXT4-fs: Ignoring removed bh option [ 720.473904][T19080] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 720.490883][T19096] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 720.501382][T19096] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 720.908582][ T45] plantronics 0003:047F:FFFF.0023: unknown main item tag 0xd [ 720.914680][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4362'. [ 720.927925][ T45] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 720.966145][ T45] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 721.058815][ T5088] Bluetooth: hci5: command tx timeout [ 721.185512][T19112] netlink: 'syz.4.4365': attribute type 4 has an invalid length. [ 721.188272][ T45] usb 1-1: USB disconnect, device number 34 [ 721.258721][T19111] netlink: 704 bytes leftover after parsing attributes in process `syz.3.4367'. [ 721.507643][T19113] syz.1.4363 (19113): drop_caches: 1 [ 721.836248][T19113] syz.1.4363 (19113): drop_caches: 1 [ 722.200248][T11588] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 722.219377][T19112] loop4: detected capacity change from 0 to 32768 [ 722.240071][T10711] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 722.279993][T19112] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 722.292299][T19136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 722.390155][T11588] usb 4-1: Using ep0 maxpacket: 32 [ 722.410707][T19146] netlink: 704 bytes leftover after parsing attributes in process `syz.1.4379'. [ 722.425439][T11588] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.455889][T19112] XFS (loop4): Starting recovery (logdev: internal) [ 722.464421][T10711] usb 3-1: config 253 has an invalid interface number: 174 but max is 1 [ 722.477458][T11588] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.487501][T10711] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 722.512403][T11588] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 722.517252][T19112] XFS (loop4): Ending recovery (logdev: internal) [ 722.524849][T10711] usb 3-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 722.548313][T11588] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 722.560287][T10711] usb 3-1: config 253 has no interface number 0 [ 722.566631][T10711] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 722.588885][T11588] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 722.606007][T11588] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 722.616158][T10711] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 722.616335][T18161] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 722.627757][T10711] usb 3-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 722.656492][T10711] usb 3-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 722.668086][T10711] usb 3-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 722.686246][T10711] usb 3-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 722.700375][T10711] usb 3-1: config 253 interface 174 has no altsetting 0 [ 722.710551][T11588] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.722853][T11588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.737305][T11588] usb 4-1: Product: syz [ 722.743186][T10711] usb 3-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 722.753078][T11588] usb 4-1: Manufacturer: syz [ 722.758114][T11588] usb 4-1: SerialNumber: syz [ 722.766737][T10711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.002927][T11588] cdc_ncm 4-1:1.0: bind() failure [ 723.027187][T11588] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 723.041283][T10711] usb 3-1: string descriptor 0 read error: -71 [ 723.067679][T11588] cdc_ncm 4-1:1.1: bind() failure [ 723.083790][T10711] usb 3-1: USB disconnect, device number 26 [ 723.097221][T11588] usb 4-1: USB disconnect, device number 21 [ 723.190758][T19162] netlink: 'syz.0.4386': attribute type 4 has an invalid length. [ 723.351364][T19172] netlink: 544 bytes leftover after parsing attributes in process `syz.1.4390'. [ 723.386828][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4389'. [ 723.659069][T19188] loop0: detected capacity change from 0 to 256 [ 723.668822][T19188] exfat: Deprecated parameter 'namecase' [ 723.717559][T19188] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000fff) [ 723.787903][T19192] netlink: 'syz.1.4400': attribute type 4 has an invalid length. [ 723.790110][T19188] exFAT-fs (loop0): Filesystem has been set read-only [ 723.827731][T19188] exFAT-fs (loop0): failed to load upcase table [ 723.844324][T19188] exFAT-fs (loop0): failed to recognize exfat type [ 723.864002][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4401'. [ 724.066149][T19202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.112832][T19206] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4407'. [ 724.212592][T19202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.430360][T10711] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 724.610017][T10711] usb 5-1: Using ep0 maxpacket: 32 [ 724.628309][T10711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.639687][T10711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.657426][T10711] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.671174][T10711] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 724.697780][T10711] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 724.711353][T10711] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 724.725597][T10711] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.754557][T10711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.780332][T10711] usb 5-1: Product: syz [ 724.790247][T10711] usb 5-1: Manufacturer: syz [ 724.804678][T10711] usb 5-1: SerialNumber: syz [ 724.840066][ T5154] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 724.996932][T19222] loop1: detected capacity change from 0 to 40427 [ 725.006298][T19222] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 725.019000][T19232] loop2: detected capacity change from 0 to 256 [ 725.025450][T19222] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 725.032604][ T5154] usb 1-1: config 253 has an invalid interface number: 174 but max is 1 [ 725.041825][T19232] exfat: Deprecated parameter 'namecase' [ 725.054992][T10711] cdc_ncm 5-1:1.0: bind() failure [ 725.063976][ T5154] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 725.079032][T19232] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000fff) [ 725.080811][T10711] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 725.097641][ T5154] usb 1-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 725.107152][ T5154] usb 1-1: config 253 has no interface number 0 [ 725.115158][T10711] cdc_ncm 5-1:1.1: bind() failure [ 725.116437][T19222] F2FS-fs (loop1): Found nat_bits in checkpoint [ 725.120877][ T5154] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 725.137214][T19232] exFAT-fs (loop2): Filesystem has been set read-only [ 725.143832][T10711] usb 5-1: USB disconnect, device number 31 [ 725.157325][ T5154] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 725.165883][T19232] exFAT-fs (loop2): failed to load upcase table [ 725.171142][ T5154] usb 1-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 725.185733][ T5154] usb 1-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 725.195426][T19232] exFAT-fs (loop2): failed to recognize exfat type [ 725.213527][ T5154] usb 1-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 725.232044][ T5154] usb 1-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 725.259985][ T5154] usb 1-1: config 253 interface 174 has no altsetting 0 [ 725.270225][ T5154] usb 1-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 725.288081][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.288145][T19222] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 725.307188][T19222] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 725.316406][ T29] audit: type=1800 audit(1719274118.561:551): pid=19241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.4421" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 725.523200][ T5154] usb 1-1: string descriptor 0 read error: -71 [ 725.539355][ T5154] usb 1-1: USB disconnect, device number 35 [ 725.553262][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4423'. [ 725.588078][T19243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4423'. [ 725.733143][T19243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4423'. [ 725.948535][T19253] netlink: 'syz.4.4427': attribute type 4 has an invalid length. [ 726.445064][T12224] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 726.656852][T12224] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 726.679400][T12224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.721690][T12224] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 726.740019][T12224] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 726.749973][T12224] usb 5-1: Manufacturer: syz [ 726.774069][T12224] usb 5-1: config 0 descriptor?? [ 726.989915][T12224] rc_core: IR keymap rc-hauppauge not found [ 726.995872][T12224] Registered IR keymap rc-empty [ 727.023784][T19260] loop1: detected capacity change from 0 to 32768 [ 727.041510][T12224] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 727.067248][T12224] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 727.078071][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4438'. [ 727.130464][T12224] usb 5-1: USB disconnect, device number 32 [ 727.248120][T19267] loop0: detected capacity change from 0 to 32768 [ 727.296814][T19267] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 727.309201][T19260] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 727.359715][T19260] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 727.400538][T19260] bcachefs (loop1): alloc_read... done [ 727.407236][T19260] bcachefs (loop1): stripes_read... done [ 727.442340][T19260] bcachefs (loop1): snapshots_read... done [ 727.475591][T19260] bcachefs (loop1): journal_replay... done [ 727.503269][T19267] XFS (loop0): Ending clean mount [ 727.506659][T19260] bcachefs (loop1): resume_logged_ops... done [ 727.524243][T19309] netlink: 'syz.3.4444': attribute type 10 has an invalid length. [ 727.526349][T19260] bcachefs (loop1): going read-write [ 727.540509][T19309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4444'. [ 727.551711][T19309] caif0: entered promiscuous mode [ 727.557987][T19309] caif0: entered allmulticast mode [ 727.566444][T19309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.582754][T12224] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x26/0xe0, xfs_finobt block 0x10 [ 727.597595][T12224] XFS (loop0): Unmount and run xfs_repair [ 727.597764][T19260] bcachefs (loop1): done starting filesystem [ 727.606445][T12224] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 727.650053][T12224] 00000000: 46 49 42 33 00 00 48 00 ff ff ff ff ff ff ff ff FIB3..H......... [ 727.678533][T12224] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 80 ................ [ 727.722532][T12224] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 727.731757][T12224] 00000030: 00 00 00 00 37 43 cf 4c 00 00 24 40 00 00 40 37 ....7C.L..$@..@7 [ 727.740807][T12224] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 727.753102][T12224] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 727.762979][T12224] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 727.772144][T12224] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 727.783563][T19267] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x10 len 4 error 74 [ 727.796317][T19267] XFS (loop0): Failed to initialize disk quotas. [ 727.860614][T13145] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 727.884086][T13145] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 727.902692][T10806] bcachefs (loop1): shutting down [ 727.907864][T10806] bcachefs (loop1): going read-only [ 727.940147][T10806] bcachefs (loop1): finished waiting for writes to stop [ 727.958222][T10806] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 728.026797][T10806] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14 [ 728.075586][T10806] bcachefs (loop1): shutdown complete, journal seq 15 [ 728.083812][T10806] bcachefs (loop1): marking filesystem clean [ 728.189150][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4447'. [ 728.237149][T10806] bcachefs (loop1): shutdown complete [ 728.272434][ T5154] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 728.272591][T19318] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 728.472832][ T5154] usb 3-1: config 253 has an invalid interface number: 174 but max is 1 [ 728.488699][ T5154] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 728.520127][ T5154] usb 3-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 728.539617][ T5154] usb 3-1: config 253 has no interface number 0 [ 728.579359][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 728.600005][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 728.621484][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 728.649960][ T5154] usb 3-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 728.679941][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 728.693941][ T5154] usb 3-1: config 253 interface 174 has no altsetting 0 [ 728.701547][ T5154] usb 3-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 728.737577][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.765561][T19330] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4453'. [ 729.039025][ T5154] usb 3-1: string descriptor 0 read error: -71 [ 729.053331][ T5154] usb 3-1: USB disconnect, device number 27 [ 729.420103][T12224] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 729.601982][T12224] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 729.630128][T12224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.656515][T12224] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 729.676302][T12224] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 729.698910][T12224] usb 4-1: Manufacturer: syz [ 729.737413][T12224] usb 4-1: config 0 descriptor?? [ 729.783423][T19360] loop1: detected capacity change from 0 to 512 [ 729.827105][T19360] EXT4-fs (loop1): unsupported inode size: 0 [ 729.834196][T19360] EXT4-fs (loop1): blocksize: 2048 [ 729.870171][T12224] rc_core: IR keymap rc-hauppauge not found [ 729.884288][T12224] Registered IR keymap rc-empty [ 729.900678][T12224] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 729.929137][T19367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.945339][T12224] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 730.018780][T12224] usb 4-1: USB disconnect, device number 22 [ 730.078338][T19367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.177430][T19365] loop2: detected capacity change from 0 to 4096 [ 730.237346][T19365] ntfs3: loop2: MFT: r=19, expect seq=0 instead of 1! [ 730.251653][T19365] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 730.287027][T19365] ntfs3: loop2: Failed to load root (-22). [ 730.287169][T19352] loop0: detected capacity change from 0 to 32768 [ 730.854371][T19382] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4475'. [ 730.914227][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 731.014873][T19392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4479'. [ 731.315901][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 731.326377][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 731.459845][T19409] netlink: 'syz.0.4484': attribute type 4 has an invalid length. [ 731.496471][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4483'. [ 731.518030][T19411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.607528][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4487'. [ 731.635124][T19411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.691299][ T5087] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 731.850355][T12224] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 731.882701][ T5087] usb 4-1: config 253 has an invalid interface number: 174 but max is 1 [ 731.956870][T19427] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4493'. [ 732.001392][ T5087] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 732.019940][ T5087] usb 4-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 732.029058][ T5087] usb 4-1: config 253 has no interface number 0 [ 732.035622][ T5087] usb 4-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 732.046951][ T5087] usb 4-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 732.058153][ T5087] usb 4-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 732.076231][ T5087] usb 4-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 732.086712][ T5087] usb 4-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 732.100149][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 732.106411][ T5087] usb 4-1: config 253 interface 174 has no altsetting 0 [ 732.113473][ T5087] usb 4-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 732.126689][ T5087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.138146][T12224] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 732.149945][T12224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.164965][T12224] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 732.174549][T12224] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 732.182781][T12224] usb 1-1: Manufacturer: syz [ 732.191012][T12224] usb 1-1: config 0 descriptor?? [ 732.259190][T19430] loop1: detected capacity change from 0 to 512 [ 732.280537][T12224] rc_core: IR keymap rc-hauppauge not found [ 732.286550][T12224] Registered IR keymap rc-empty [ 732.321676][T12224] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 732.339035][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4497'. [ 732.348887][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4497'. [ 732.391791][T12224] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 732.407882][ T5087] usb 4-1: string descriptor 0 read error: -71 [ 732.414245][T19430] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 732.430960][ T5087] usb 4-1: USB disconnect, device number 23 [ 732.490609][T19430] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz.1.4494: invalid indirect mapped block 2683928664 (level 1) [ 732.550614][T19430] EXT4-fs (loop1): Remounting filesystem read-only [ 732.576734][T19430] EXT4-fs (loop1): 1 truncate cleaned up [ 732.588125][T10711] usb 1-1: USB disconnect, device number 36 [ 732.601258][T19430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.647196][T19430] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 732.666738][T19430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.820561][ T29] audit: type=1400 audit(1719274126.051:552): avc: denied { nlmsg_write } for pid=19429 comm="syz.1.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 733.162827][T19455] loop1: detected capacity change from 0 to 8 [ 733.220083][T19455] unable to read xattr id index table [ 733.638783][T19446] loop2: detected capacity change from 0 to 32768 [ 733.768620][T19446] [ 733.768620][T19446] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 733.768620][T19446] [ 733.922164][T18479] [ 733.922164][T18479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 733.922164][T18479] [ 733.960726][T18479] [ 733.960726][T18479] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 733.960726][T18479] [ 734.318658][T19451] loop4: detected capacity change from 0 to 40427 [ 734.330354][T19451] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 734.338135][T19451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 734.398271][T19451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 734.604962][T19451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 734.635461][T19451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 735.101382][T19512] loop3: detected capacity change from 0 to 512 [ 735.116020][T19512] EXT4-fs (loop3): unsupported inode size: 0 [ 735.122550][T19512] EXT4-fs (loop3): blocksize: 2048 [ 735.908031][T19516] __nla_validate_parse: 9 callbacks suppressed [ 735.908054][T19516] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4528'. [ 736.721158][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4535'. [ 737.317702][T19521] loop0: detected capacity change from 0 to 40427 [ 737.359945][T19521] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 737.388080][T19521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 737.460413][T19521] F2FS-fs (loop0): Found nat_bits in checkpoint [ 737.612705][T19521] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 737.630054][T19521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 738.014319][ T5088] Bluetooth: hci5: command tx timeout [ 739.399892][ T29] audit: type=1326 audit(1719274132.631:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25f75d39 code=0x7ffc0000 [ 739.476406][ T29] audit: type=1326 audit(1719274132.671:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25f75d39 code=0x7ffc0000 [ 739.583700][ T29] audit: type=1326 audit(1719274132.671:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a25f75d39 code=0x7ffc0000 [ 739.653675][ T29] audit: type=1326 audit(1719274132.671:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25f75d39 code=0x7ffc0000 [ 739.697653][T19561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.726541][ T29] audit: type=1326 audit(1719274132.681:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a25f75d39 code=0x7ffc0000 [ 739.813648][T19561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.817884][ T29] audit: type=1326 audit(1719274132.761:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a25f75d39 code=0x7ffc0000 [ 739.920025][ T29] audit: type=1326 audit(1719274132.761:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a25f6cba7 code=0x7ffc0000 [ 739.979992][ T29] audit: type=1326 audit(1719274132.761:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a25f11569 code=0x7ffc0000 [ 740.049987][ T29] audit: type=1326 audit(1719274132.761:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a25f6cba7 code=0x7ffc0000 [ 740.121291][ T29] audit: type=1326 audit(1719274132.761:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19556 comm="syz.0.4543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a25f11569 code=0x7ffc0000 [ 740.740141][T19579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.882584][T19579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.400097][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4559'. [ 741.483335][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 741.669695][T19603] loop2: detected capacity change from 0 to 4096 [ 741.707691][T19603] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 741.770748][T19603] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 741.948468][T19612] loop1: detected capacity change from 0 to 2048 [ 742.013879][T19612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 742.478288][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4573'. [ 742.968830][T19604] loop4: detected capacity change from 0 to 40427 [ 743.021800][T19604] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 743.042096][T19604] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 743.105833][T19604] F2FS-fs (loop4): Found nat_bits in checkpoint [ 743.213423][T19618] loop0: detected capacity change from 0 to 32768 [ 743.327959][T19604] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 743.335372][T19650] loop1: detected capacity change from 0 to 4096 [ 743.343470][T19604] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 743.357248][T19650] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 743.384423][T19618] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 743.405147][T19618] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 743.441188][T19618] bcachefs (loop0): alloc_read... done [ 743.454202][T19618] bcachefs (loop0): stripes_read... done [ 743.460102][T19650] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 743.487632][T19618] bcachefs (loop0): snapshots_read... done [ 743.503821][T19618] bcachefs (loop0): going read-write [ 743.515024][T19618] bcachefs (loop0): journal_replay... [ 743.558426][T19664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4585'. [ 743.580126][T19618] done [ 743.596586][T19618] bcachefs (loop0): resume_logged_ops... done [ 743.604266][T19618] bcachefs (loop0): delete_dead_inodes... done [ 743.642576][T19618] bcachefs (loop0): done starting filesystem [ 743.682862][T19668] netlink: 'syz.2.4586': attribute type 5 has an invalid length. [ 743.936173][T13145] bcachefs (loop0): shutting down [ 743.969701][T13145] bcachefs (loop0): going read-only [ 743.980572][T13145] bcachefs (loop0): finished waiting for writes to stop [ 744.003848][T13145] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 744.046888][T13145] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 744.076083][T13145] bcachefs (loop0): shutdown complete, journal seq 16 [ 744.088767][T13145] bcachefs (loop0): marking filesystem clean [ 744.144751][T13145] bcachefs (loop0): shutdown complete [ 744.417035][T14138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.453635][T14138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.494542][T19689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.500555][T19687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 744.825835][T19696] loop4: detected capacity change from 0 to 4096 [ 744.852754][T19696] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 744.908279][T19696] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 745.471049][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 745.471068][ T29] audit: type=1400 audit(1719274138.721:592): avc: denied { read } for pid=19704 comm="syz.1.4603" lport=37998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 745.504752][T19684] loop2: detected capacity change from 0 to 40427 [ 745.553230][T19684] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 745.567990][T19684] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 745.670020][T19684] F2FS-fs (loop2): Found nat_bits in checkpoint [ 746.094622][ T29] audit: type=1400 audit(1719274139.321:593): avc: denied { map } for pid=19717 comm="syz.1.4607" path="socket:[65029]" dev="sockfs" ino=65029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 746.361522][T19723] netlink: 'syz.0.4608': attribute type 10 has an invalid length. [ 746.390919][ T29] audit: type=1400 audit(1719274139.371:594): avc: denied { accept } for pid=19717 comm="syz.1.4607" path="socket:[65029]" dev="sockfs" ino=65029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 746.436689][T19723] batman_adv: batadv0: Adding interface: team0 [ 746.443448][T19684] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 746.473544][T19684] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 746.506661][T19723] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.548968][T19723] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 746.817461][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.829156][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.871787][T19741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.270197][T19755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.331952][ T5087] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 747.343599][T19758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.533300][ T5087] usb 5-1: config 253 has an invalid interface number: 174 but max is 1 [ 747.550001][ T5087] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 747.570689][T19768] netlink: 'syz.2.4625': attribute type 10 has an invalid length. [ 747.580098][ T5087] usb 5-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 747.600076][ T5087] usb 5-1: config 253 has no interface number 0 [ 747.606516][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 747.614879][T19768] batman_adv: batadv0: Adding interface: team0 [ 747.652295][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 747.655809][T19768] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.679853][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 747.709365][T19768] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 747.740864][ T5087] usb 5-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 747.760070][ T5087] usb 5-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 747.779188][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 747.799887][ T5087] usb 5-1: config 253 interface 174 has no altsetting 0 [ 747.815458][ T5087] usb 5-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 747.825737][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.875502][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4628'. [ 747.950642][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.957077][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.056890][ T5087] usb 5-1: string descriptor 0 read error: -71 [ 748.099760][ T5087] usb 5-1: USB disconnect, device number 33 [ 748.170180][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4633'. [ 748.398766][T19799] netlink: 'syz.2.4639': attribute type 4 has an invalid length. [ 748.458215][T19796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4637'. [ 748.467711][T19802] netlink: 'syz.0.4640': attribute type 10 has an invalid length. [ 748.582591][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4641'. [ 748.726141][ T29] audit: type=1400 audit(1719274141.971:595): avc: denied { read } for pid=19807 comm="syz.0.4644" lport=46900 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 748.805332][ T29] audit: type=1400 audit(1719274141.971:596): avc: denied { shutdown } for pid=19807 comm="syz.0.4644" lport=46900 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 748.864165][T19813] dccp_xmit_packet: Payload too large (65475) for featneg. [ 748.889415][ T29] audit: type=1400 audit(1719274142.111:597): avc: denied { write } for pid=19811 comm="syz.2.4646" laddr=127.0.0.1 lport=41846 faddr=127.0.0.