last executing test programs: 23.857750479s ago: executing program 2 (id=1263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="d93f47151094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 22.695431485s ago: executing program 2 (id=1267): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@prjquota}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@dioread_nolock}, {@journal_checksum}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fchmodat(r8, &(0x7f0000000400)='./file0\x00', 0xfffffed3) 20.283293073s ago: executing program 2 (id=1269): r0 = syz_usb_connect$hid(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040961b0400000000000001090224000100002000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) accept(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="180100007d00000005f90000000000000000000000000000000000000c00"/43], 0x118) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x7dca, 0x0, &(0x7f0000000140), &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x5}, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x8000) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) 16.831580757s ago: executing program 2 (id=1278): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2000c0, &(0x7f0000002380)=ANY=[@ANYBLOB="747970653d629bfeaa2c747970653d75699e3e2c666f7263652c6465636f6d706f73652c666f7263652c6e6c733d69736f383835392d392c00fb96ab4c9493d7be8b39915215ec88b35cc6fc60097459"], 0x1, 0x6e4, &(0x7f0000000240)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREQQj5UKBKXXk3iNFbWbmRvkRMhsgUKRzihHHooQubQE+oBqYgDIpyRkLii3CNxjziwaGZn1rtre72b+CcJzyON55uZ7+ed1zOfd2cTbQD/txbficlWJLF47u3NdPvBVr3xYKu+WpQjYioiShHlziqStYjkfsTl6CzxuXRn3l2y1zhvPfzso7P3Pql3tsr5ktUvDWu3rT1khFa+xGxETOTrMZX36u/qLv3dHavrpBt3mrAzReLguLV3aI3TfIT7Fnja3Y2YmNxlfy3iRERM568DIp8dSkcc3oEba5YDAACAp9PEfhVefBSPYjNmjiYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeD4kne8MTPKlVJRnIym+/7+S70tVKscc73Bf2ef4h9ePKBAAAAAAAAAAOBSf5h/cn34Uj2IzZor97ST7zP+NbONk9vOFeD82YjnW43xsxlI0oxnrMR8xOdPTYWVzqdlcn9/Z8jeRtmy323fzlgsRUdvRcuEIThoAAAAAAAAAnl8/jcWYOe4gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgVxIx0Vlly8miXItSOSKmI6KS1mtF/LkoP8v+ctwBAAAAwOGr5uuZ5L+dQjvJ3vO/mr3vn473Yy2asRLNaMRyXMueBXTe9Zf+0ao3HmzVV9NlZ8ff/vdYcWQ9RsREfLDHyHNZjVPdFovxvfhBnIvZuBLrsRI/iqVoxnLMRjU9iViKJGrVztOLWhHn7vFe7tu6Mhjb6YHt17NIqnE9VrLYzsfVSnQem2TnkI75es9of6xEDIz4QZqd5Fu5EXN0ref39ev8uUyu/eKIfRyOWnbmk92MzKW5z7Px0vDcj3mdDI40H6XuM6iT26Okm4MjFTn/4Tg5P5Gv01z/oj/nB23MR2mDmViIUn71Rbzan/NbX7z3cn/jL//zr1dulNZu3ri+ce4QT+lQTRaFwUzUezLx2vCrL89EI81Ea/RMTA7umH6C8zhAlTwb2VQ04mz53ay0FG/0XILvxbVYjosxF/NxKebiG7EQ9b4r7FRfXsv11f6cZPdaaef8Vh0S/Jkv9VT65T6Vj1aal5d68to709WyY/mey7+KuZ4svTz86hv7r0A6/ufzcjrGz7p/cZ4GfZnI5+YiuleGZ+K37fTnRmPt5vqNpVsjjnc2X6e37Yf9c/PvDuJ8Hl96vaQzbjnbynJSLa6X9Ngr3Wj781XJP3HptCvtOHaqe6wWM7ES39/zTq3kr+F29tQ59lrvsX9tz5yV/PVNcazvVU68F43sVciA2aPJKgAjO/HmiUr1YfXv1Y+rP6/eqL49/Z2pS1NfqMTk38p/mvhD6felbyZvxsfxk5g57kgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5sHH7zs2lRmN5vVuI6cE9T1qo7DnW8EKU9q2z9cJoHUYtYvhYSV6oHOy5P4uFahxSz59GxJA6lSceIhn7Ghu7kF7IB9Jh8cVp2Z72xBjNy0Wr3euUY2N6r9/g1PZdELWbS43/tPvqVKPnlgGecxeaq7cubNy+89WV1aV3l99dXlu4dPHSxfrX57924fpKY3mu8/O4owQOw8btOxPHHQMAAAAAAAAAAAAwnvxf/zcf+z8zlPepU1nf2H3k00d9qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAzavGdmGxFEvNz5+fS7Qdb9Ua6FOXtmuWIKEVE8uOI5H7E5egsUevpLtlrnLcefvbR2Xuf1Lf7Khf1S8PajaaVLzEbERP5en9Tu3Szs7+rPf21Hiu8pHuGacLOFImD4/a/AAAA//+vgfmP") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000440)={[{@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa93}}, {@dots}, {@nodots}, {@fat=@tz_utc}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@dots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {}, {@fat=@nocase}]}, 0x1, 0x1d3, &(0x7f000001fd40)="$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") mount$bind(&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000180)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r8, &(0x7f0000000600)={0x2020}, 0xffffffb5) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0x8, 0x1, @local}]}, 0x2c}}, 0xa00) 14.583259671s ago: executing program 2 (id=1283): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000000340), 0xffffff46) dup3(r3, r2, 0x0) sendmsg$netlink(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000080)="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", 0x2000, 0x0) 13.939260454s ago: executing program 2 (id=1287): r0 = syz_usb_connect$hid(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040961b0400000000000001090224000100002000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) accept(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="180100007d00000005f90000000000000000000000000000000000000c00"/43], 0x118) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x7dca, 0x0, &(0x7f0000000140), &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x8000) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.535761439s ago: executing program 0 (id=1304): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 8.331266236s ago: executing program 0 (id=1306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="d93f47151094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 7.366431154s ago: executing program 0 (id=1310): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r1}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 7.263301863s ago: executing program 0 (id=1313): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) rt_sigreturn() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) accept(r1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000600)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000340)={0x50, 0xffffffffffffffac, 0x0, {0x7, 0x28, 0x10000004, 0xa4060, 0x0, 0x0, 0x885}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.811286681s ago: executing program 1 (id=1317): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000003700)=[{{&(0x7f0000001f80)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000002400)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000002440)="e6", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000040)=0x8) 6.143322605s ago: executing program 1 (id=1319): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="d93f47151094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 6.025615765s ago: executing program 4 (id=1320): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000001be80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e00)=@newchain={0x3b0, 0x64, 0x2, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x380, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_SRC={0x8, 0x3, @dev}, @TCA_RSVP_ACT={0x1c0, 0x6, [@m_mirred={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x69, 0x6, "44306038f1e4103bc6ae11aeebbe9d6d65978c2cbd285e51a56bb2eb602f9109965b48a1107edec656112326a7db031769ddd1b470ff46d2b2e8c0eedf3c7c828adb7739bc31ce82586ade10052af6ad246ced3f6fa217c67e3d88dcce030d54ac65782803"}, {0xc}, {0xc}}}, @m_gact={0x60, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x31, 0x6, "13c1e6e7faf985b93de25f0c095b8d1d87498803fed810e1f0ad61de91ddcaf0e538972471dc8236aab58f3402"}, {0xc}, {0xc}}}, @m_ife={0xa4, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x51, 0x6, "952a47c3d0880a2ce2cf7ff1258f694260505ca59f7637518e9f7af4f85fb63152f453c2a2e1eaceeec34252fdff23781c306a9e2fd3046301c4f8a516c7ed344bbb86dbde9f84f0972b244df8"}, {0xc}, {0xc}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_ACT={0x18c, 0x6, [@m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4d, 0x6, "4d54e7b6a1a50474820582defd1f6cf72746afbe28b488a2a2e85fd7f1362b46cca912c8c11441ab170269f50192cb95bd7a75403d3e764b0dbcbc7b93dbced7322a406904c7dc3c41"}, {0xc}, {0xc}}}, @m_skbedit={0x8c, 0x0, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x3d, 0x6, "6b3f15e96d764d132268017a2ec2913e1bfa2543408e99c8577206cfbf5720ab63055183d3a16b365653f081f6e2eeb0f0b8657b8fb32e2d28"}, {0xc}, {0xc}}}, @m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x3b0}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003d00)=""/4082, 0xff2}], 0x1}, 0x2) 5.896792435s ago: executing program 4 (id=1321): r0 = io_uring_setup(0xfeb, &(0x7f0000002f80)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 5.120261259s ago: executing program 1 (id=1322): r0 = syz_usb_connect$hid(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000040961b0400000000000001090224000100002000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) accept(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="180100007d00000005f90000000000000000000000000000000000000c00"/43], 0x118) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x7dca, 0x0, &(0x7f0000000140), &(0x7f0000000180)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x8000) syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.979224171s ago: executing program 4 (id=1323): syz_emit_ethernet(0x2c8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 4.86275518s ago: executing program 4 (id=1324): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000004c001280110001006272696467655f736c6176650000000034000580050019000300"], 0x98}}, 0x0) 3.328566576s ago: executing program 3 (id=1331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="d93f47151094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delsa={0x34, 0x11, 0x1, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0x6c}, [@mark={0xc}]}, 0x34}}, 0x0) 2.392931253s ago: executing program 3 (id=1332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 2.225446747s ago: executing program 3 (id=1333): syz_emit_ethernet(0x2c8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 2.122769506s ago: executing program 3 (id=1334): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f00000002c0)={[{@prjquota}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@dioread_nolock}, {@journal_checksum}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 1.714040249s ago: executing program 3 (id=1337): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0xfc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000009e682"], 0x0}, 0x0) 874.654568ms ago: executing program 1 (id=1338): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) 800.455125ms ago: executing program 1 (id=1339): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002e80)="8ac522eb13d8dfd1090f8c8bf9ab3e2eebd1464e19d879d6efcd00bd8a1a2cb7029e5d6d07244afc", 0x28}, {0x0}], 0x2, &(0x7f0000000940)=[{0x10}, {0x10}], 0x20}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x2, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000540)="4c7ca8f8cd01f021da816b0a392139c46d8eaccb4305d465356d5a3eee9d594ebd640d3bb18a7a8755256a15bdb54e858149d6a8bc1c03fa71bc0c5e1912c5d4f2a5748681c26bca4a641634a07190493232e560826f5610134f1a1c1b7224bef53af82d08de860a6c34af1a9d79280175730f9fa01eb80404b67f7e2207775f633c26f2390f20cd9b9a0887ace911489026dad40aef085602958b8f80a2ee73bf72") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1000}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r6, 0x0, 0x18, 0x0, &(0x7f0000000540)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="18120000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7030000000000e7840000000c000000b70000000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f0000001840)=""/4096}, 0x90) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000ff52ad33820f6bf9336b71516e7da38fe5b68e849e42fc9d4d00786810800b55fe7a5afaf07955612afa44f9d3dc56901b49617e727ad53e2e42a33e63849c8beb457db214dcdeadebed366221d11590051d4496daafd734d444c93fbda41c8075f8613844161e85519caad9fdebece4ff13388aaeb3b5cfc5259acd9731d308137586d25214210a69a6f03c6e46de656564488ac399a20182481445f0438e00", @ANYBLOB="42494f675e71483d332cafa6c1294bd9d2b578e9dee6c0e1d8d44a377fe9b8cc9024a88041c741f1dec194b279ab101a3652c7885849251769500d39d2aabc56deb9600192e2b1a562c86b2530f6686319a184c3a9e00c8c8e5091ae4c07047825a4c0de3c706aa900e646ce", @ANYBLOB="00012cbd7000000000000b00000005002e000100000008002c000900000008002c00070000000031000700000000"], 0x34}}, 0x840) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="3e00ac3a", @ANYRES16=r7, @ANYBLOB="00002bbd7000fddbdf250a0000000800310095000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10813}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 0s ago: executing program 4 (id=1340): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140003000006"], 0x38}}, 0x50) kernel console output (not intermixed with test programs): ster_driver returned -16 [ 92.717535][ T3687] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.812773][ T3687] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 93.552473][ T3687] usb 1-1: can't read configurations, error -71 [ 93.684280][ T4433] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 93.712159][ T4433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 93.742299][ T4433] bridge0: port 3(syz_tun) entered blocking state [ 93.768547][ T4433] bridge0: port 3(syz_tun) entered disabled state [ 93.794554][ T4433] device syz_tun entered promiscuous mode [ 93.819785][ T4433] bridge0: port 3(syz_tun) entered blocking state [ 93.826347][ T4433] bridge0: port 3(syz_tun) entered forwarding state [ 93.884203][ T4443] netlink: 'syz.0.245': attribute type 25 has an invalid length. [ 93.912616][ T4443] netlink: 'syz.0.245': attribute type 8 has an invalid length. [ 93.920475][ T4448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.245'. [ 93.971712][ T4448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.245'. [ 94.453635][ T3689] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.951719][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.166474][ C0] eth0: bad gso: type: 1, size: 1408 [ 95.234772][ T4475] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 95.248333][ T4475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.259'. [ 95.292821][ T3689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.309458][ T4452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.311173][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 95.320890][ T154] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.337269][ T4452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.369904][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.395974][ T3689] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 95.408627][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.438819][ T3689] usb 5-1: config 0 descriptor?? [ 95.592766][ T154] usb 2-1: Using ep0 maxpacket: 32 [ 95.732881][ T3689] usb 5-1: string descriptor 0 read error: -71 [ 95.734059][ T154] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.745093][ T3689] gspca_main: spca561-2.14.0 probing abcd:cdee [ 95.768225][ T154] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.782018][ T154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.792306][ T4502] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 95.792324][ T4502] netlink: 40 bytes leftover after parsing attributes in process `syz.0.272'. [ 95.798750][ T4502] bridge0: port 3(syz_tun) entered blocking state [ 95.805455][ T154] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 95.838666][ T4502] bridge0: port 3(syz_tun) entered disabled state [ 95.840947][ T154] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 95.846848][ T4502] device syz_tun entered promiscuous mode [ 95.857728][ T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.862794][ T3689] spca561: probe of 5-1:0.0 failed with error -22 [ 95.873325][ T4502] bridge0: port 3(syz_tun) entered blocking state [ 95.880286][ T3689] usb 5-1: MIDIStreaming interface descriptor not found [ 95.881079][ T4502] bridge0: port 3(syz_tun) entered forwarding state [ 95.897072][ T154] usb 2-1: config 0 descriptor?? [ 95.938595][ T3689] usb 5-1: USB disconnect, device number 3 [ 96.157231][ T4219] usb 2-1: USB disconnect, device number 3 [ 96.219194][ T3628] udevd[3628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.823022][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 97.892698][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 97.909948][ T14] usb 3-1: can't read configurations, error -71 [ 98.169411][ T4559] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 98.176282][ T4559] cramfs: wrong magic [ 99.172624][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.513224][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.551206][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.851352][ T4597] loop0: detected capacity change from 0 to 65536 [ 100.816761][ T4608] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 100.823560][ T4608] cramfs: wrong magic [ 100.895755][ T4597] XFS (loop0): Mounting V5 Filesystem [ 100.973408][ T4597] XFS (loop0): Ending clean mount [ 100.995760][ T4597] XFS (loop0): Quotacheck needed: Please wait. [ 101.100991][ T4597] XFS (loop0): Quotacheck: Done. [ 102.414931][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.705324][ T3637] XFS (loop0): Unmounting Filesystem [ 102.786062][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 102.802875][ T14] usb 3-1: can't read configurations, error -71 [ 102.829740][ T14] usb usb3-port1: attempt power cycle [ 104.727858][ T4685] loop1: detected capacity change from 0 to 65536 [ 104.903277][ T4685] XFS (loop1): Mounting V5 Filesystem [ 105.069430][ T4685] XFS (loop1): Ending clean mount [ 105.081668][ T4685] XFS (loop1): Quotacheck needed: Please wait. [ 105.212781][ T154] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.271713][ T4685] XFS (loop1): Quotacheck: Done. [ 105.444591][ T4706] netlink: 'syz.3.350': attribute type 25 has an invalid length. [ 105.453896][ T4706] netlink: 'syz.3.350': attribute type 8 has an invalid length. [ 105.472206][ T4706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.350'. [ 105.485874][ T4706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.350'. [ 105.619830][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.662851][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.983407][ T3634] XFS (loop1): Unmounting Filesystem [ 106.340754][ T4728] fuse: Bad value for 'user_id' [ 107.982757][ T154] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.052926][ T154] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 108.061002][ T154] usb 5-1: can't read configurations, error -71 [ 108.630460][ T4760] fuse: Bad value for 'fd' [ 108.651218][ T4750] loop2: detected capacity change from 0 to 65536 [ 108.817934][ T4750] XFS (loop2): Mounting V5 Filesystem [ 108.931461][ T4750] XFS (loop2): Ending clean mount [ 108.947198][ T4750] XFS (loop2): Quotacheck needed: Please wait. [ 109.762666][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.784120][ T4750] XFS (loop2): Quotacheck: Done. [ 110.190345][ T4772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.206402][ T4772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.459085][ T4802] fuse: Bad value for 'fd' [ 110.634063][ T3640] XFS (loop2): Unmounting Filesystem [ 111.488666][ T4823] netlink: 'syz.4.392': attribute type 10 has an invalid length. [ 111.511350][ T4823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.392'. [ 111.978331][ T14] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.083059][ T14] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 112.087130][ T4830] loop2: detected capacity change from 0 to 65536 [ 112.090635][ T14] usb 2-1: can't read configurations, error -71 [ 112.151567][ T4830] XFS (loop2): Mounting V5 Filesystem [ 112.230868][ T4830] XFS (loop2): Ending clean mount [ 112.239491][ T4830] XFS (loop2): Quotacheck needed: Please wait. [ 112.273740][ T4830] XFS (loop2): Quotacheck: Done. [ 112.409289][ T4857] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 112.423163][ T4857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.404'. [ 113.053186][ T3640] XFS (loop2): Unmounting Filesystem [ 113.344763][ T3689] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.508417][ T4869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.538308][ T4869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.878938][ T4897] fuse: Bad value for 'fd' [ 115.302752][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.426389][ T4901] loop0: detected capacity change from 0 to 65536 [ 115.452879][ T4901] XFS (loop0): Mounting V5 Filesystem [ 115.474718][ T4901] XFS (loop0): Ending clean mount [ 115.480995][ T4901] XFS (loop0): Quotacheck needed: Please wait. [ 115.502189][ T4901] XFS (loop0): Quotacheck: Done. [ 116.072772][ T3689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.142739][ T3689] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 116.158205][ T3689] usb 4-1: can't read configurations, error -71 [ 116.296847][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.308273][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.318926][ T14] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.321372][ T3637] XFS (loop0): Unmounting Filesystem [ 116.333177][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.351886][ T14] usb 3-1: config 0 descriptor?? [ 116.502066][ T4933] fuse: Bad value for 'fd' [ 116.790964][ T4930] loop1: detected capacity change from 0 to 65536 [ 116.943161][ T4936] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 116.949849][ T4936] cramfs: wrong magic [ 117.018960][ T4930] XFS (loop1): Mounting V5 Filesystem [ 117.052849][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 117.061021][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 117.064612][ T4930] XFS (loop1): Ending clean mount [ 117.089370][ T14] usb 3-1: USB disconnect, device number 6 [ 117.099844][ T4930] XFS (loop1): Quotacheck needed: Please wait. [ 117.144112][ T4930] XFS (loop1): Quotacheck: Done. [ 117.796335][ T3634] XFS (loop1): Unmounting Filesystem [ 118.092639][ T3689] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.366441][ T4961] loop2: detected capacity change from 0 to 65536 [ 118.463746][ T4961] XFS (loop2): Mounting V5 Filesystem [ 118.534817][ T4961] XFS (loop2): Ending clean mount [ 118.540631][ T4961] XFS (loop2): Quotacheck needed: Please wait. [ 118.610281][ T4961] XFS (loop2): Quotacheck: Done. [ 119.757932][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.805722][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.976231][ T4984] fuse: Invalid rootmode [ 120.019069][ T3640] XFS (loop2): Unmounting Filesystem [ 120.327161][ T4989] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 120.334732][ T4989] cramfs: wrong magic [ 120.814822][ T4998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.449'. [ 120.825783][ T4998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.449'. [ 120.974491][ T5000] netlink: 'syz.2.451': attribute type 10 has an invalid length. [ 120.983005][ T5000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.451'. [ 121.069264][ T5003] loop0: detected capacity change from 0 to 128 [ 121.132707][ T3689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 121.153155][ T5003] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.192670][ T3689] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 121.200259][ T3689] usb 4-1: can't read configurations, error -71 [ 121.224451][ T5003] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038 (0x7fffffff) [ 121.471224][ T5019] fuse: Invalid rootmode [ 121.652789][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.884163][ T5034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.462'. [ 121.900463][ T5034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'. [ 121.911583][ T5038] netlink: 'syz.4.464': attribute type 10 has an invalid length. [ 121.928526][ T5038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.464'. [ 121.937699][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 122.082857][ T14] usb 1-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 122.101531][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.142035][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.192238][ T14] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.219264][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.336097][ T3689] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.404296][ T5048] fuse: Invalid rootmode [ 122.532940][ T14] usb 1-1: string descriptor 0 read error: -71 [ 122.541603][ T14] hub 1-1:1.0: bad descriptor, ignoring hub [ 122.566137][ T14] hub: probe of 1-1:1.0 failed with error -5 [ 122.598428][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 122.657823][ T5036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.674229][ T14] usb 1-1: USB disconnect, device number 8 [ 122.687196][ T5036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.065922][ T3637] EXT4-fs (loop0): unmounting filesystem. [ 123.199912][ T5066] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 123.227334][ T5066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 123.681676][ T5077] fuse: Bad value for 'rootmode' [ 124.130718][ T5087] loop4: detected capacity change from 0 to 128 [ 124.194058][ T5087] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 124.350197][ T5087] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038 (0x7fffffff) [ 125.012805][ T3689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.072713][ T3689] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.085977][ T3689] usb 4-1: can't read configurations, error -71 [ 125.095795][ T3689] usb usb4-port1: attempt power cycle [ 125.120445][ T5110] fuse: Bad value for 'rootmode' [ 125.172594][ T154] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.433735][ T154] usb 5-1: Using ep0 maxpacket: 8 [ 125.563516][ T154] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 125.574080][ T154] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.588153][ T154] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.601380][ T154] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 125.782803][ T27] audit: type=1326 audit(1723417988.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5102 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56eb779f9 code=0x7fc00000 [ 126.232217][ T154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.535214][ T5142] fuse: Bad value for 'rootmode' [ 126.569585][ T154] usb 5-1: string descriptor 0 read error: -71 [ 126.577501][ T154] hub 5-1:1.0: bad descriptor, ignoring hub [ 126.597244][ T154] hub: probe of 5-1:1.0 failed with error -5 [ 126.627971][ T154] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 126.662748][ T3686] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.708996][ T154] usb 5-1: USB disconnect, device number 6 [ 126.977975][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.012928][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.019105][ T5158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 127.119725][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 127.218648][ T5168] fuse: Unknown parameter 'use00000000000000000000' [ 127.982810][ T5180] loop3: detected capacity change from 0 to 65536 [ 128.129122][ T5180] XFS (loop3): Mounting V5 Filesystem [ 128.148918][ T5195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 128.240405][ T5180] XFS (loop3): Ending clean mount [ 128.247881][ T5180] XFS (loop3): Quotacheck needed: Please wait. [ 128.261494][ T5200] loop1: detected capacity change from 0 to 128 [ 128.283919][ T5180] XFS (loop3): Quotacheck: Done. [ 128.324074][ T5200] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.428908][ T5200] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038 (0x7fffffff) [ 128.742677][ T3689] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.992672][ T3689] usb 2-1: Using ep0 maxpacket: 8 [ 129.063630][ T3636] XFS (loop3): Unmounting Filesystem [ 129.112904][ T3689] usb 2-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 129.132627][ T3689] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.141563][ T3689] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.172649][ T3689] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 129.207717][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.498161][ T3689] usb 2-1: string descriptor 0 read error: -71 [ 129.512762][ T3686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 129.527694][ T3689] hub 2-1:1.0: bad descriptor, ignoring hub [ 129.551817][ T5228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.541'. [ 129.553148][ T3689] hub: probe of 2-1:1.0 failed with error -5 [ 129.582792][ T3686] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 129.590381][ T3686] usb 3-1: can't read configurations, error -71 [ 129.613425][ T3689] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 129.677112][ T3689] usb 2-1: USB disconnect, device number 6 [ 130.122688][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 130.225271][ T5238] loop0: detected capacity change from 0 to 65536 [ 130.332497][ T5238] XFS (loop0): Mounting V5 Filesystem [ 130.440633][ T5238] XFS (loop0): Ending clean mount [ 130.499027][ T5238] XFS (loop0): Quotacheck