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 748.922335][T19813] dccp_close: ABORT with 65475 bytes unread [ 748.949637][T19813] sctp: [Deprecated]: syz.2.4646 (pid 19813) Use of int in maxseg socket option. [ 748.949637][T19813] Use struct sctp_assoc_value instead [ 748.971635][ T29] audit: type=1400 audit(1719274142.171:598): avc: denied { accept } for pid=19811 comm="syz.2.4646" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 749.033426][T19824] netlink: 'syz.3.4651': attribute type 4 has an invalid length. [ 749.228067][T19832] loop4: detected capacity change from 0 to 2048 [ 749.275883][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4654'. [ 749.288173][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4656'. [ 749.299018][T19832] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 749.390908][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4657'. [ 749.914729][T19863] netlink: 'syz.0.4665': attribute type 4 has an invalid length. [ 750.719596][T19878] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4670'. [ 750.773906][T19876] loop3: detected capacity change from 0 to 2048 [ 750.835163][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'. [ 750.836364][ T5087] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 750.852753][T19876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 750.914724][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4672'. [ 751.055689][ T5087] usb 5-1: config 253 has an invalid interface number: 174 but max is 1 [ 751.065701][ T5087] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 751.101215][ T5087] usb 5-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 751.115369][T19891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2049 sclass=netlink_tcpdiag_socket pid=19891 comm=syz.1.4674 [ 751.116289][ T5087] usb 5-1: config 253 has no interface number 0 [ 751.135891][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 751.156760][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 751.176531][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 751.192326][ T5087] usb 5-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 751.204545][ T5087] usb 5-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 751.210887][T19891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=19891 comm=syz.1.4674 [ 751.218834][ T5087] usb 5-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 751.242229][ T5087] usb 5-1: config 253 interface 174 has no altsetting 0 [ 751.250026][ T5087] usb 5-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 751.284508][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.525492][ T5087] usb 5-1: string descriptor 0 read error: -71 [ 751.570314][ T5087] usb 5-1: USB disconnect, device number 34 [ 751.617562][T19912] loop3: detected capacity change from 0 to 512 [ 751.637233][T19912] EXT4-fs (loop3): unsupported inode size: 0 [ 751.661429][T19912] EXT4-fs (loop3): blocksize: 2048 [ 752.671343][T19950] loop3: detected capacity change from 0 to 2048 [ 752.718434][T19950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.873292][ T29] audit: type=1400 audit(1719274146.121:599): avc: denied { read } for pid=19960 comm="syz.4.4703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 752.951492][ T29] audit: type=1400 audit(1719274146.161:600): avc: denied { mounton } for pid=19948 comm="syz.3.4700" path="/root/syzkaller.BEQ2Jd/287/file0/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 753.139962][T16460] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.850264][ T5088] Bluetooth: hci5: command tx timeout [ 754.320169][T19992] __nla_validate_parse: 7 callbacks suppressed [ 754.320191][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4716'. [ 754.378868][T19992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4716'. [ 754.400133][ T29] audit: type=1400 audit(1719274147.641:601): avc: denied { read } for pid=19995 comm="syz.4.4719" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 754.470010][ T29] audit: type=1400 audit(1719274147.671:602): avc: denied { open } for pid=19995 comm="syz.4.4719" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 754.506747][T19994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 754.519688][T19945] loop1: detected capacity change from 0 to 40427 [ 754.547223][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4716'. [ 754.566422][T19945] F2FS-fs (loop1): invalid crc value [ 754.599995][T19945] F2FS-fs (loop1): Found nat_bits in checkpoint [ 754.770846][T19945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 755.090919][T10806] syz-executor: attempt to access beyond end of device [ 755.090919][T10806] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 755.118834][T10806] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 755.223584][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4732'. [ 755.236747][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4732'. [ 755.357169][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 755.930011][T17567] Bluetooth: hci5: command 0x0406 tx timeout [ 756.747804][T20067] loop3: detected capacity change from 0 to 4096 [ 756.779147][T20067] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 756.873051][T20067] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 756.973684][ T29] audit: type=1400 audit(1719274150.221:603): avc: denied { map } for pid=20061 comm="syz.3.4743" path="/root/syzkaller.BEQ2Jd/292/file0/bus" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 757.052223][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4746'. [ 757.058837][ T29] audit: type=1400 audit(1719274150.221:604): avc: denied { execute } for pid=20061 comm="syz.3.4743" path="/root/syzkaller.BEQ2Jd/292/file0/bus" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 757.204448][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4749'. [ 757.290119][ T5087] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 757.420593][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4751'. [ 757.512749][ T5087] usb 1-1: config 253 has an invalid interface number: 174 but max is 1 [ 757.528562][ T5087] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 757.580276][ T5087] usb 1-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 757.652730][ T5087] usb 1-1: config 253 has no interface number 0 [ 757.674522][ T5087] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 758.410454][ T5087] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 758.570001][ T5087] usb 1-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 758.601362][ T5087] usb 1-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 758.629900][ T5087] usb 1-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 758.652550][ T5087] usb 1-1: config 253 interface 174 has no altsetting 0 [ 758.659582][ T5087] usb 1-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 758.696494][T20102] netlink: 628 bytes leftover after parsing attributes in process `syz.4.4757'. [ 758.729162][T20106] tipc: Enabling of bearer rejected, failed to enable media [ 758.730798][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.024895][ T5087] usb 1-1: string descriptor 0 read error: -71 [ 759.052442][ T5087] usb 1-1: USB disconnect, device number 37 [ 759.171625][ T5142] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 759.176634][T20123] loop1: detected capacity change from 0 to 512 [ 759.242377][T20123] EXT4-fs (loop1): unsupported inode size: 0 [ 759.248556][T20123] EXT4-fs (loop1): blocksize: 2048 [ 759.372318][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.399957][ T5142] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 759.437137][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.480965][ T5142] usb 5-1: config 0 descriptor?? [ 759.583532][T20136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.669286][T20136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.929092][ T5142] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 759.960276][T20143] __nla_validate_parse: 2 callbacks suppressed [ 759.960296][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'. [ 759.985374][ T5142] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0024/input/input29 [ 760.127657][T20111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.137181][T20148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 760.160348][T20111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.179732][ T5142] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 760.236934][ T5142] usb 5-1: USB disconnect, device number 35 [ 760.447507][T20154] vlan2: entered promiscuous mode [ 760.463375][T20154] team0: entered promiscuous mode [ 760.479013][T20154] team_slave_0: entered promiscuous mode [ 760.494057][T20161] process 'syz.1.4781' launched './file1' with NULL argv: empty string added [ 760.504534][T20154] team_slave_1: entered promiscuous mode [ 760.562467][T20154] team0: left promiscuous mode [ 760.580991][T20154] team_slave_0: left promiscuous mode [ 760.602540][T20154] team_slave_1: left promiscuous mode [ 760.685548][T20165] team0: entered promiscuous mode [ 760.702095][T20165] team_slave_0: entered promiscuous mode [ 760.708076][T20165] team_slave_1: entered promiscuous mode [ 760.730282][T20164] team0: left promiscuous mode [ 760.769829][T20164] team_slave_0: left promiscuous mode [ 760.776471][T20164] team_slave_1: left promiscuous mode [ 760.971289][T20172] loop4: detected capacity change from 0 to 512 [ 761.018597][T20172] EXT4-fs (loop4): unsupported inode size: 0 [ 761.031426][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4787'. [ 761.043716][T20172] EXT4-fs (loop4): blocksize: 2048 [ 761.233311][T20182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.356885][T20182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.459998][T17567] Bluetooth: hci1: command 0x0406 tx timeout [ 762.718164][T20199] team0: entered promiscuous mode [ 762.723942][T20199] team_slave_0: entered promiscuous mode [ 762.736892][T20199] team_slave_1: entered promiscuous mode [ 762.748576][T20198] team0: left promiscuous mode [ 762.761589][T20198] team_slave_0: left promiscuous mode [ 762.767244][T20198] team_slave_1: left promiscuous mode [ 762.949935][ T5087] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 762.967449][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'. [ 763.342106][ T5087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.370341][ T5087] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 763.379622][ T5087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.481059][ T5087] usb 4-1: config 0 descriptor?? [ 764.138329][T20231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.238347][T20231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.314036][ T5087] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 764.335487][ T5087] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input30 [ 764.464194][ T5154] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 764.474516][ T5087] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 764.523079][T20195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.545613][T20195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.599294][ T5142] usb 4-1: USB disconnect, device number 24 [ 764.665166][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 764.680897][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.708521][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.724438][ T5154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 764.744170][ T5154] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 764.764723][ T5154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 764.797874][ T5154] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 764.837736][ T5154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.850861][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.886703][ T5154] usb 2-1: Product: syz [ 764.891290][ T5154] usb 2-1: Manufacturer: syz [ 764.895949][ T5154] usb 2-1: SerialNumber: syz [ 765.170784][ T5154] cdc_ncm 2-1:1.0: bind() failure [ 765.196727][ T5154] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 765.210871][ T5154] cdc_ncm 2-1:1.1: bind() failure [ 765.221846][T20270] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4827'. [ 765.230312][ T5154] usb 2-1: USB disconnect, device number 30 [ 765.258669][T20270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 765.855316][T20295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.895071][ T5139] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 765.922632][ T5139] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 766.028888][T20295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.075658][ T51] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 766.210301][ T2861] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 766.256930][T20315] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4846'. [ 766.282573][T20315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 766.320204][ T1097] wlan1: authentication with 08:02:11:00:00:00 timed out [ 766.507753][T20327] netlink: 'syz.1.4851': attribute type 4 has an invalid length. [ 766.749947][ T5139] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 766.981472][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 766.998067][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.032957][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.049126][T20346] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4862'. [ 767.067091][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 767.097774][T20352] loop2: detected capacity change from 0 to 512 [ 767.098220][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 767.125483][T20346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 767.135026][T20352] EXT4-fs (loop2): unsupported inode size: 0 [ 767.150300][ T5139] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 767.161041][T20352] EXT4-fs (loop2): blocksize: 2048 [ 767.168729][ T5139] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 767.189686][T20354] netlink: 'syz.4.4865': attribute type 4 has an invalid length. [ 767.210978][ T5139] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.232420][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.253570][ T5139] usb 4-1: Product: syz [ 767.257791][ T5139] usb 4-1: Manufacturer: syz [ 767.293387][ T5139] usb 4-1: SerialNumber: syz [ 767.360592][T20358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.478175][T20358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 767.536411][ T5139] cdc_ncm 4-1:1.0: bind() failure [ 767.574488][ T29] audit: type=1400 audit(1719274160.821:605): avc: denied { setopt } for pid=20363 comm="syz.0.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 767.601556][ T5139] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 767.608427][ T5139] cdc_ncm 4-1:1.1: bind() failure [ 767.626875][ T5139] usb 4-1: USB disconnect, device number 25 [ 769.021858][T20386] netlink: 'syz.3.4877': attribute type 4 has an invalid length. [ 769.190603][T20389] netlink: 628 bytes leftover after parsing attributes in process `syz.1.4878'. [ 769.370232][T17567] Bluetooth: hci3: command tx timeout [ 770.895981][T20419] tipc: Enabling of bearer rejected, failed to enable media [ 771.101158][ T29] audit: type=1400 audit(1719274164.351:606): avc: denied { ioctl } for pid=20423 comm="syz.1.4893" path="socket:[67475]" dev="sockfs" ino=67475 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 771.331879][T20429] netlink: 628 bytes leftover after parsing attributes in process `syz.1.4895'. [ 771.590303][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4898'. [ 771.846198][T20440] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4900'. [ 771.937689][T20440] xt_TPROXY: Can be used only with -p tcp or -p udp [ 772.308546][T20465] loop4: detected capacity change from 0 to 512 [ 772.371077][T20465] EXT4-fs (loop4): unsupported inode size: 0 [ 772.377126][T20465] EXT4-fs (loop4): blocksize: 2048 [ 772.479296][T20436] loop3: detected capacity change from 0 to 32768 [ 772.846290][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4914'. [ 772.904282][T20487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.977844][T20436] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 773.027724][T20436] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 773.066570][T20487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.162257][T20436] bcachefs (loop3): alloc_read... done [ 773.167827][T20436] bcachefs (loop3): stripes_read... done [ 773.168310][T20461] loop1: detected capacity change from 0 to 32768 [ 773.188024][T20436] bcachefs (loop3): snapshots_read... done [ 773.196046][T20461] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4908 (20461) [ 773.207255][T20436] bcachefs (loop3): journal_replay... done [ 773.233291][T20461] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 773.248348][T20436] bcachefs (loop3): resume_logged_ops... done [ 773.250062][T20461] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 773.274795][T20461] BTRFS info (device loop1): using free-space-tree [ 773.283296][T20436] bcachefs (loop3): going read-write [ 773.299517][T20436] bcachefs (loop3): done starting filesystem [ 773.308123][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4917'. [ 773.395062][T16460] bcachefs (loop3): shutting down [ 773.401112][T16460] bcachefs (loop3): going read-only [ 773.407484][T16460] bcachefs (loop3): finished waiting for writes to stop [ 773.418104][T16460] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 773.427638][T16460] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 773.451306][T16460] bcachefs (loop3): shutdown complete, journal seq 11 [ 773.459346][T16460] bcachefs (loop3): marking filesystem clean [ 773.526911][T16460] bcachefs (loop3): shutdown complete [ 773.819006][T10806] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 775.036427][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4927'. [ 775.220178][T20518] loop2: detected capacity change from 0 to 40427 [ 775.259114][T20518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 775.463443][T20518] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 775.514191][ T29] audit: type=1800 audit(1719274168.761:607): pid=20518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.4923" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 775.552058][T20518] syz.2.4923: attempt to access beyond end of device [ 775.552058][T20518] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 775.678777][T18479] syz-executor: attempt to access beyond end of device [ 775.678777][T18479] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 775.739985][T18479] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 776.055451][T20571] tipc: Started in network mode [ 776.062960][T20571] tipc: Node identity ac1414, cluster identity 4711 [ 776.096109][T20571] tipc: Enabling of bearer rejected, failed to enable media [ 776.328183][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4944'. [ 776.435755][T10711] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 776.520172][ T5139] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 776.670619][T10711] usb 4-1: Using ep0 maxpacket: 32 [ 776.695795][T10711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.733626][ T5139] usb 1-1: config 253 has an invalid interface number: 174 but max is 1 [ 776.739970][T10711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.769950][T10711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 776.777992][ T5139] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 776.779712][T10711] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 776.779746][T10711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 776.837368][ T5139] usb 1-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 776.843877][T10711] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 776.871722][ T5139] usb 1-1: config 253 has no interface number 0 [ 776.916207][ T5139] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 776.934980][ T5139] usb 1-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 776.936589][T10711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.956764][ T5139] usb 1-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 776.988979][ T5139] usb 1-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 777.002575][T20592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4951'. [ 777.017327][T10711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.025602][ T5139] usb 1-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 777.027538][T10711] usb 4-1: Product: syz [ 777.044203][T10711] usb 4-1: Manufacturer: syz [ 777.048847][T10711] usb 4-1: SerialNumber: syz [ 777.092961][ T5139] usb 1-1: config 253 interface 174 has no altsetting 0 [ 777.127311][ T5139] usb 1-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 777.162014][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.177574][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4940'. [ 777.332943][T10711] cdc_ncm 4-1:1.0: bind() failure [ 777.363475][T10711] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 777.381473][T10711] cdc_ncm 4-1:1.1: bind() failure [ 777.408693][T10711] usb 4-1: USB disconnect, device number 26 [ 777.420832][ T5139] usb 1-1: string descriptor 0 read error: -71 [ 777.455805][ T5139] usb 1-1: USB disconnect, device number 38 [ 777.766221][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4961'. [ 777.784132][T20616] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 777.806588][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4963'. [ 777.847938][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4964'. [ 778.044116][T20629] netlink: 'syz.4.4968': attribute type 72 has an invalid length. [ 778.055811][T20629] netlink: 'syz.4.4968': attribute type 8 has an invalid length. [ 778.258481][ T29] audit: type=1400 audit(1719274171.501:608): avc: denied { ioctl } for pid=20637 comm="syz.4.4973" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 778.341461][T20645] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4971'. [ 778.348178][T20638] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4972'. [ 778.374091][T20645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 778.396505][T20638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4972'. [ 778.461867][T20647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 778.771901][T20664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4985'. [ 778.964422][T20669] loop3: detected capacity change from 0 to 4096 [ 779.001269][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 779.017878][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 779.037318][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 779.056792][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00 [ 779.078457][T20677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 779.079947][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00 [ 779.112274][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00 [ 779.132660][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00 [ 779.150017][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00 [ 779.173010][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00 [ 779.217610][T20669] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00 [ 779.270649][ T5139] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 779.482679][ T5139] usb 5-1: config 253 has an invalid interface number: 174 but max is 1 [ 779.501556][ T5139] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 779.552261][ T5139] usb 5-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 779.570623][ T5139] usb 5-1: config 253 has no interface number 0 [ 779.587106][ T5139] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 779.606649][T20702] loop1: detected capacity change from 0 to 512 [ 779.615063][ T5139] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 779.629665][T20702] EXT4-fs (loop1): unsupported inode size: 0 [ 779.643582][ T5139] usb 5-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 779.655005][T20702] EXT4-fs (loop1): blocksize: 2048 [ 779.671868][ T5139] usb 5-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 779.701161][ T5139] usb 5-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 779.727425][ T5139] usb 5-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 779.784460][ T5139] usb 5-1: config 253 interface 174 has no altsetting 0 [ 779.813350][ T5139] usb 5-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 779.851395][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.140343][ T5139] usb 5-1: string descriptor 0 read error: -71 [ 780.175846][ T5139] usb 5-1: USB disconnect, device number 36 [ 780.809971][T10711] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 780.859140][T20749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.007621][T10711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.043721][T10711] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 781.061302][T10711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.082442][T10711] usb 4-1: config 0 descriptor?? [ 781.300683][T20766] tipc: Enabling of bearer rejected, failed to enable media [ 781.508627][T10711] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 781.545667][T10711] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0026/input/input31 [ 781.666692][T10711] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 781.717955][T20733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.772515][T20786] xt_TPROXY: Can be used only with -p tcp or -p udp [ 781.787494][T20733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.851266][T17567] Bluetooth: hci1: command 0x0406 tx timeout [ 781.890708][T12121] usb 4-1: USB disconnect, device number 27 [ 782.079881][T20799] __nla_validate_parse: 10 callbacks suppressed [ 782.079905][T20799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5047'. [ 782.227201][T20813] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 782.367963][T20819] dccp_v4_rcv: dropped packet with invalid checksum [ 782.574447][ T2861] tipc: Subscription rejected, illegal request [ 782.735254][T20836] netlink: 'syz.4.5061': attribute type 4 has an invalid length. [ 783.165832][T20850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5067'. [ 783.190079][T20851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5066'. [ 783.245252][T20854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.351866][ T2861] tipc: Subscription rejected, illegal request [ 783.359156][T20854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.388558][T20822] loop2: detected capacity change from 0 to 32768 [ 783.541778][T20871] netlink: 'syz.3.5072': attribute type 4 has an invalid length. [ 