needed: Please wait. [ 130.553417][ T5238] XFS (loop0): Quotacheck: Done. [ 130.943943][ T5269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.554'. [ 130.963000][ T5269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.554'. [ 131.410022][ T3637] XFS (loop0): Unmounting Filesystem [ 131.487778][ T5284] loop4: detected capacity change from 0 to 128 [ 131.532638][ T3686] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.546352][ T5284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.555789][ T5284] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038 (0x7fffffff) [ 131.842851][ T3689] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.851084][ T5264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.873675][ T5264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.504532][ T5309] loop3: detected capacity change from 0 to 65536 [ 132.553530][ T3689] usb 5-1: Using ep0 maxpacket: 8 [ 132.562683][ T5309] XFS (loop3): Mounting V5 Filesystem [ 132.621039][ T5309] XFS (loop3): Ending clean mount [ 132.627956][ T5309] XFS (loop3): Quotacheck needed: Please wait. [ 132.644815][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.651148][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.672807][ T3689] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 132.702139][ T3689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.726355][ T3689] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.786205][ T3689] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.796569][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.846912][ T5309] XFS (loop3): Quotacheck: Done. [ 133.006613][ T5340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.583'. [ 133.084231][ T5340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.583'. [ 133.132762][ T3689] usb 5-1: string descriptor 0 read error: -71 [ 133.140205][ T3689] hub 5-1:1.0: bad descriptor, ignoring hub [ 133.149064][ T3689] hub: probe of 5-1:1.0 failed with error -5 [ 133.223112][ T3689] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 133.293450][ T3689] usb 5-1: USB disconnect, device number 7 [ 133.551473][ T3636] XFS (loop3): Unmounting Filesystem [ 133.694685][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 133.763116][ T3686] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.843082][ T3686] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 133.871906][ T3686] usb 3-1: can't read configurations, error -71 [ 133.932823][ T4219] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.292968][ T4219] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.332734][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 134.388834][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 134.427092][ T4219] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 134.441384][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.480663][ T4219] usb 2-1: config 0 descriptor?? [ 134.773165][ T4219] usb 2-1: string descriptor 0 read error: -71 [ 134.794138][ T4219] gspca_main: spca561-2.14.0 probing abcd:cdee [ 134.867989][ T3684] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.874650][ T4219] spca561: probe of 2-1:0.0 failed with error -22 [ 134.892315][ T4219] usb 2-1: MIDIStreaming interface descriptor not found [ 134.983468][ T4219] usb 2-1: USB disconnect, device number 7 [ 135.187763][ T5383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.215360][ T5383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.492930][ T27] audit: type=1326 audit(1723417998.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.1.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb34d779f9 code=0x0 [ 136.162755][ T3685] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.573114][ T3685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.599929][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 136.612071][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.622289][ T3685] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 136.632203][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.659155][ T3685] usb 3-1: config 0 descriptor?? [ 136.955723][ T3685] usb 3-1: string descriptor 0 read error: -71 [ 136.968330][ T3685] gspca_main: spca561-2.14.0 probing abcd:cdee [ 137.077919][ T3685] spca561: probe of 3-1:0.0 failed with error -22 [ 137.098483][ T3685] usb 3-1: MIDIStreaming interface descriptor not found [ 137.188634][ T3685] usb 3-1: USB disconnect, device number 11 [ 137.662811][ T3684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.733053][ T3684] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 137.740652][ T3684] usb 5-1: can't read configurations, error -71 [ 137.882729][ T4219] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.182685][ T4219] usb 3-1: Using ep0 maxpacket: 8 [ 138.239351][ T5555] capability: warning: `syz.1.672' uses deprecated v2 capabilities in a way that may be insecure [ 138.412931][ T154] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 138.462790][ T4219] usb 3-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=eb.d2 [ 138.478885][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.488230][ T4219] usb 3-1: Product: syz [ 138.507210][ T4219] usb 3-1: Manufacturer: syz [ 138.525431][ T4219] usb 3-1: SerialNumber: syz [ 138.573441][ T4219] usb 3-1: Could not find all expected endpoints [ 138.780360][ T3686] usb 3-1: USB disconnect, device number 12 [ 138.982686][ T5570] loop4: detected capacity change from 0 to 65536 [ 139.037327][ T5570] XFS (loop4): Mounting V5 Filesystem [ 139.090982][ T5570] XFS (loop4): Ending clean mount [ 139.099233][ T5570] XFS (loop4): Quotacheck needed: Please wait. [ 139.136512][ T5570] XFS (loop4): Quotacheck: Done. [ 139.257713][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.288415][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.289313][ T3635] XFS (loop4): Unmounting Filesystem [ 140.298088][ T5608] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 140.341369][ T5608] cramfs: wrong magic [ 140.724828][ T5616] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 140.752680][ T5616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.695'. [ 141.222871][ T154] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.713689][ T5636] loop3: detected capacity change from 0 to 65536 [ 141.752695][ T154] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 141.760292][ T154] usb 4-1: can't read configurations, error -71 [ 141.815583][ T5636] XFS (loop3): Mounting V5 Filesystem [ 141.885999][ T5636] XFS (loop3): Ending clean mount [ 141.892356][ T5636] XFS (loop3): Quotacheck needed: Please wait. [ 141.910024][ T5636] XFS (loop3): Quotacheck: Done. [ 142.767693][ T3636] XFS (loop3): Unmounting Filesystem [ 143.622616][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.947812][ T5668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.965372][ T5668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.512834][ T154] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.643250][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.712847][ T14] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 145.725184][ T14] usb 3-1: can't read configurations, error -71 [ 145.952862][ T154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.976178][ T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 145.988694][ T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.003384][ T154] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 146.027974][ T154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.046225][ T154] usb 2-1: config 0 descriptor?? [ 146.332845][ T154] usb 2-1: string descriptor 0 read error: -71 [ 146.341602][ T154] gspca_main: spca561-2.14.0 probing abcd:cdee [ 146.432930][ T154] spca561: probe of 2-1:0.0 failed with error -22 [ 146.440047][ T3685] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.455568][ T154] usb 2-1: MIDIStreaming interface descriptor not found [ 146.505476][ T154] usb 2-1: USB disconnect, device number 8 [ 146.817885][ T5774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.837238][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.877354][ T5774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.108221][ T5818] fuse: Bad value for 'fd' [ 147.632672][ T14] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.012899][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.029901][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 148.062683][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 148.082966][ T14] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 148.100060][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.107139][ T5844] fuse: Bad value for 'fd' [ 148.117236][ T14] usb 5-1: config 0 descriptor?? [ 148.442967][ T14] usb 5-1: string descriptor 0 read error: -71 [ 148.450967][ T14] gspca_main: spca561-2.14.0 probing abcd:cdee [ 148.542814][ T14] spca561: probe of 5-1:0.0 failed with error -22 [ 148.549911][ T14] usb 5-1: MIDIStreaming interface descriptor not found [ 148.585425][ T14] usb 5-1: USB disconnect, device number 10 [ 148.836069][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.242700][ T3685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.270084][ T5885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.800'. [ 149.302735][ T3685] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 149.313162][ T3685] usb 4-1: can't read configurations, error -71 [ 149.443237][ T5893] netlink: 44 bytes leftover after parsing attributes in process `syz.1.802'. [ 149.478013][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.802'. [ 149.902816][ T3686] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.029559][ T5927] netlink: 44 bytes leftover after parsing attributes in process `syz.0.820'. [ 150.052963][ T5927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.820'. [ 150.227636][ T5904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.246482][ T5904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.392189][ T5946] serio: Serial port pts0 [ 150.821901][ T5965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.834'. [ 150.842646][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.834'. [ 151.641491][ T5988] loop4: detected capacity change from 0 to 1024 [ 151.650843][ T5988] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.666950][ T5988] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 151.678383][ T5988] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.920773][ T5988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.942108][ T27] audit: type=1800 audit(1723418015.640:7): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.842" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 153.052936][ T3686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 153.160582][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 153.212782][ T3686] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 153.230596][ T3686] usb 2-1: can't read configurations, error -71 [ 153.810931][ T6020] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 153.826361][ T6020] cramfs: wrong magic [ 154.935471][ T6046] loop4: detected capacity change from 0 to 1024 [ 154.943434][ T6046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.953125][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.961683][ T6046] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.973574][ T6046] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.322320][ T6046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.339429][ T27] audit: type=1800 audit(1723418019.040:8): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.861" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 156.521284][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 156.632928][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.643915][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 156.655245][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.681973][ T14] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 156.691566][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.713731][ T14] usb 1-1: config 0 descriptor?? [ 156.808080][ T6071] loop4: detected capacity change from 0 to 128 [ 156.820478][ T6071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.835671][ T6071] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038 (0x7fffffff) [ 156.992779][ T14] usb 1-1: string descriptor 0 read error: -71 [ 157.000201][ T14] gspca_main: spca561-2.14.0 probing abcd:cdee [ 157.082789][ T14] spca561: probe of 1-1:0.0 failed with error -22 [ 157.092952][ T14] usb 1-1: MIDIStreaming interface descriptor not found [ 157.121394][ T14] usb 1-1: USB disconnect, device number 9 [ 157.122641][ T3689] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.392727][ T3689] usb 5-1: Using ep0 maxpacket: 8 [ 157.415598][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.512913][ T3689] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 157.531926][ T3689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.563606][ T3689] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.614130][ T3689] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 157.633104][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.932810][ T3689] usb 5-1: string descriptor 0 read error: -71 [ 157.945731][ T3689] hub 5-1:1.0: bad descriptor, ignoring hub [ 157.954169][ T3689] hub: probe of 5-1:1.0 failed with error -5 [ 157.960432][ T3689] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 157.994106][ T3689] usb 5-1: USB disconnect, device number 11 [ 158.418194][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 159.141247][ T6118] loop2: detected capacity change from 0 to 65536 [ 159.206771][ T6133] loop3: detected capacity change from 0 to 128 [ 159.226699][ T6118] XFS (loop2): Mounting V5 Filesystem [ 159.255091][ T6133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.300525][ T6118] XFS (loop2): Ending clean mount [ 159.312267][ T6118] XFS (loop2): Quotacheck needed: Please wait. [ 159.337124][ T6133] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038 (0x7fffffff) [ 159.372304][ T6118] XFS (loop2): Quotacheck: Done. [ 159.663201][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.952883][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 160.088314][ T3640] XFS (loop2): Unmounting Filesystem [ 160.094025][ T14] usb 4-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 160.115169][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.153913][ T14] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.172928][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 160.182148][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.503979][ T14] usb 4-1: string descriptor 0 read error: -71 [ 160.511784][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 160.532743][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 160.539577][ T14] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 160.623328][ T14] usb 4-1: USB disconnect, device number 13 [ 161.199640][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 161.422487][ T6182] loop0: detected capacity change from 0 to 65536 [ 161.491934][ T6182] XFS (loop0): Mounting V5 Filesystem [ 161.657652][ T6182] XFS (loop0): Ending clean mount [ 161.669450][ T6182] XFS (loop0): Quotacheck needed: Please wait. [ 161.748357][ T6182] XFS (loop0): Quotacheck: Done. [ 161.750844][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.930'. [ 163.055908][ T6245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.941'. [ 163.740838][ T6274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.955'. [ 163.933642][ T3689] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 164.209990][ T3637] XFS (loop0): Unmounting Filesystem [ 164.237292][ T6293] process 'syz.3.964' launched './file1' with NULL argv: empty string added [ 164.292819][ T3689] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.318252][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 164.341768][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 164.370757][ T3689] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 164.380303][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.420283][ T3689] usb 5-1: config 0 descriptor?? [ 164.722770][ T3689] usb 5-1: string descriptor 0 read error: -71 [ 164.730850][ T3689] gspca_main: spca561-2.14.0 probing abcd:cdee [ 164.814060][ T3689] spca561: probe of 5-1:0.0 failed with error -22 [ 164.837668][ T3689] usb 5-1: MIDIStreaming interface descriptor not found [ 165.394203][ T3689] usb 5-1: USB disconnect, device number 12 [ 165.497351][ T3654] udevd[3654]: setting owner of /dev/snd/midiC3D0 to uid=0, gid=29 failed: No such file or directory [ 166.686478][ T6353] loop3: detected capacity change from 0 to 1024 [ 166.695848][ T6353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.724118][ T6353] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 166.735590][ T6353] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.825334][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 167.213073][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.233793][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 167.255158][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.384487][ T7] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 167.511529][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.771359][ T6353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 167.827799][ T27] audit: type=1800 audit(1723418030.530:9): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.985" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 167.848988][ T7] usb 3-1: config 0 descriptor?? [ 167.933842][ T6366] netlink: 'syz.1.992': attribute type 10 has an invalid length. [ 167.941728][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 167.953338][ T6366] bridge0: port 3(syz_tun) entered blocking state [ 167.988291][ T6366] bridge0: port 3(syz_tun) entered disabled state [ 167.999592][ T6366] device syz_tun entered promiscuous mode [ 168.012106][ T6366] bridge0: port 3(syz_tun) entered blocking state [ 168.018722][ T6366] bridge0: port 3(syz_tun) entered forwarding state [ 168.043051][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 168.172630][ T7] usb 3-1: string descriptor 0 read error: -71 [ 168.180224][ T7] gspca_main: spca561-2.14.0 probing abcd:cdee [ 168.272899][ T7] spca561: probe of 3-1:0.0 failed with error -22 [ 168.289447][ T7] usb 3-1: MIDIStreaming interface descriptor not found [ 168.383254][ T7] usb 3-1: USB disconnect, device number 15 [ 169.284247][ T6410] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 169.293416][ T6410] cramfs: wrong magic [ 170.066450][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1011'. [ 170.520773][ T6442] netlink: 'syz.1.1021': attribute type 10 has an invalid length. [ 170.528943][ T6442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 172.242995][ T6475] loop2: detected capacity change from 0 to 65536 [ 172.328813][ T6475] XFS (loop2): Mounting V5 Filesystem [ 172.383380][ T6475] XFS (loop2): Ending clean mount [ 172.391071][ T6475] XFS (loop2): Quotacheck needed: Please wait. [ 172.441012][ T6475] XFS (loop2): Quotacheck: Done. [ 173.242230][ T3640] XFS (loop2): Unmounting Filesystem [ 173.867699][ T6500] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 175.222636][ T3686] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.462638][ T3686] usb 5-1: Using ep0 maxpacket: 32 [ 175.582998][ T3686] usb 5-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 175.595889][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.607619][ T3686] usb 5-1: config 0 descriptor?? [ 175.664583][ T3686] vmk80xx 5-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 175.683056][ T3653] Bluetooth: hci4: command 0x0406 tx timeout [ 175.683307][ T3651] Bluetooth: hci0: command 0x0406 tx timeout [ 175.689130][ T3653] Bluetooth: hci3: command 0x0406 tx timeout [ 175.695139][ T3652] Bluetooth: hci1: command 0x0406 tx timeout [ 175.701155][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 177.881690][ T6539] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 177.888385][ T6539] cramfs: wrong magic [ 178.192066][ T4611] usb 5-1: USB disconnect, device number 13 [ 179.243991][ T6559] loop4: detected capacity change from 0 to 65536 [ 179.282022][ T6559] XFS (loop4): Mounting V5 Filesystem [ 179.327158][ T6559] XFS (loop4): Ending clean mount [ 179.338170][ T6559] XFS (loop4): Quotacheck needed: Please wait. [ 179.372393][ T6559] XFS (loop4): Quotacheck: Done. [ 180.018028][ T3635] XFS (loop4): Unmounting Filesystem [ 180.973546][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 181.931096][ T6594] loop1: detected capacity change from 0 to 256 [ 182.087046][ T6596] binder_alloc: 6595: pid 6595 spamming oneway? 1 buffers allocated for a total size of 5184 [ 182.292648][ T3689] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.702703][ T3689] usb 2-1: Using ep0 maxpacket: 32 [ 182.800543][ T6604] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1065'. [ 182.822793][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.843829][ T3689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.872627][ T3689] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 182.897182][ T3689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.926566][ T3689] usb 2-1: config 0 descriptor?? [ 183.439955][ T6608] loop2: detected capacity change from 0 to 65536 [ 183.675990][ T6608] XFS (loop2): Mounting V5 Filesystem [ 184.071929][ T6608] XFS (loop2): Ending clean mount [ 184.081255][ T6608] XFS (loop2): Quotacheck needed: Please wait. [ 184.136947][ T6608] XFS (loop2): Quotacheck: Done. [ 184.954759][ T3640] XFS (loop2): Unmounting Filesystem [ 185.347979][ T3689] usbhid 2-1:0.0: can't add hid device: -71 [ 185.359715][ T3689] usbhid: probe of 2-1:0.0 failed with error -71 [ 185.382025][ T3689] usb 2-1: USB disconnect, device number 11 [ 186.229444][ T6635] loop2: detected capacity change from 0 to 65536 [ 186.781647][ T6635] XFS (loop2): Mounting V5 Filesystem [ 186.854748][ T6635] XFS (loop2): Ending clean mount [ 186.869690][ T6635] XFS (loop2): Quotacheck needed: Please wait. [ 186.915270][ T6635] XFS (loop2): Quotacheck: Done. [ 187.352961][ T3682] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.752874][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.788523][ T3682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.844516][ T3682] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.899058][ T3682] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.918782][ T3682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.970515][ T3640] XFS (loop2): Unmounting Filesystem [ 188.000779][ T3682] usb 2-1: config 0 descriptor?? [ 188.493937][ T3682] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 188.531536][ T3682] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 188.564750][ C0] eth0: bad gso: type: 1, size: 1408 [ 188.585631][ T3682] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 189.129648][ T3651] Bluetooth: hci0: unexpected event 0x04 length: 14 > 10 [ 190.107723][ T6658] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 190.625356][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 190.947541][ T3682] usb 2-1: USB disconnect, device number 12 [ 191.049071][ T6707] loop3: detected capacity change from 0 to 65536 [ 191.187847][ T6707] XFS (loop3): Mounting V5 Filesystem [ 191.270138][ T6707] XFS (loop3): Ending clean mount [ 191.276605][ T6707] XFS (loop3): Quotacheck needed: Please wait. [ 191.307952][ T6707] XFS (loop3): Quotacheck: Done. [ 192.994207][ T6704] loop1: detected capacity change from 0 to 32768 [ 193.023562][ T6704] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1088 (6704) [ 193.098850][ T3636] XFS (loop3): Unmounting Filesystem [ 193.109904][ T6704] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.130876][ T6704] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 193.158559][ T6704] BTRFS info (device loop1): max_inline at 0 [ 193.196441][ T6704] BTRFS info (device loop1): force clearing of disk cache [ 193.216686][ T6704] BTRFS info (device loop1): max_inline at 0 [ 193.239378][ T6704] BTRFS info (device loop1): doing ref verification [ 193.269722][ T6704] BTRFS info (device loop1): turning off barriers [ 193.307210][ T6704] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.352759][ T6704] BTRFS info (device loop1): use zstd compression, level 3 [ 193.373347][ T6704] BTRFS info (device loop1): enabling ssd optimizations [ 193.400640][ T6704] BTRFS info (device loop1): using spread ssd allocation scheme [ 193.423471][ T6704] BTRFS info (device loop1): not using ssd optimizations [ 193.442767][ T6704] BTRFS info (device loop1): not using spread ssd allocation scheme [ 193.457556][ T6704] BTRFS info (device loop1): force zlib compression, level 3 [ 193.471693][ T6704] BTRFS info (device loop1): using free space tree [ 193.638591][ T6704] BTRFS error (device loop1): open_ctree failed [ 193.652362][ T6749] loop4: detected capacity change from 0 to 512 [ 193.759206][ T6749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.769346][ T6749] ext4 filesystem being mounted at /229/bus supports timestamps until 2038 (0x7fffffff) [ 194.120742][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.127226][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 194.156537][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.313422][ T6768] loop3: detected capacity change from 0 to 512 [ 194.860948][ T6769] loop1: detected capacity change from 0 to 512 [ 194.883092][ T6768] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.891994][ T6771] loop2: detected capacity change from 0 to 2048 [ 194.894576][ T6768] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 195.213177][ T6771] ======================================================= [ 195.213177][ T6771] WARNING: The mand mount option has been deprecated and [ 195.213177][ T6771] and is ignored by this kernel. Remove the mand [ 195.213177][ T6771] option from the mount to silence this warning. [ 195.213177][ T6771] ======================================================= [ 195.331214][ T6769] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.373663][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 195.379697][ T6771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.420127][ T6760] loop0: detected capacity change from 0 to 32768 [ 195.428413][ T6760] /dev/loop0: Can't open blockdev [ 195.436953][ T6769] ext4 filesystem being mounted at /225/bus supports timestamps until 2038 (0x7fffffff) [ 195.540521][ T3655] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.960018][ T6780] loop4: detected capacity change from 0 to 65536 [ 196.192824][ T6780] XFS (loop4): Mounting V5 Filesystem [ 196.793769][ T6780] XFS (loop4): Ending clean mount [ 196.800949][ T6780] XFS (loop4): Quotacheck needed: Please wait. [ 196.910769][ T6780] XFS (loop4): Quotacheck: Done. [ 196.912080][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 197.496407][ T6807] fuse: Bad value for 'fd' [ 197.776835][ T3635] XFS (loop4): Unmounting Filesystem [ 197.842115][ T6790] loop3: detected capacity change from 0 to 32768 [ 197.872103][ T6790] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1104 (6790) [ 197.879057][ T6815] netlink: 'syz.1.1110': attribute type 25 has an invalid length. [ 197.944364][ T6815] netlink: 'syz.1.1110': attribute type 8 has an invalid length. [ 197.989112][ T6790] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 198.013930][ T6790] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 198.033792][ T6815] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1110'. [ 198.058055][ T6790] BTRFS info (device loop3): setting nodatacow, compression disabled [ 198.075036][ T6815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1110'. [ 198.084536][ T6790] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 198.107858][ T6790] BTRFS info (device loop3): force lzo compression, level 0 [ 198.142626][ T6790] BTRFS info (device loop3): metadata ratio 8 [ 198.164611][ T6790] BTRFS info (device loop3): doing ref verification [ 198.187959][ T6790] BTRFS info (device loop3): metadata ratio 32769 [ 198.222590][ T6790] BTRFS info (device loop3): turning off barriers [ 198.229147][ T6790] BTRFS info (device loop3): enabling ssd optimizations [ 198.253830][ T6790] BTRFS info (device loop3): using spread ssd allocation scheme [ 198.282950][ T6790] BTRFS info (device loop3): turning on barriers [ 198.309841][ T6790] BTRFS info (device loop3): using free space tree [ 198.342692][ T6824] loop1: detected capacity change from 0 to 1024 [ 198.477739][ T6838] loop0: detected capacity change from 0 to 128 [ 198.482277][ T6824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002] [ 198.493009][ T6824] System zones: 0-1, 3-12 [ 198.513191][ T3654] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.625461][ T6824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.316706][ T6846] syz.4.1109 (6846) used greatest stack depth: 19456 bytes left [ 200.212881][ T6790] BTRFS error (device loop3): open_ctree failed [ 200.252762][ T6860] loop4: detected capacity change from 0 to 128 [ 200.290400][ T6862] loop0: detected capacity change from 0 to 128 [ 200.307681][ T3634] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /228/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 200.363424][ T6862] /dev/loop0: Can't open blockdev [ 200.396246][ T3634] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 200.438753][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 200.459217][ T3634] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /228/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 200.497888][ T3634] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 200.637701][ T6867] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.646899][ T6867] overlayfs: missing 'lowerdir' [ 200.719268][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 200.897583][ T3634] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /228/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.117039][ T3634] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.192840][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.283095][ T3634] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /228/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.345796][ T3634] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.372802][ T6856] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 201.374847][ T6874] netlink: 'syz.2.1123': attribute type 25 has an invalid length. [ 201.397427][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.409613][ T6874] netlink: 'syz.2.1123': attribute type 8 has an invalid length. [ 201.422731][ T3634] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /228/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.429438][ T6874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1123'. [ 201.445473][ T3634] EXT4-fs error (device loop1): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 201.453425][ T6874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 201.479290][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.514587][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.553019][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.590446][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.612697][ T6856] usb 1-1: Using ep0 maxpacket: 8 [ 201.625502][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.647297][ T3634] EXT4-fs warning (device loop1): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 201.678665][ T3685] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.718743][ T6883] loop4: detected capacity change from 0 to 512 [ 201.737608][ T6856] usb 1-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 201.749008][ T6883] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 201.753183][ T6856] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.789402][ T6856] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.804190][ T6856] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 201.814420][ T6856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.892861][ T3634] bridge0: port 3(syz_tun) entered disabled state [ 201.945217][ T3634] device syz_tun left promiscuous mode [ 201.951976][ T3634] bridge0: port 3(syz_tun) entered disabled state [ 202.083019][ T3685] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.098719][ T3685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 202.120154][ T3685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.140495][ T3685] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 202.158856][ T3685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.197392][ T3685] usb 4-1: config 0 descriptor?? [ 202.219160][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 202.341219][ T4338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.522903][ T3685] usb 4-1: string descriptor 0 read error: -71 [ 202.536764][ T3685] gspca_main: spca561-2.14.0 probing abcd:cdee [ 202.625304][ T3685] spca561: probe of 4-1:0.0 failed with error -22 [ 202.639754][ T3685] usb 4-1: MIDIStreaming interface descriptor not found [ 202.742855][ T3682] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.771729][ T3685] usb 4-1: USB disconnect, device number 14 [ 202.962710][ T6856] usb 1-1: string descriptor 0 read error: -71 [ 202.973279][ T6856] hub 1-1:1.0: bad descriptor, ignoring hub [ 202.979226][ T6856] hub: probe of 1-1:1.0 failed with error -5 [ 203.009405][ T6856] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 203.073511][ T6856] usb 1-1: USB disconnect, device number 10 [ 203.103570][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.112928][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.126635][ T4338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.267736][ T4338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.399182][ T4338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.733489][ T3653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.746837][ T3653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.755270][ T3653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.768462][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.778805][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.786549][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.827775][ T6919] loop3: detected capacity change from 0 to 128 [ 203.831670][ T6900] loop0: detected capacity change from 0 to 32768 [ 203.892928][ T3685] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 203.927303][ T6919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.956706][ T6919] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038 (0x7fffffff) [ 204.163553][ T3685] usb 3-1: Using ep0 maxpacket: 16 [ 204.262708][ T6856] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 204.431601][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 204.513281][ T3685] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 204.534603][ T3685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.553838][ T3685] usb 3-1: Product: syz [ 204.558118][ T3685] usb 3-1: Manufacturer: syz [ 204.563424][ T3685] usb 3-1: SerialNumber: syz [ 204.571650][ T3685] usb 3-1: config 0 descriptor?? [ 204.592769][ T6856] usb 4-1: Using ep0 maxpacket: 8 [ 204.713183][ T6856] usb 4-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 204.810175][ T6856] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.895736][ T6856] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.977831][ T6856] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.030148][ T6856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.210282][ T3685] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 205.231699][ T3685] usb 3-1: Detected FT232H [ 205.282400][ T3685] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 205.348965][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.356697][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.375178][ T6915] device bridge_slave_0 entered promiscuous mode [ 205.407342][ T6856] usb 4-1: string descriptor 0 read error: -71 [ 205.415961][ T6856] hub 4-1:1.0: bad descriptor, ignoring hub [ 205.421883][ T6856] hub: probe of 4-1:1.0 failed with error -5 [ 205.431499][ T6856] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 205.479690][ T6949] loop0: detected capacity change from 0 to 128 [ 205.487091][ T6856] usb 4-1: USB disconnect, device number 15 [ 205.498977][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.507311][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.547186][ T6915] device bridge_slave_1 entered promiscuous mode [ 205.565082][ T3685] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 205.576422][ T27] audit: type=1326 audit(1723418068.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.0.1146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2da1f779f9 code=0x0 [ 205.602928][ T3682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.611898][ T3685] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 205.692733][ T3682] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 205.706288][ T3682] usb 5-1: can't read configurations, error -71 [ 205.760189][ T6954] syz.4.1147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.842847][ T3653] Bluetooth: hci1: command tx timeout [ 205.928883][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 205.963194][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.016334][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.160652][ T4338] device hsr_slave_0 left promiscuous mode [ 206.217006][ T3683] usb 3-1: USB disconnect, device number 16 [ 206.234641][ T3683] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 206.291040][ T3683] ftdi_sio 3-1:0.0: device disconnected [ 206.348863][ T4338] device hsr_slave_1 left promiscuous mode [ 206.388294][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.400745][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.445107][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.473257][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.536221][ T4338] device bridge_slave_1 left promiscuous mode [ 206.560509][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.650594][ T4338] device bridge_slave_0 left promiscuous mode [ 206.677489][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.815764][ T4338] device veth1_macvtap left promiscuous mode [ 206.843125][ T4338] device veth0_macvtap left promiscuous mode [ 206.849281][ T4338] device veth1_vlan left promiscuous mode [ 206.867668][ T4338] device veth0_vlan left promiscuous mode [ 207.561535][ T6969] loop4: detected capacity change from 0 to 32768 [ 207.603678][ T6969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1150 (6969) [ 207.661160][ T6969] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.690234][ T6969] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 207.719314][ T6969] BTRFS info (device loop4): using free space tree [ 207.911250][ T6969] BTRFS info (device loop4): enabling ssd optimizations [ 207.922731][ T3653] Bluetooth: hci1: command tx timeout [ 208.061717][ T27] audit: type=1800 audit(1723418070.760:11): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1150" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 208.269308][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 208.320754][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 208.349472][ T3635] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.390729][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.599987][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.614834][ T22] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.839148][ T7015] loop4: detected capacity change from 0 to 128 [ 209.873534][ T7015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 209.887657][ T7015] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038 (0x7fffffff) [ 209.889166][ T4338] bond0 (unregistering): Released all slaves [ 209.984965][ T6915] team0: Port device team_slave_0 added [ 209.999242][ T6915] team0: Port device team_slave_1 added [ 210.005218][ T3653] Bluetooth: hci1: command tx timeout [ 210.011470][ T6973] netlink: 'syz.2.1151': attribute type 10 has an invalid length. [ 210.022700][ T6973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1151'. [ 210.071316][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.107519][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.122881][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.133829][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.179412][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.202667][ T7003] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.223489][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.259036][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.302265][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.370871][ T6915] device hsr_slave_0 entered promiscuous mode [ 210.417899][ T6915] device hsr_slave_1 entered promiscuous mode [ 210.438865][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.455489][ T6915] Cannot create hsr debugfs directory [ 210.894531][ T7032] loop0: detected capacity change from 0 to 65536 [ 210.901635][ T7032] /dev/loop0: Can't open blockdev [ 210.910294][ T7003] usb 5-1: Using ep0 maxpacket: 8 [ 210.944905][ T3654] I/O error, dev loop0, sector 65408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.242954][ T7003] usb 5-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 212.102983][ T3651] Bluetooth: hci1: command tx timeout [ 212.129519][ T7003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.229535][ T7003] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.289817][ T7003] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 212.340542][ T7003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.522823][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.742697][ T22] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 212.750312][ T22] usb 4-1: can't read configurations, error -71 [ 212.762948][ T7003] usb 5-1: string descriptor 0 read error: -71 [ 212.769570][ T7003] hub 5-1:1.0: bad descriptor, ignoring hub [ 213.662799][ T7003] hub: probe of 5-1:1.0 failed with error -5 [ 214.314204][ T7003] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 214.317314][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 214.353717][ T7003] usb 5-1: USB disconnect, device number 16 [ 214.820618][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.849580][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.871365][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.894580][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.902386][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.920284][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.929164][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.942238][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.950997][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.967902][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 