783.603583][T20873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5074'. [ 783.719409][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 783.740248][T20822] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 783.789263][T20822] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 783.790590][T20880] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5076'. [ 783.815819][T20880] xt_TPROXY: Can be used only with -p tcp or -p udp [ 783.842730][T20822] bcachefs (loop2): alloc_read... done [ 783.862134][T20822] bcachefs (loop2): stripes_read... done [ 783.879896][T20822] bcachefs (loop2): snapshots_read... done [ 783.888936][T20822] bcachefs (loop2): journal_replay... done [ 783.910702][T20822] bcachefs (loop2): resume_logged_ops... done [ 783.935252][T20822] bcachefs (loop2): going read-write [ 783.940933][T20887] netlink: 'syz.3.5080': attribute type 10 has an invalid length. [ 783.940958][T20887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5080'. [ 783.940995][T20887] bond_slave_0: entered promiscuous mode [ 783.941016][T20887] bond_slave_0: entered allmulticast mode [ 783.971642][T20887] bond0: (slave bond_slave_0): Releasing backup interface [ 784.011361][T20822] bcachefs (loop2): done starting filesystem [ 784.048677][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5081'. [ 784.069078][T20887] bridge0: port 3(bond_slave_0) entered blocking state [ 784.093195][T20887] bridge0: port 3(bond_slave_0) entered disabled state [ 784.112681][T18479] bcachefs (loop2): shutting down [ 784.117855][T18479] bcachefs (loop2): going read-only [ 784.142001][T18479] bcachefs (loop2): finished waiting for writes to stop [ 784.187842][T18479] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 784.208965][T20898] vxcan1: tx address claim with dest, not broadcast [ 784.216978][T18479] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 784.245124][T20900] netlink: 'syz.0.5086': attribute type 4 has an invalid length. [ 784.267353][T18479] bcachefs (loop2): shutdown complete, journal seq 11 [ 784.282080][T18479] bcachefs (loop2): marking filesystem clean [ 784.292874][T20904] netlink: 'syz.4.5087': attribute type 10 has an invalid length. [ 784.300881][T20904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5087'. [ 784.311762][T20904] bond_slave_0: entered allmulticast mode [ 784.326270][T20904] bond0: (slave bond_slave_0): Releasing backup interface [ 784.388718][T20904] bridge0: port 3(bond_slave_0) entered blocking state [ 784.407079][T18479] bcachefs (loop2): shutdown complete [ 784.420401][T20904] bridge0: port 3(bond_slave_0) entered disabled state [ 784.451001][T20904] bond_slave_0: entered promiscuous mode [ 784.676584][T20915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20915 comm=syz.4.5091 [ 785.147125][T20928] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.5097'. [ 785.207596][T20932] netlink: 'syz.3.5099': attribute type 4 has an invalid length. [ 785.275046][ T29] audit: type=1401 audit(1719274178.521:609): op=setxattr invalid_context=3A00072000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 785.402024][T20938] vxcan1: tx address claim with dest, not broadcast [ 785.571218][T20942] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 785.901755][T20957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.944861][T20804] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 785.969055][T20804] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 786.029667][T20957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.092912][ T1046] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 786.124719][ T2821] tipc: Subscription rejected, illegal request [ 786.241232][ T51] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 786.357168][ T2821] wlan1: authentication with 08:02:11:00:00:00 timed out [ 786.427450][ T29] audit: type=1400 audit(1719274179.671:610): avc: denied { connect } for pid=20976 comm="syz.3.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 786.611290][ T29] audit: type=1400 audit(1719274179.851:611): avc: denied { write } for pid=20976 comm="syz.3.5118" path="socket:[70826]" dev="sockfs" ino=70826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 786.886829][T21004] netlink: 'syz.1.5129': attribute type 4 has an invalid length. [ 787.112825][T21011] netlink: 'syz.1.5131': attribute type 10 has an invalid length. [ 787.141248][T21011] __nla_validate_parse: 7 callbacks suppressed [ 787.141271][T21011] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.5131'. [ 787.187491][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5132'. [ 787.345218][T21017] loop1: detected capacity change from 0 to 512 [ 787.359961][T21016] vxcan1: tx address claim with dest, not broadcast [ 787.381602][T21017] EXT4-fs (loop1): unsupported inode size: 0 [ 787.410024][T21017] EXT4-fs (loop1): blocksize: 2048 [ 787.665258][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5138'. [ 787.710385][T21022] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 787.859926][T20804] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 787.904043][T21031] netlink: 'syz.4.5141': attribute type 4 has an invalid length. [ 787.990010][T21005] loop2: detected capacity change from 0 to 32768 [ 788.029386][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5142'. [ 788.084582][T20804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.133355][T20804] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 788.200085][T20804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.233492][T20804] usb 4-1: config 0 descriptor?? [ 788.304744][T21005] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 788.329039][T21005] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 788.415697][T21005] bcachefs (loop2): alloc_read... done [ 788.430145][T21005] bcachefs (loop2): stripes_read... done [ 788.439430][T21005] bcachefs (loop2): snapshots_read... done [ 788.457221][T21005] bcachefs (loop2): journal_replay... done [ 788.473584][T21005] bcachefs (loop2): resume_logged_ops... done [ 788.495423][T21005] bcachefs (loop2): going read-write [ 788.520862][T21005] bcachefs (loop2): done starting filesystem [ 788.607376][T18479] bcachefs (loop2): shutting down [ 788.612629][T18479] bcachefs (loop2): going read-only [ 788.624572][T18479] bcachefs (loop2): finished waiting for writes to stop [ 788.642372][T18479] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 788.646681][T20804] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 788.656442][T18479] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 788.705051][T18479] bcachefs (loop2): shutdown complete, journal seq 11 [ 788.707496][T20804] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0027/input/input32 [ 788.718356][T18479] bcachefs (loop2): marking filesystem clean [ 788.814637][T20804] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 788.842858][T18479] bcachefs (loop2): shutdown complete [ 788.871398][T21023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.896507][T21023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.921057][T20804] usb 4-1: USB disconnect, device number 28 [ 789.052067][T21067] netlink: 'syz.4.5153': attribute type 4 has an invalid length. [ 789.489689][T21077] loop4: detected capacity change from 0 to 512 [ 789.545504][T21077] EXT4-fs (loop4): unsupported inode size: 0 [ 789.567611][T21077] EXT4-fs (loop4): blocksize: 2048 [ 789.620578][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 789.821087][T21082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5160'. [ 790.350094][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5161'. [ 790.584156][T21098] netlink: 'syz.1.5164': attribute type 4 has an invalid length. [ 791.495872][T21094] loop4: detected capacity change from 0 to 32768 [ 791.686497][T21094] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 791.711337][T21094] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 791.799829][T21116] loop2: detected capacity change from 0 to 8 [ 791.837532][T21094] bcachefs (loop4): alloc_read... done [ 791.869954][T21094] bcachefs (loop4): stripes_read... done [ 791.880134][T21116] unable to read xattr id index table [ 791.887565][T21094] bcachefs (loop4): snapshots_read... done [ 791.909359][T21094] bcachefs (loop4): journal_replay... done [ 791.939899][T21094] bcachefs (loop4): resume_logged_ops... done [ 791.983329][T21094] bcachefs (loop4): going read-write [ 792.021674][T21094] bcachefs (loop4): done starting filesystem [ 792.027853][ T29] audit: type=1400 audit(1719274185.271:612): avc: denied { shutdown } for pid=21115 comm="syz.2.5169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 792.364781][T18161] bcachefs (loop4): shutting down [ 792.374737][T18161] bcachefs (loop4): going read-only [ 792.404839][T18161] bcachefs (loop4): finished waiting for writes to stop [ 792.434108][T18161] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 792.493921][T18161] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 792.523311][T18161] bcachefs (loop4): shutdown complete, journal seq 15 [ 792.531517][T18161] bcachefs (loop4): marking filesystem clean [ 792.561977][T18161] bcachefs (loop4): shutdown complete [ 792.580296][ T5142] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 792.778189][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.821529][ T5142] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 792.852447][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.900431][ T5142] usb 3-1: config 0 descriptor?? [ 793.243191][T21125] loop0: detected capacity change from 0 to 512 [ 793.297196][T21125] EXT4-fs (loop0): unsupported inode size: 0 [ 793.308536][T21125] EXT4-fs (loop0): blocksize: 2048 [ 793.329367][ T5142] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 793.365400][ T5142] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0028/input/input33 [ 793.488928][ T5142] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 793.540077][T21121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.562645][T21121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.593639][ T5142] usb 3-1: USB disconnect, device number 28 [ 794.005460][T21129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5171'. [ 794.312505][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5175'. [ 794.360035][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5175'. [ 794.497719][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5175'. [ 794.555702][T21143] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5177'. [ 794.594923][T21143] xt_TPROXY: Can be used only with -p tcp or -p udp [ 794.791249][T17567] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 795.075342][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5183'. [ 795.327529][ T29] audit: type=1400 audit(1719274188.571:613): avc: denied { ioctl } for pid=21167 comm="syz.4.5186" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 795.390542][ T29] audit: type=1400 audit(1719274188.571:614): avc: denied { set_context_mgr } for pid=21167 comm="syz.4.5186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 795.519878][ T5154] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 795.531587][T17567] Bluetooth: hci2: command 0x0406 tx timeout [ 795.724891][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.751125][ T5154] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 795.779203][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.801784][ T5154] usb 3-1: config 0 descriptor?? [ 795.824968][T17567] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 795.840666][T21180] netlink: 'syz.4.5191': attribute type 4 has an invalid length. [ 796.165001][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5197'. [ 796.223677][ T5154] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 796.246460][ T5154] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0029/input/input34 [ 796.409593][ T5154] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 796.435782][T21164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.477850][T21164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.542964][ T5154] usb 3-1: USB disconnect, device number 29 [ 796.583479][T21207] netlink: 'syz.1.5205': attribute type 4 has an invalid length. [ 796.816497][T21211] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5206'. [ 796.840508][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5209'. [ 796.855807][T21211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.268459][T21233] netlink: 'syz.1.5216': attribute type 4 has an invalid length. [ 797.457963][T21240] ubi0: attaching mtd0 [ 797.494993][T21240] ubi0: scanning is finished [ 797.520142][T21240] ubi0: empty MTD device detected [ 797.547595][ T29] audit: type=1400 audit(1719274190.791:615): avc: denied { ioctl } for pid=21244 comm="syz.2.5221" path="socket:[71282]" dev="sockfs" ino=71282 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 797.693063][T21240] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 797.707604][T21249] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5222'. [ 797.709649][T21240] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 797.730844][T21240] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 797.743779][T21240] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 797.750941][T21249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.754763][T21240] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 797.780052][T21240] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 797.796868][T21240] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3431746254 [ 797.814122][T21240] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 797.827813][T21250] ubi0: background thread "ubi_bgt0d" started, PID 21250 [ 797.900081][T20804] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 797.928830][ T29] audit: type=1400 audit(1719274191.171:616): avc: denied { ioctl } for pid=21257 comm="syz.2.5225" path="socket:[72157]" dev="sockfs" ino=72157 ioctlcmd=0x8b26 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 798.097398][T21267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.109923][T20804] usb 2-1: Using ep0 maxpacket: 8 [ 798.126490][T20804] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 798.138954][T20804] usb 2-1: config 0 has no interface number 0 [ 798.145268][T20804] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.156690][T20804] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 798.165879][T20804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.178005][T20804] usb 2-1: config 0 descriptor?? [ 798.180155][ T5154] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 798.200116][T20804] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 798.226276][T21267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.371950][ T5154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.383224][ T5154] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 798.392368][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.403448][ T5154] usb 1-1: config 0 descriptor?? [ 798.449539][T20804] usb 2-1: USB disconnect, device number 31 [ 798.463130][T20804] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 798.590157][ T5142] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 798.802566][ T5142] usb 3-1: config 253 has an invalid interface number: 174 but max is 1 [ 798.818125][ T5154] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 798.829591][ T5142] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 798.844164][ T5142] usb 3-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 798.856535][ T5154] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002A/input/input35 [ 798.868342][ T5142] usb 3-1: config 253 has no interface number 0 [ 798.875040][ T5142] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 798.886688][ T5142] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 798.898758][ T5142] usb 3-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 798.917574][ T5142] usb 3-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 799.000127][ T5142] usb 3-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 799.017800][T21256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.024775][ T5154] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 799.038680][T21256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.059491][ T5142] usb 3-1: config 253 interface 174 has no altsetting 0 [ 799.068155][ T5142] usb 3-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 799.085386][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.098158][ T5154] usb 1-1: USB disconnect, device number 39 [ 799.186840][T21283] __nla_validate_parse: 3 callbacks suppressed [ 799.186862][T21283] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5235'. [ 799.222565][T21283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 799.343728][ T5142] usb 3-1: string descriptor 0 read error: -71 [ 799.366680][ T5142] usb 3-1: USB disconnect, device number 30 [ 799.415569][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5240'. [ 799.518414][T21297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.526831][T21299] netlink: 'syz.1.5243': attribute type 4 has an invalid length. [ 799.622099][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5245'. [ 799.652250][T21306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 799.844855][T21314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5249'. [ 800.692243][T21357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.724170][T20803] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 800.750842][T20803] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 800.822263][T21364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.863918][ T1046] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 800.881903][T21359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5272'. [ 800.982446][ T1046] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 801.060092][T21375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5280'. [ 801.084868][T21375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5280'. [ 801.105785][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.120598][ T1097] wlan1: authentication with 08:02:11:00:00:00 timed out [ 801.192749][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5280'. [ 801.207187][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.721964][T21409] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.5293'. [ 801.744662][T21409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5293'. [ 802.383114][T21437] netlink: 'syz.4.5304': attribute type 10 has an invalid length. [ 802.457886][T21437] batman_adv: batadv0: Adding interface: team0 [ 802.483029][T21437] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.551716][T21437] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 802.571160][T21436] netlink: 'syz.4.5304': attribute type 10 has an invalid length. [ 802.579576][T21436] team0: entered promiscuous mode [ 802.610581][T21436] team_slave_0: entered promiscuous mode [ 802.618358][T21436] team_slave_1: entered promiscuous mode [ 802.661011][T21448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.678365][T21436] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.697093][T21436] batman_adv: batadv0: Interface activated: team0 [ 802.709325][T21436] batman_adv: batadv0: Interface deactivated: team0 [ 802.718223][T21436] batman_adv: batadv0: Removing interface: team0 [ 802.731794][T21436] bridge0: port 4(team0) entered blocking state [ 802.748253][ T29] audit: type=1400 audit(1719274195.981:617): avc: denied { block_suspend } for pid=21441 comm="syz.3.5308" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 802.748586][T21436] bridge0: port 4(team0) entered disabled state [ 802.781721][T21448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.795695][T21436] team0: entered allmulticast mode [ 802.810001][T21436] team_slave_0: entered allmulticast mode [ 802.823301][T21436] team_slave_1: entered allmulticast mode [ 802.844244][T21436] bridge0: port 4(team0) entered blocking state [ 802.851091][T21436] bridge0: port 4(team0) entered forwarding state [ 803.045170][T21461] ubi: mtd0 is already attached to ubi0 [ 803.189238][ T29] audit: type=1400 audit(1719274196.431:618): avc: denied { connect } for pid=21468 comm="syz.3.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 803.240192][ T29] audit: type=1400 audit(1719274196.471:619): avc: denied { shutdown } for pid=21468 comm="syz.3.5317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 803.858051][ T29] audit: type=1326 audit(1719274197.101:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21510 comm="syz.0.5335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a25f75d39 code=0x0 [ 803.966969][ T29] audit: type=1400 audit(1719274197.211:621): avc: denied { read } for pid=21510 comm="syz.0.5335" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 803.998974][T21517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.019466][ T29] audit: type=1400 audit(1719274197.211:622): avc: denied { open } for pid=21510 comm="syz.0.5335" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 804.064587][T21517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 804.471147][T21531] netlink: 'syz.2.5343': attribute type 4 has an invalid length. [ 804.504971][T21526] loop4: detected capacity change from 0 to 32768 [ 804.602638][T21526] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 804.618198][T21526] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 804.675570][T21526] bcachefs (loop4): alloc_read... done [ 804.684323][T21526] bcachefs (loop4): stripes_read... done [ 804.700113][T21526] bcachefs (loop4): snapshots_read... done [ 804.714313][T21526] bcachefs (loop4): journal_replay... done [ 804.728387][T21526] bcachefs (loop4): resume_logged_ops... done [ 804.752751][T21526] bcachefs (loop4): going read-write [ 804.773919][T21526] bcachefs (loop4): done starting filesystem [ 804.916995][T21553] __nla_validate_parse: 12 callbacks suppressed [ 804.917015][T21553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5348'. [ 804.974292][T18161] bcachefs (loop4): shutting down [ 804.988922][T18161] bcachefs (loop4): going read-only [ 805.010845][T18161] bcachefs (loop4): finished waiting for writes to stop [ 805.011301][T21559] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.5350'. [ 805.028092][T18161] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 805.039018][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5350'. [ 805.086484][T18161] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 16 [ 805.113737][T18161] bcachefs (loop4): shutdown complete, journal seq 17 [ 805.122347][T18161] bcachefs (loop4): marking filesystem clean [ 805.262581][T18161] bcachefs (loop4): shutdown complete [ 805.306559][T21571] loop3: detected capacity change from 0 to 512 [ 805.317190][T21571] EXT4-fs (loop3): unsupported inode size: 0 [ 805.325006][T21571] EXT4-fs (loop3): blocksize: 2048 [ 805.570980][T20804] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 805.580000][ T5154] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 805.783139][T20804] usb 1-1: Using ep0 maxpacket: 8 [ 805.791764][ T5154] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 805.810389][ T5154] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.819653][T20804] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 805.831508][ T5154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 805.852183][T20804] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.873273][T20804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.873329][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.918406][ T5154] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 805.947914][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 805.966548][ T5154] usb 2-1: Product: syz [ 805.971609][ T5154] usb 2-1: Manufacturer: syz [ 806.007514][ T5154] cdc_wdm 2-1:1.0: skipping garbage [ 806.018381][ T5154] cdc_wdm 2-1:1.0: skipping garbage [ 806.039317][ T5154] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 806.236860][ T5154] usb 2-1: USB disconnect, device number 32 [ 806.346288][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5361'. [ 806.361994][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5362'. [ 806.380716][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5362'. [ 806.393054][T21580] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 806.504355][T21583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5362'. [ 806.677739][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5366'. [ 806.768407][T21601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.854762][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5370'. [ 806.900204][T21601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.211639][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5376'. [ 807.227940][T21618] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 807.418999][T21626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.450931][ T5088] Bluetooth: hci5: command 0x0406 tx timeout [ 807.503734][T21626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.698782][T21639] netlink: 'syz.4.5386': attribute type 4 has an invalid length. [ 807.723646][T12223] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 807.944569][T12223] usb 2-1: Using ep0 maxpacket: 32 [ 807.958694][T12223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.973306][T12223] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.999267][T12223] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 808.030237][T12223] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 808.046504][T12223] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 808.076556][T12223] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 808.108759][T12223] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.125501][T12223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.139056][T12223] usb 2-1: Product: syz [ 808.148171][T12223] usb 2-1: Manufacturer: syz [ 808.157696][T12223] usb 2-1: SerialNumber: syz [ 808.192093][T21653] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 808.316947][T20804] usb 1-1: USB disconnect, device number 40 [ 808.401423][T12223] cdc_ncm 2-1:1.0: bind() failure [ 808.417083][T12223] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 808.428734][T12223] cdc_ncm 2-1:1.1: bind() failure [ 808.439650][ T29] audit: type=1400 audit(1719274201.681:623): avc: denied { read } for pid=21662 comm="syz.0.5395" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 808.479369][T12223] usb 2-1: USB disconnect, device number 33 [ 808.531147][ T29] audit: type=1400 audit(1719274201.741:624): avc: denied { open } for pid=21662 comm="syz.0.5395" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 808.765750][T21671] netlink: 'syz.3.5397': attribute type 4 has an invalid length. [ 808.792704][T21671] netlink: 'syz.3.5397': attribute type 4 has an invalid length. [ 809.189114][T21664] loop0: detected capacity change from 0 to 32768 [ 809.295202][T21680] syzkaller0: entered promiscuous mode [ 809.310071][T21680] syzkaller0: entered allmulticast mode [ 809.383000][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.389429][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.407458][T21701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.475438][T21701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.534841][T21664] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 809.590517][T21664] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 809.624717][ T5154] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 809.658223][T21664] bcachefs (loop0): alloc_read... done [ 809.681319][ T5154] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 809.688295][T21664] bcachefs (loop0): stripes_read... done [ 809.695529][T21664] bcachefs (loop0): snapshots_read... done [ 809.743676][T21664] bcachefs (loop0): journal_replay... done [ 809.749572][T21664] bcachefs (loop0): resume_logged_ops... done [ 809.795607][T21664] bcachefs (loop0): going read-write [ 809.829430][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 809.860643][T21664] bcachefs (loop0): done starting filesystem [ 809.951074][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 810.090239][ T11] wlan1: authentication with 08:02:11:00:00:00 timed out [ 810.374519][T13145] bcachefs (loop0): shutting down [ 810.387014][T13145] bcachefs (loop0): going read-only [ 810.393851][T13145] bcachefs (loop0): finished waiting for writes to stop [ 810.434989][T13145] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 810.500760][T13145] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 810.517483][T13145] bcachefs (loop0): shutdown complete, journal seq 14 [ 810.537087][T13145] bcachefs (loop0): marking filesystem clean [ 810.624675][T13145] bcachefs (loop0): shutdown complete [ 814.614777][T21725] netlink: 'syz.3.5413': attribute type 4 has an invalid length. [ 814.645050][T21726] netlink: 'syz.3.5413': attribute type 4 has an invalid length. [ 815.028179][T21753] loop3: detected capacity change from 0 to 4096 [ 815.066293][T21753] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 815.109819][T21753] ntfs3: loop3: Failed to load $MFT (-22). [ 815.321011][T21772] __nla_validate_parse: 2 callbacks suppressed [ 815.321031][T21772] netlink: 704 bytes leftover after parsing attributes in process `syz.4.5430'. [ 815.345870][T21774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.370767][T21776] netlink: 'syz.1.5432': attribute type 4 has an invalid length. [ 815.399697][T21776] netlink: 'syz.1.5432': attribute type 4 has an invalid length. [ 815.427869][T21779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 815.489928][ T5154] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 815.692659][ T5154] usb 3-1: config 253 has an invalid interface number: 174 but max is 1 [ 815.709874][ T5154] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 815.738358][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5436'. [ 815.739906][ T5154] usb 3-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 815.778759][ T5154] usb 3-1: config 253 has no interface number 0 [ 815.799906][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 815.829888][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 815.850463][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 815.879934][ T5154] usb 3-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 815.901161][ T5154] usb 3-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 815.919845][ T5154] usb 3-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 815.966267][ T5154] usb 3-1: config 253 interface 174 has no altsetting 0 [ 815.980130][ T5154] usb 3-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 815.989221][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.113025][T21767] loop0: detected capacity change from 0 to 40427 [ 816.136342][T21767] F2FS-fs (loop0): invalid crc value [ 816.164264][T21767] F2FS-fs (loop0): Found nat_bits in checkpoint [ 816.249358][ T5154] usb 3-1: string descriptor 0 read error: -71 [ 816.287491][ T5154] usb 3-1: USB disconnect, device number 31 [ 816.308792][T21767] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 816.706422][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5442'. [ 816.734475][T21805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5442'. [ 816.865990][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5442'. [ 817.139469][T21820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.164625][T21817] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.5448'. [ 817.201228][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5448'. [ 817.230589][T21822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.560089][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5455'. [ 817.688946][T21815] loop1: detected capacity change from 0 to 32768 [ 817.852521][T21850] netlink: 704 bytes leftover after parsing attributes in process `syz.0.5460'. [ 817.863759][T21815] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 817.887888][T21815] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 817.971959][T21815] bcachefs (loop1): alloc_read... done [ 818.005067][T21815] bcachefs (loop1): stripes_read... done [ 818.012093][T21815] bcachefs (loop1): snapshots_read... done [ 818.027989][T21815] bcachefs (loop1): journal_replay... done [ 818.037717][T21815] bcachefs (loop1): resume_logged_ops... done [ 818.049964][T21815] bcachefs (loop1): going read-write [ 818.079907][T21815] bcachefs (loop1): done starting filesystem [ 818.446642][T21873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5466'. [ 818.454591][ T5154] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 818.478345][T10806] bcachefs (loop1): shutting down [ 818.490092][T10806] bcachefs (loop1): going read-only [ 818.529583][T10806] bcachefs (loop1): finished waiting for writes to stop [ 818.561541][T10806] bcachefs (loop1): flushing journal and stopping allocators, journal seq 13 [ 818.607466][T10806] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 15 [ 818.634617][T10806] bcachefs (loop1): shutdown complete, journal seq 16 [ 818.653809][T10806] bcachefs (loop1): marking filesystem clean [ 818.675616][ T5154] usb 5-1: config 253 has an invalid interface number: 174 but max is 1 [ 818.697634][ T5154] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 818.725747][ T5154] usb 5-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 818.737874][T10806] bcachefs (loop1): shutdown complete [ 818.741949][ T5154] usb 5-1: config 253 has no interface number 0 [ 818.770080][ T5154] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 818.808535][ T5154] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 818.840166][ T5154] usb 5-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 818.866561][ T5154] usb 5-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 818.888073][ T5154] usb 5-1: config 253 interface 174 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 818.919553][ T5154] usb 5-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 818.953522][ T5154] usb 5-1: config 253 interface 174 has no altsetting 0 [ 818.970002][ T5154] usb 5-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 818.998936][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.225453][ T5154] usb 5-1: string descriptor 0 read error: -71 [ 819.270600][ T5154] usb 5-1: USB disconnect, device number 37 [ 819.708297][T21885] loop2: detected capacity change from 0 to 32768 [ 820.174574][T21885] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 820.202372][T21885] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 820.337270][T21885] bcachefs (loop2): alloc_read... done [ 820.353103][T21885] bcachefs (loop2): stripes_read... done [ 820.358845][T21885] bcachefs (loop2): snapshots_read... done [ 820.412935][T21885] bcachefs (loop2): journal_replay... done [ 820.418879][T21885] bcachefs (loop2): resume_logged_ops... done [ 820.478777][T21925] loop4: detected capacity change from 0 to 256 [ 820.488797][T21885] bcachefs (loop2): going read-write [ 820.525811][T21885] bcachefs (loop2): done starting filesystem [ 820.783725][T18479] bcachefs (loop2): shutting down [ 820.788807][T18479] bcachefs (loop2): going read-only [ 820.803228][T18479] bcachefs (loop2): finished waiting for writes to stop [ 820.806648][T21931] loop1: detected capacity change from 0 to 8192 [ 820.820929][T18479] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 820.854053][T21931] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 820.868762][T18479] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14 [ 820.894378][T18479] bcachefs (loop2): shutdown complete, journal seq 15 [ 820.909594][T18479] bcachefs (loop2): marking filesystem clean [ 820.978494][T18479] bcachefs (loop2): shutdown complete [ 821.090858][T21943] __nla_validate_parse: 5 callbacks suppressed [ 821.090880][T21943] netlink: 544 bytes leftover after parsing attributes in process `syz.4.5498'. [ 821.332190][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5502'. [ 821.609235][T21959] netlink: 'syz.1.5505': attribute type 4 has an invalid length. [ 821.690280][T17567] Bluetooth: hci3: command 0x0406 tx timeout [ 821.706140][T21960] netlink: 'syz.1.5505': attribute type 4 has an invalid length. [ 821.838687][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5507'. [ 822.182708][T21976] netlink: 544 bytes leftover after parsing attributes in process `syz.3.5512'. [ 822.318613][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5515'. [ 822.405586][T21986] loop3: detected capacity change from 0 to 512 [ 822.427044][T21986] EXT4-fs (loop3): unsupported inode size: 0 [ 822.438030][T21986] EXT4-fs (loop3): blocksize: 2048 [ 822.550881][T21990] netlink: 'syz.2.5519': attribute type 4 has an invalid length. [ 822.566835][T21990] netlink: 'syz.2.5519': attribute type 4 has an invalid length. [ 822.701225][T12223] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 823.564901][T21995] loop2: detected capacity change from 0 to 256 [ 823.593392][T12223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.636985][T12223] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.668185][T12223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.714418][T12223] usb 5-1: config 0 descriptor?? [ 823.771009][T21970] loop1: detected capacity change from 0 to 32768 [ 823.777291][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5521'. [ 823.826398][T21970] btrfs: Deprecated parameter 'usebackuproot' [ 823.844740][T21970] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 823.875362][T21970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5509 (21970) [ 823.899149][T21970] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 823.914105][T21970] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 823.928818][T21970] BTRFS info (device loop1): using free-space-tree [ 824.036307][T14138] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 824.055539][T21970] BTRFS error (device loop1): failed to load root extent [ 824.069876][T21970] BTRFS warning (device loop1): try to load backup roots slot 1 [ 824.079547][T14138] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 824.137127][T21978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.141207][T21970] BTRFS warning (device loop1): couldn't read tree root [ 824.146237][T21978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 824.160691][T21970] BTRFS warning (device loop1): try to load backup roots slot 2 [ 824.169020][T14138] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 824.212081][T21970] BTRFS warning (device loop1): couldn't read tree root [ 824.212642][T12223] usbhid 5-1:0.0: can't add hid device: -71 [ 824.229506][T21970] BTRFS warning (device loop1): try to load backup roots slot 3 [ 824.251149][T12223] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 824.284575][T21970] BTRFS info (device loop1): rebuilding free space tree [ 824.298343][T12223] usb 5-1: USB disconnect, device number 38 [ 824.364145][T21970] BTRFS info (device loop1): checking UUID tree [ 824.454233][T22028] netlink: 544 bytes leftover after parsing attributes in process `syz.0.5527'. [ 824.505294][T10806] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 824.740406][ T5088] Bluetooth: hci5: command 0x0406 tx timeout [ 825.031332][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5534'. [ 825.966312][T22048] netlink: 'syz.4.5536': attribute type 4 has an invalid length. [ 826.021210][T22048] netlink: 'syz.4.5536': attribute type 4 has an invalid length. [ 826.247719][T22033] loop2: detected capacity change from 0 to 32768 [ 826.291637][T22033] btrfs: Deprecated parameter 'usebackuproot' [ 826.297781][T22033] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 826.334484][T22033] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5530 (22033) [ 826.361609][T22060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5541'. [ 826.390494][T22033] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 826.421140][T22033] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 826.448854][T22033] BTRFS info (device loop2): using free-space-tree [ 826.448901][T22062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5543'. [ 826.581672][ T11] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 826.631963][T22033] BTRFS error (device loop2): failed to load root extent [ 826.639390][T22033] BTRFS warning (device loop2): try to load backup roots slot 1 [ 826.682352][ T1097] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 826.720861][T22033] BTRFS warning (device loop2): couldn't read tree root [ 826.780403][T22033] BTRFS warning (device loop2): try to load backup roots slot 2 [ 826.788647][ T1097] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 826.799574][T22033] BTRFS warning (device loop2): couldn't read tree root [ 826.806653][T22033] BTRFS warning (device loop2): try to load backup roots slot 3 [ 826.830096][ T5154] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 826.872436][T22033] BTRFS info (device loop2): rebuilding free space tree [ 826.913532][T22033] BTRFS info (device loop2): checking UUID tree [ 827.000095][ T5154] usb 1-1: device descriptor read/64, error -71 [ 827.028319][T18479] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.287800][ T5154] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 827.358054][T22059] loop4: detected capacity change from 0 to 32768 [ 827.389204][T22059] btrfs: Deprecated parameter 'usebackuproot' [ 827.398506][T22059] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 827.416282][T22059] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5542 (22059) [ 827.450715][T22097] netlink: 'syz.1.5552': attribute type 4 has an invalid length. [ 827.473304][T22059] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 827.479923][ T5154] usb 1-1: device descriptor read/64, error -71 [ 827.489197][T22059] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 827.535353][T22059] BTRFS info (device loop4): using free-space-tree [ 827.555040][T22097] netlink: 'syz.1.5552': attribute type 4 has an invalid length. [ 827.577214][T22081] loop3: detected capacity change from 0 to 32768 [ 827.628912][ T5154] usb usb1-port1: attempt power cycle [ 827.708878][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 827.755313][T22059] BTRFS error (device loop4): failed to load root extent [ 827.763069][T22059] BTRFS warning (device loop4): try to load backup roots slot 1 [ 827.787873][T22081] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 827.803218][T14138] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 827.835064][T22059] BTRFS warning (device loop4): couldn't read tree root [ 827.850671][T22059] BTRFS warning (device loop4): try to load backup roots slot 2 [ 827.859530][ T11] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 827.873623][T22059] BTRFS warning (device loop4): couldn't read tree root [ 827.877871][T22081] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 827.912517][T22059] BTRFS warning (device loop4): try to load backup roots slot 3 [ 827.924133][T22081] bcachefs (loop3): Version upgrade required: [ 827.924133][T22081] Version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap incomplete [ 827.924133][T22081] Doing incompatible version upgrade from 0.19: freespace to 1.7: mi_btree_bitmap [ 827.924133][T22081] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_subvolume_structure,check_directory_structure,check_nlinks,delete_dead_inodes,set_fs_needs_rebalance [ 828.013782][T22059] BTRFS info (device loop4): rebuilding free space tree [ 828.065395][T22059] BTRFS info (device loop4): checking UUID tree [ 828.068794][T22081] bcachefs (loop3): alloc_read... [ 828.071878][ T5154] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 828.099117][T22081] done [ 828.100834][ T5154] usb 1-1: device descriptor read/8, error -71 [ 828.108279][T22081] bcachefs (loop3): stripes_read... done [ 828.141999][T22081] bcachefs (loop3): snapshots_read... done [ 828.148144][T22081] bcachefs (loop3): check_allocations... [ 828.164595][T22081] [ 828.172587][T22081] ====================================================== [ 828.179789][T22081] WARNING: possible circular locking dependency detected [ 828.186814][T22081] 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 Not tainted [ 828.193934][T22081] ------------------------------------------------------ [ 828.200966][T22081] syz.3.5546/22081 is trying to acquire lock: [ 828.207042][T22081] ffff888073d00988 (&c->sb_lock){+.+.}-{3:3}, at: bch2_gc_mark_key+0xb8d/0xd60 [ 828.212716][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5559'. [ 828.216026][T22081] [ 828.216026][T22081] but task is already holding lock: [ 828.216036][T22081] ffff888073d01a58 (&c->btree_root_lock){+.+.}-{3:3}, at: bch2_gc_btree.constprop.0+0x109/0x1030 [ 828.216094][T22081] [ 828.216094][T22081] which lock already depends on the new lock. [ 828.216094][T22081] [ 828.216101][T22081] [ 828.216101][T22081] the existing dependency chain (in reverse order) is: [ 828.216109][T22081] [ 828.216109][T22081] -> #1 (&c->btree_root_lock){+.+.}-{3:3}: [ 828.216141][T22081] __mutex_lock+0x175/0x9c0 [ 828.216180][T22081] bch2_btree_roots_to_journal_entries+0x93/0x570 [ 828.216218][T22081] bch2_fs_mark_clean+0x31b/0x470 [ 828.216249][T22081] bch2_fs_read_only+0x88a/0xf10 [ 828.216272][T22081] __bch2_fs_stop+0xfc/0x540 [ 828.216293][T22081] generic_shutdown_super+0x159/0x3d0 [ 828.216320][T22081] bch2_kill_sb+0x3b/0x50 [ 828.216352][T22081] deactivate_locked_super+0xbe/0x1a0 [ 828.216379][T22081] deactivate_super+0xde/0x100 [ 828.216407][T22081] cleanup_mnt+0x222/0x450 [ 828.216430][T22081] task_work_run+0x14e/0x250 [ 828.216451][T22081] syscall_exit_to_user_mode+0x278/0x2a0 [ 828.216479][T22081] do_syscall_64+0xda/0x250 [ 828.216513][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.216547][T22081] [ 828.216547][T22081] -> #0 (&c->sb_lock){+.+.}-{3:3}: [ 828.216579][T22081] __lock_acquire+0x2478/0x3b30 [ 828.216613][T22081] lock_acquire+0x1b1/0x560 [ 828.366160][T22081] __mutex_lock+0x175/0x9c0 [ 828.371352][T22081] bch2_gc_mark_key+0xb8d/0xd60 [ 828.376822][T22081] bch2_gc_btree.constprop.0+0xb4c/0x1030 [ 828.383242][T22081] bch2_gc_btrees+0x426/0x8b0 [ 828.388434][T22081] bch2_check_allocations+0x85c/0x24f0 [ 828.394423][T22081] bch2_run_recovery_pass+0x8e/0x1a0 [ 828.400225][T22081] bch2_run_recovery_passes+0x33b/0x710 [ 828.406370][T22081] bch2_fs_recovery+0x25ff/0x3e40 [ 828.411909][T22081] bch2_fs_start+0x2e9/0x600 [ 828.417015][T22081] bch2_fs_open+0xfa0/0x1110 [ 828.422129][T22081] bch2_mount+0xe2c/0x1230 [ 828.427072][T22081] legacy_get_tree+0x109/0x220 [ 828.432362][T22081] vfs_get_tree+0x8f/0x380 [ 828.437303][T22081] path_mount+0x14e6/0x1f20 [ 828.442338][T22081] __x64_sys_mount+0x297/0x320 [ 828.447618][T22081] do_syscall_64+0xcd/0x250 [ 828.452727][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.459144][T22081] [ 828.459144][T22081] other info that might help us debug this: [ 828.459144][T22081] [ 828.469367][T22081] Possible unsafe locking scenario: [ 828.469367][T22081] [ 828.476801][T22081] CPU0 CPU1 [ 828.482160][T22081] ---- ---- [ 828.487510][T22081] lock(&c->btree_root_lock); [ 828.492268][T22081] lock(&c->sb_lock); [ 828.498843][T22081] lock(&c->btree_root_lock); [ 828.506113][T22081] lock(&c->sb_lock); [ 828.510171][T22081] [ 828.510171][T22081] *** DEADLOCK *** [ 828.510171][T22081] [ 828.518330][T22081] 4 locks held by syz.3.5546/22081: [ 828.523515][T22081] #0: ffff888073d00278 (&c->state_lock){+.+.}-{3:3}, at: bch2_fs_start+0x3e/0x600 [ 828.532829][T22081] #1: ffff888073d268d0 (&c->gc_lock){++++}-{3:3}, at: bch2_check_allocations+0xe5/0x24f0 [ 828.542745][T22081] #2: ffff888073d042d8 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x68b/0xf60 [ 828.553183][T22081] #3: ffff888073d01a58 (&c->btree_root_lock){+.+.}-{3:3}, at: bch2_gc_btree.constprop.0+0x109/0x1030 [ 828.564174][T22081] [ 828.564174][T22081] stack backtrace: [ 828.570066][T22081] CPU: 0 PID: 22081 Comm: syz.3.5546 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 828.580242][T22081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 828.590331][T22081] Call Trace: [ 828.593618][T22081] [ 828.596547][T22081] dump_stack_lvl+0x116/0x1f0 [ 828.601237][T22081] check_noncircular+0x31a/0x400 [ 828.606199][T22081] ? __pfx_check_noncircular+0x10/0x10 [ 828.611665][T22081] ? lockdep_lock+0xc6/0x200 [ 828.616254][T22081] ? __pfx_lockdep_lock+0x10/0x10 [ 828.621294][T22081] __lock_acquire+0x2478/0x3b30 [ 828.626150][T22081] ? __pfx___lock_acquire+0x10/0x10 [ 828.631350][T22081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 828.637237][T22081] lock_acquire+0x1b1/0x560 [ 828.641741][T22081] ? bch2_gc_mark_key+0xb8d/0xd60 [ 828.646761][T22081] ? __pfx_lock_acquire+0x10/0x10 [ 828.651795][T22081] ? bch2_prt_printf+0x3ef/0x5b0 [ 828.656742][T22081] ? __pfx___might_resched+0x10/0x10 [ 828.662022][T22081] ? bch2_fsck_err+0xa2d/0x1840 [ 828.666867][T22081] __mutex_lock+0x175/0x9c0 [ 828.671371][T22081] ? bch2_gc_mark_key+0xb8d/0xd60 [ 828.676474][T22081] ? __pfx_bch2_fsck_err+0x10/0x10 [ 828.681590][T22081] ? __pfx_bch2_btree_ptr_v2_to_text+0x10/0x10 [ 828.687744][T22081] ? bch2_gc_mark_key+0xb8d/0xd60 [ 828.692848][T22081] ? __pfx___mutex_lock+0x10/0x10 [ 828.697871][T22081] ? __pfx_bch2_bkey_val_to_text+0x10/0x10 [ 828.703685][T22081] ? bch2_gc_mark_key+0xb8d/0xd60 [ 828.708702][T22081] bch2_gc_mark_key+0xb8d/0xd60 [ 828.713550][T22081] ? __pfx_bch2_gc_mark_key+0x10/0x10 [ 828.718916][T22081] ? local_clock_noinstr+0xd/0xe0 [ 828.723942][T22081] ? bch2_gc_btree.constprop.0+0xb4c/0x1030 [ 828.729835][T22081] bch2_gc_btree.constprop.0+0xb4c/0x1030 [ 828.735568][T22081] ? __pfx_bch2_gc_btree.constprop.0+0x10/0x10 [ 828.741733][T22081] ? bch2_gc_btree.constprop.0+0x28d/0x1030 [ 828.747706][T22081] ? __bch2_trans_get+0x696/0xf60 [ 828.752723][T22081] ? __bch2_trans_get+0x68b/0xf60 [ 828.757743][T22081] ? bch2_gc_btrees+0x426/0x8b0 [ 828.762585][T22081] bch2_gc_btrees+0x426/0x8b0 [ 828.767343][T22081] ? __pfx_bch2_gc_btrees+0x10/0x10 [ 828.772633][T22081] bch2_check_allocations+0x85c/0x24f0 [ 828.778085][T22081] ? preempt_count_add+0x76/0x150 [ 828.783112][T22081] ? vprintk+0x86/0xa0 [ 828.787269][T22081] ? __pfx_bch2_check_allocations+0x10/0x10 [ 828.793157][T22081] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 828.799227][T22081] bch2_run_recovery_pass+0x8e/0x1a0 [ 828.804521][T22081] bch2_run_recovery_passes+0x33b/0x710 [ 828.810070][T22081] bch2_fs_recovery+0x25ff/0x3e40 [ 828.815354][T22081] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 828.820722][T22081] ? bch2_get_next_online_dev+0x35a/0x7e0 [ 828.826450][T22081] ? __pfx_lock_release+0x10/0x10 [ 828.831479][T22081] ? bch2_get_next_online_dev+0x364/0x7e0 [ 828.837281][T22081] ? llist_reverse_order+0x4c/0x70 [ 828.842389][T22081] ? __closure_wake_up+0x31/0x7d0 [ 828.847416][T22081] bch2_fs_start+0x2e9/0x600 [ 828.852001][T22081] bch2_fs_open+0xfa0/0x1110 [ 828.856586][T22081] ? __pfx_bch2_fs_open+0x10/0x10 [ 828.861614][T22081] ? bch2_mount+0x46e/0x1230 [ 828.866204][T22081] ? kasan_quarantine_put+0x10a/0x240 [ 828.871592][T22081] ? lockdep_hardirqs_on+0x7c/0x110 [ 828.876786][T22081] bch2_mount+0xe2c/0x1230 [ 828.881206][T22081] ? __pfx_bch2_mount+0x10/0x10 [ 828.886049][T22081] ? cred_has_capability.isra.0+0x192/0x2f0 [ 828.891938][T22081] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 828.898203][T22081] ? rcu_is_watching+0x12/0xc0 [ 828.902965][T22081] ? vfs_parse_fs_string+0xfb/0x150 [ 828.908175][T22081] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 828.913991][T22081] ? cap_capable+0x1cf/0x240 [ 828.918777][T22081] ? __pfx_bch2_mount+0x10/0x10 [ 828.923623][T22081] legacy_get_tree+0x109/0x220 [ 828.928400][T22081] vfs_get_tree+0x8f/0x380 [ 828.932822][T22081] path_mount+0x14e6/0x1f20 [ 828.937323][T22081] ? kmem_cache_free+0x12f/0x3a0 [ 828.942260][T22081] ? __pfx_path_mount+0x10/0x10 [ 828.947198][T22081] ? putname+0x12e/0x170 [ 828.951431][T22081] __x64_sys_mount+0x297/0x320 [ 828.956199][T22081] ? __pfx___x64_sys_mount+0x10/0x10 [ 828.961483][T22081] do_syscall_64+0xcd/0x250 [ 828.965986][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.971970][T22081] RIP: 0033:0x7f17e397743a [ 828.976392][T22081] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.995995][T22081] RSP: 002b:00007f17e4695e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 829.004423][T22081] RAX: ffffffffffffffda RBX: 00007f17e4695f00 RCX: 00007f17e397743a [ 829.012388][T22081] RDX: 0000000020000100 RSI: 0000000020000040 RDI: 00007f17e4695ec0 [ 829.020353][T22081] RBP: 0000000020000100 R08: 00007f17e4695f00 R09: 0000000001200014 [ 829.028324][T22081] R10: 0000000001200014 R11: 0000000000000206 R12: 0000000020000040 [ 829.036287][T22081] R13: 00007f17e4695ec0 R14: 00000000000119f4 R15: 00000000200004c0 [ 829.044253][T22081] [ 829.066991][T22081] bucket 0:40 data type btree ptr gen 0 missing in alloc btree [ 829.067010][T22081] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2b7c77101c276712 written 8 min_key POS_MIN durability: 1 ptr: 0:40:0 gen 0, shutting down [ 829.092742][T22081] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 10 [ 829.093237][T18161] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 829.113092][T22081] bcachefs (loop3): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 829.123419][T22081] bcachefs (loop3): bch2_gc_btrees(): error fsck_errors_not_fixed [ 829.130744][ T5154] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 829.139437][T22081] dev 0 has wrong free buckets: got 83, should be 84, fixing [ 829.147278][T22081] dev 0 has wrong btree buckets: got 11, should be 10, fixing [ 829.157489][T22081] dev 0 has wrong btree sectors: got 2816, should be 2560, fixing [ 829.169667][T22081] fs has wrong btree: got 2816, should be 2560, fixing [ 829.171510][ T5154] usb 1-1: device descriptor read/8, error -71 [ 829.185487][T22081] fs has wrong btree: 1/1 [0]: got 2816, should be 2560, fixing [ 829.211597][T22081] done [ 829.215933][T22081] bcachefs (loop3): going read-write [ 829.240882][T22081] bcachefs (loop3): journal_replay... done [ 829.246833][T22081] bcachefs (loop3): check_alloc_info... [ 829.248460][T22081] hole in alloc btree missing in freespace btree [ 829.248472][T22081] device 0 buckets 40-41, shutting down [ 829.290078][T22081] bcachefs (loop3): bch2_check_alloc_info(): error fsck_errors_not_fixed [ 829.298768][T22081] bcachefs (loop3): bch2_fs_recovery(): error fsck_errors_not_fixed [ 829.309562][ T5154] usb usb1-port1: unable to enumerate USB device [ 829.316150][T22081] bcachefs (loop3): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 829.328878][T22081] bcachefs (loop3): shutting down [ 829.328888][T20804] bcachefs (loop3): going read-only [ 829.328908][T20804] bcachefs (loop3): finished waiting for writes to stop [ 829.349816][T20804] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 829.358625][T20804] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 829.373781][T20804] bcachefs (loop3): unshutdown complete, journal seq 10 [ 829.381778][T20804] bcachefs (loop3): done going read-only, filesystem not clean [ 829.404590][T22081] bcachefs (loop3): shutdown complete [ 834.984172][ T1046] bridge_slave_1: left allmulticast mode [ 834.990330][ T1046] bridge_slave_1: left promiscuous mode [ 834.996095][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.005139][ T1046] bridge_slave_0: left allmulticast mode [ 835.010870][ T1046] bridge_slave_0: left promiscuous mode [ 835.016610][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.054148][ T1046] ip6gretap0 (unregistering): left promiscuous mode [ 835.368092][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.378428][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.389148][ T1046] bond0 (unregistering): Released all slaves [ 835.637394][ T1046] batadv_slave_0: left promiscuous mode [ 835.647841][ T1046] hsr_slave_0: left promiscuous mode [ 835.653773][ T1046] hsr_slave_1: left promiscuous mode [ 835.659864][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.667334][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.677177][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.685082][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.698138][ T1046] veth1_macvtap: left promiscuous mode [ 835.704434][ T1046] veth0_macvtap: left promiscuous mode [ 835.710111][ T1046] veth1_vlan: left promiscuous mode [ 835.715395][ T1046] veth0_vlan: left promiscuous mode [ 835.981383][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 836.026884][ T1046] team0 (unregistering): Port device team_slave_0 removed