214.981687][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.011306][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.021454][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.039759][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.058109][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.072480][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.087740][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.102801][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.132777][ T14] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 215.138642][ T6915] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.148316][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.173474][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.200026][ T22] hid-generic 0000:1000000:0000.0002: unknown main item tag 0x0 [ 215.211477][ T6915] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.239893][ T22] hid-generic 0000:1000000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 215.251947][ T6915] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.313696][ T6915] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.477969][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.492864][ T3683] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 215.520324][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.547972][ T7103] loop0: detected capacity change from 0 to 128 [ 215.565797][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.580725][ T7103] /dev/loop0: Can't open blockdev [ 215.597401][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.613262][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.647880][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.700491][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.718639][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.743275][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.750471][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.792129][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.810815][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.832503][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.847888][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.855031][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.862813][ T3683] usb 5-1: config 0 has no interfaces? [ 215.868458][ T3683] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 215.887757][ T3683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.888345][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.917849][ T3683] usb 5-1: config 0 descriptor?? [ 215.923752][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.942880][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.969583][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.014379][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.033067][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.052419][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.072481][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.085286][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.098657][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.109812][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.127751][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.164008][ T154] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.221407][ T22] usb 5-1: USB disconnect, device number 17 [ 216.442931][ T154] usb 1-1: Using ep0 maxpacket: 8 [ 216.456951][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.471749][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.490362][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.538830][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.554574][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.581573][ T6915] device veth0_vlan entered promiscuous mode [ 216.603295][ T154] usb 1-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 216.628844][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.644223][ T154] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.657810][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.677838][ T154] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.431529][ T6915] device veth1_vlan entered promiscuous mode [ 217.453553][ T154] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.463081][ T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.482916][ T6915] device veth0_macvtap entered promiscuous mode [ 217.514012][ T7134] netlink: 'syz.4.1180': attribute type 10 has an invalid length. [ 217.521926][ T7134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1180'. [ 217.574292][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.590695][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.608026][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 217.629859][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.658699][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.687341][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.719990][ T6915] device veth1_macvtap entered promiscuous mode [ 217.738457][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.763042][ T154] usb 1-1: string descriptor 0 read error: -71 [ 217.780118][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.794595][ T154] hub 1-1:1.0: bad descriptor, ignoring hub [ 217.800537][ T154] hub: probe of 1-1:1.0 failed with error -5 [ 217.818214][ T154] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 217.826946][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.861144][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.872016][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.893952][ T154] usb 1-1: USB disconnect, device number 11 [ 217.907976][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.923828][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.956361][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.972345][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.972702][ T14] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 217.987904][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.000721][ T14] usb 4-1: can't read configurations, error -71 [ 218.002359][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.038844][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.052218][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.076853][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 218.095375][ T7155] device syz_tun left promiscuous mode [ 218.118384][ T7155] bridge0: port 3(syz_tun) entered disabled state [ 218.140521][ T7155] device bridge_slave_1 left promiscuous mode [ 218.163065][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.198270][ T7155] device bridge_slave_0 left promiscuous mode [ 218.211471][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.357539][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.413982][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.467819][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.519108][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.569506][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.619552][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.639301][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.659416][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.679680][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.693513][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.733394][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.774553][ T6915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.799067][ T6915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.820159][ T6915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.890619][ T6915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.087757][ T7192] netlink: 'syz.2.1192': attribute type 10 has an invalid length. [ 220.103091][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1192'. [ 220.145888][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.169563][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.226510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.235190][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.257992][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.295617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.352337][ T7200] loop3: detected capacity change from 0 to 128 [ 220.360843][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 220.452189][ T7200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 220.462668][ T3683] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.485165][ C0] eth0: bad gso: type: 1, size: 1408 [ 220.488427][ T7214] loop0: detected capacity change from 0 to 16 [ 220.504901][ T7214] erofs: (device loop0): mounted with root inode @ nid 36. [ 220.533085][ T7214] syz.0.1199: attempt to access beyond end of device [ 220.533085][ T7214] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 220.551370][ T7200] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038 (0x7fffffff) [ 220.734259][ T7220] loop1: detected capacity change from 0 to 64 [ 220.760947][ T7220] hfs: unable to locate alternate MDB [ 220.771889][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.787141][ T7220] hfs: continuing without an alternate MDB [ 220.810230][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.999546][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 221.242837][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 221.403806][ T22] usb 4-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 221.562200][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 221.702356][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.948436][ T22] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 221.958444][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.994753][ T7241] netlink: 'syz.2.1207': attribute type 10 has an invalid length. [ 222.004959][ T7241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1207'. [ 222.262810][ T22] usb 4-1: string descriptor 0 read error: -71 [ 222.280227][ T22] hub 4-1:1.0: bad descriptor, ignoring hub [ 222.343120][ T22] hub: probe of 4-1:1.0 failed with error -5 [ 222.373408][ T22] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 222.433481][ T22] usb 4-1: USB disconnect, device number 20 [ 222.618628][ T7258] loop1: detected capacity change from 0 to 512 [ 222.655680][ T7258] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 222.698360][ T7258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.740869][ T7258] EXT4-fs (loop1): 1 truncate cleaned up [ 222.757843][ T7258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 222.811866][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 223.212685][ T3683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.253350][ T7271] loop3: detected capacity change from 0 to 4096 [ 223.293056][ T7271] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 223.312900][ T3683] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 223.320515][ T3683] usb 5-1: can't read configurations, error -71 [ 223.763737][ T7279] loop2: detected capacity change from 0 to 4096 [ 223.991446][ T7279] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 224.036090][ T6915] EXT4-fs (loop1): unmounting filesystem. [ 224.582592][ T27] audit: type=1800 audit(1723418087.280:12): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1216" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 224.845671][ T7274] loop0: detected capacity change from 0 to 32768 [ 225.097898][ T3637] bridge0: port 3(syz_tun) entered disabled state [ 225.160245][ T3637] device syz_tun left promiscuous mode [ 225.165885][ T3637] bridge0: port 3(syz_tun) entered disabled state [ 225.317848][ T3653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.328030][ T3653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.336015][ T3653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.344505][ T3653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.352001][ T3653] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.359915][ T3653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.405981][ T4338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.518663][ T4338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.542886][ T152] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 225.670502][ T4338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.684142][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 225.775898][ T4338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.811654][ T3653] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.862395][ T7305] chnl_net:caif_netlink_parms(): no params data found [ 225.878712][ T3653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.888476][ T3653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.897827][ T3653] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.905467][ T3653] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.913202][ T3653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.003447][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.016091][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.727648][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.748076][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.764653][ T7305] device bridge_slave_0 entered promiscuous mode [ 226.787026][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1232'. [ 226.803792][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.811418][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.823849][ T7305] device bridge_slave_1 entered promiscuous mode [ 226.956925][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.995683][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.072959][ T7305] team0: Port device team_slave_0 added [ 227.096455][ T7305] team0: Port device team_slave_1 added [ 227.170480][ T7314] chnl_net:caif_netlink_parms(): no params data found [ 227.238334][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.247793][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.290606][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.370745][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.385367][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.426735][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.428265][ T7349] loop2: detected capacity change from 0 to 128 [ 227.458558][ T3653] Bluetooth: hci1: command tx timeout [ 227.598286][ T7349] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 227.637339][ T7305] device hsr_slave_0 entered promiscuous mode [ 227.647985][ T7305] device hsr_slave_1 entered promiscuous mode [ 227.663652][ T7305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.686484][ T7305] Cannot create hsr debugfs directory [ 227.767313][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.795666][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.814107][ T7314] device bridge_slave_0 entered promiscuous mode [ 227.852151][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.932356][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.943845][ T7314] device bridge_slave_1 entered promiscuous mode [ 228.019123][ T3653] Bluetooth: hci4: command tx timeout [ 228.572275][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.699437][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.822981][ T152] usb 5-1: unable to get BOS descriptor or descriptor too short [ 228.892753][ T152] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 228.900423][ T152] usb 5-1: can't read configurations, error -71 [ 229.002987][ T7314] team0: Port device team_slave_0 added [ 229.526101][ T3653] Bluetooth: hci1: command tx timeout [ 229.545490][ T4338] device hsr_slave_0 left promiscuous mode [ 229.552336][ T4338] device hsr_slave_1 left promiscuous mode [ 229.559796][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.567389][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.575464][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.582950][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.611420][ T4338] device bridge_slave_1 left promiscuous mode [ 229.631127][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.653400][ T4338] device bridge_slave_0 left promiscuous mode [ 229.659648][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.721425][ T4338] device veth1_macvtap left promiscuous mode [ 229.744797][ T4338] device veth0_macvtap left promiscuous mode [ 229.750937][ T4338] device veth1_vlan left promiscuous mode [ 229.769550][ T4338] device veth0_vlan left promiscuous mode [ 230.092934][ T3653] Bluetooth: hci4: command tx timeout [ 230.162943][ T6542] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 231.192087][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 231.384679][ T7422] loop2: detected capacity change from 0 to 512 [ 231.401176][ T7422] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.412941][ T7422] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 231.638706][ T3653] Bluetooth: hci1: command tx timeout [ 231.762133][ T3654] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.914252][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.941066][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.145493][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 232.170251][ T3653] Bluetooth: hci4: command tx timeout [ 232.218944][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 232.327661][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 232.428227][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.513486][ T7436] loop4: detected capacity change from 0 to 512 [ 232.553219][ T7436] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 232.564653][ T7436] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 232.958463][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.268658][ T7438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.504174][ T6542] usb 4-1: unable to get BOS descriptor or descriptor too short [ 233.583991][ T6542] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 233.600419][ T6542] usb 4-1: can't read configurations, error -71 [ 233.685764][ T3651] Bluetooth: hci1: command tx timeout [ 234.028959][ T4338] bond0 (unregistering): Released all slaves [ 234.125588][ T7314] team0: Port device team_slave_1 added [ 234.151444][ T7447] netlink: 'syz.4.1262': attribute type 10 has an invalid length. [ 234.165781][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1262'. [ 234.247110][ T3651] Bluetooth: hci4: command tx timeout [ 234.760977][ T7452] loop3: detected capacity change from 0 to 65536 [ 234.999257][ T7452] XFS (loop3): Mounting V5 Filesystem [ 235.184782][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.191759][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.277612][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.294649][ T7452] XFS (loop3): Ending clean mount [ 235.315894][ T7452] XFS (loop3): Quotacheck needed: Please wait. [ 235.513736][ T7452] XFS (loop3): Quotacheck: Done. [ 235.608928][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 236.201955][ T7474] loop4: detected capacity change from 0 to 512 [ 236.769144][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 236.953229][ T7477] loop2: detected capacity change from 0 to 512 [ 237.123162][ T7477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.123177][ T7474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.123192][ T7474] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 237.134504][ T7477] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 237.240160][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.278867][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.345988][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.439301][ T3655] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 237.687768][ T7314] device hsr_slave_0 entered promiscuous mode [ 237.736499][ T7314] device hsr_slave_1 entered promiscuous mode [ 237.765011][ T7314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.782731][ T7314] Cannot create hsr debugfs directory [ 238.003602][ T6542] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 238.361781][ T7483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.380599][ T7483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.672026][ T7305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.804233][ T7314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.857594][ T7305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.917670][ T7314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.972846][ T7305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.010551][ T7305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.082347][ T7314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.211032][ T7314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.277742][ T3636] XFS (loop3): Unmounting Filesystem [ 239.466177][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.500387][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.510539][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.530109][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.564997][ T7314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.584724][ T7314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.603949][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.623556][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.648028][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.655189][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.693259][ T7314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.724183][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.732193][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.746906][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.756270][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.763422][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.792938][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.801943][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.823581][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.844251][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.855720][ T7314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.893249][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.901292][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.920949][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.960319][ T7305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.990161][ T7305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.010220][ T7519] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 240.020672][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1273'. [ 240.049274][ T7519] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 240.106646][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.122053][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.151294][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.193684][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.278202][ T7527] loop3: detected capacity change from 0 to 512 [ 240.337596][ T7527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 240.346788][ T7527] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038 (0x7fffffff) [ 240.395955][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.113441][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 241.202804][ T6542] usb 3-1: unable to get BOS descriptor or descriptor too short [ 241.279079][ T6542] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 241.293765][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.300476][ T6542] usb 3-1: can't read configurations, error -71 [ 241.365914][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.374508][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.396421][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.436489][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.460865][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.496324][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.503532][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.518887][ T7540] loop2: detected capacity change from 0 to 1024 [ 241.634826][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 241.684704][ T7547] loop4: detected capacity change from 0 to 16 [ 241.759606][ T7547] erofs: (device loop4): mounted with root inode @ nid 36. [ 241.814556][ T7550] loop3: detected capacity change from 0 to 512 [ 241.884299][ T7550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.895696][ T7550] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 242.160151][ T7547] syz.4.1280: attempt to access beyond end of device [ 242.160151][ T7547] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 242.176231][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.185138][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.193918][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.202374][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.209510][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.221693][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.411836][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.421259][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.431936][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.147663][ T7553] hfsplus: bad catalog entry type [ 243.168454][ T7314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.242660][ T7314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.343524][ T3640] hfsplus: bad catalog entry type [ 243.346207][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.359486][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.368582][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.377415][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.385973][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.399091][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.453408][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.491236][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.544067][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.551907][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.589734][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.671788][ T3640] bridge0: port 3(syz_tun) entered disabled state [ 243.744442][ T3640] device syz_tun left promiscuous mode [ 243.749999][ T3640] bridge0: port 3(syz_tun) entered disabled state [ 243.845642][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.865768][ T6542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.940016][ T4307] hfsplus: b-tree write err: -5, ino 4 [ 243.946616][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.982907][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.010943][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.039655][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.059956][ T7305] device veth0_vlan entered promiscuous mode [ 244.109321][ T7305] device veth1_vlan entered promiscuous mode [ 244.166091][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.178219][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.197067][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.212846][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.236045][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.277077][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.286712][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.325115][ T7305] device veth0_macvtap entered promiscuous mode [ 244.367683][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.384303][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.413416][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.445243][ T7305] device veth1_macvtap entered promiscuous mode [ 244.489758][ T7314] device veth0_vlan entered promiscuous mode [ 244.506072][ T7588] loop4: detected capacity change from 0 to 16 [ 244.554943][ T7588] erofs: (device loop4): mounted with root inode @ nid 36. [ 244.564203][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.572476][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.624251][ T7314] device veth1_vlan entered promiscuous mode [ 244.654487][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.675726][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.710438][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.731139][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.751372][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.771213][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.798525][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.816958][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.864617][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.942884][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.951501][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.981328][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 245.009653][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 245.048582][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.101171][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.123860][ T3653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.134158][ T3653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.206742][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 245.389955][ T7606] loop4: detected capacity change from 0 to 512 [ 245.410069][ T7606] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.421523][ T7606] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 245.751541][ T3653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.775024][ T3653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.843273][ T3653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.850602][ T3653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.911714][ T3654] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.912946][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.935115][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.983648][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.050432][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.112641][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.173026][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.183126][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.193628][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.204989][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.230005][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.249963][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.279369][ T7305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.291301][ T7305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.332620][ T7305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.349215][ T7305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.415922][ T4338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.454610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.473453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.484417][ T7314] device veth0_macvtap entered promiscuous mode [ 246.567226][ T7314] device veth1_macvtap entered promiscuous mode [ 246.631064][ T4338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.717188][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.742297][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.754054][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.772714][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.793010][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.828940][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.849435][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.872914][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.883520][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.894276][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.918820][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.935765][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.954967][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.974704][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.989915][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.002044][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.019368][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.029357][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.052003][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.069741][ T7314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.087640][ T7314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.100802][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.136675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.157484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.175043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.196395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.214514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.234026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.295070][ T4338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.324699][ T7314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.333954][ T7314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.343540][ T7314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.352335][ T7314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.393939][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.410569][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.441558][ T4338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.449641][ T7640] loop4: detected capacity change from 0 to 16 [ 247.471337][ T7640] erofs: (device loop4): mounted with root inode @ nid 36. [ 247.480424][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.546598][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.563789][ T14] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 247.613095][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.630706][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 247.675372][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.708277][ T6723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.747302][ T6723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.791543][ T7006] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.890407][ T7648] loop1: detected capacity change from 0 to 128 [ 247.897046][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.920970][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.933002][ T3653] Bluetooth: hci3: command tx timeout [ 247.954932][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.970853][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.991140][ T7648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 248.004774][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.013246][ T7648] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 248.025687][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.043776][ T7599] device bridge_slave_0 entered promiscuous mode [ 248.053094][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.179110][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.190263][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.206739][ T7599] device bridge_slave_1 entered promiscuous mode [ 248.246406][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.361446][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.377186][ T3643] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 248.509221][ T7599] team0: Port device team_slave_0 added [ 248.531403][ T7599] team0: Port device team_slave_1 added [ 248.566020][ T27] audit: type=1326 audit(1723418111.270:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b19779f9 code=0x0 [ 248.636431][ T3643] usb 2-1: Using ep0 maxpacket: 8 [ 248.678735][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.692288][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.731912][ T7681] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.739610][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.752968][ T3643] usb 2-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 248.772808][ T3643] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.790839][ T3643] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.809256][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.814215][ T3643] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 248.826591][ T27] audit: type=1326 audit(1723418111.530:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b19779f9 code=0x0 [ 248.848781][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.858638][ T3643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.885186][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.933559][ T27] audit: type=1326 audit(1723418111.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7676 comm="syz.0.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b19779f9 code=0x0 [ 248.999277][ T7681] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1301'. [ 249.136552][ T7599] device hsr_slave_0 entered promiscuous mode [ 249.145918][ T7599] device hsr_slave_1 entered promiscuous mode [ 249.165351][ T7599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.178500][ T7599] Cannot create hsr debugfs directory [ 249.192857][ T3643] usb 2-1: string descriptor 0 read error: -71 [ 249.213502][ T3643] hub 2-1:1.0: bad descriptor, ignoring hub [ 249.227308][ T3643] hub: probe of 2-1:1.0 failed with error -5 [ 249.237518][ T3643] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 249.291116][ T3643] usb 2-1: USB disconnect, device number 13 [ 249.536730][ T7701] loop4: detected capacity change from 0 to 16 [ 249.557148][ T7701] erofs: (device loop4): mounted with root inode @ nid 36. [ 249.845404][ T7305] EXT4-fs (loop1): unmounting filesystem. [ 250.003130][ T3653] Bluetooth: hci3: command tx timeout [ 250.652767][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 250.733080][ T14] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 250.740719][ T14] usb 4-1: can't read configurations, error -71 [ 251.127390][ T7729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1316'. [ 252.011549][ T7741] loop3: detected capacity change from 0 to 128 [ 252.099791][ T3651] Bluetooth: hci3: command tx timeout [ 252.157938][ T7741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 252.341172][ T7741] ext4 filesystem being mounted at /275/mnt supports timestamps until 2038 (0x7fffffff) [ 253.055892][ T3688] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 253.214555][ T4338] device hsr_slave_0 left promiscuous mode [ 253.236544][ T4338] device hsr_slave_1 left promiscuous mode [ 253.253423][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.260873][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.285730][ T7006] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 253.300723][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.312834][ T3688] usb 4-1: Using ep0 maxpacket: 8 [ 253.321860][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.350391][ T4338] device bridge_slave_1 left promiscuous mode [ 253.370072][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.393696][ T4338] device bridge_slave_0 left promiscuous mode [ 253.399937][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.428949][ T4338] device hsr_slave_0 left promiscuous mode [ 253.434672][ T3688] usb 4-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 253.445491][ T4338] device hsr_slave_1 left promiscuous mode [ 253.462666][ T3688] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 253.471810][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.501230][ T3688] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.505613][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.540342][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.548345][ T3688] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 253.562465][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.573755][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.582427][ T4338] device bridge_slave_1 left promiscuous mode [ 253.600495][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.629904][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.641049][ T4338] device bridge_slave_0 left promiscuous mode [ 253.650124][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.658992][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.761672][ T4338] device veth1_macvtap left promiscuous mode [ 253.767901][ T4338] device veth0_macvtap left promiscuous mode [ 253.775357][ T4338] device veth1_vlan left promiscuous mode [ 253.781282][ T4338] device veth0_vlan left promiscuous mode [ 253.789686][ T4338] device veth1_macvtap left promiscuous mode [ 253.797706][ T4338] device veth0_macvtap left promiscuous mode [ 253.804373][ T4338] device veth1_vlan left promiscuous mode [ 253.810411][ T4338] device veth0_vlan left promiscuous mode [ 253.872852][ T3688] usb 4-1: string descriptor 0 read error: -71 [ 253.883112][ T3688] hub 4-1:1.0: bad descriptor, ignoring hub [ 253.892829][ T3688] hub: probe of 4-1:1.0 failed with error -5 [ 253.901654][ T3688] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 253.934468][ T3688] usb 4-1: USB disconnect, device number 25 [ 254.162740][ T3651] Bluetooth: hci3: command tx timeout [ 254.377644][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 254.653487][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 254.719027][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 254.775385][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.837165][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.525420][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531818][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.062742][ T7006] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.173116][ T4338] bond0 (unregistering): Released all slaves [ 256.243082][ T3651] Bluetooth: hci3: command tx timeout [ 256.272673][ T7006] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 256.280272][ T7006] usb 2-1: can't read configurations, error -71 [ 256.382382][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 256.566674][ T7806] loop1: detected capacity change from 0 to 512 [ 256.597135][ T7806] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.608652][ T7806] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 257.052645][ T3688] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 257.423266][ T3688] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 257.432330][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.443110][ T3688] usb 4-1: config 0 descriptor?? [ 257.460167][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 257.493142][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 257.520780][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.554304][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.836738][ T4338] bond0 (unregistering): Released all slaves [ 257.935495][ T3688] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 257.964155][ T7780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1327'. [ 257.982909][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1327'. [ 257.995163][ T3688] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 258.017039][ T3688] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 258.028866][ T3688] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 258.037295][ T3688] CPU: 1 PID: 3688 Comm: kworker/1:8 Not tainted 6.1.104-syzkaller #0 [ 258.041332][ T7599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.045438][ T3688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 258.045452][ T3688] Workqueue: usb_hub_wq hub_event [ 258.067209][ T3688] RIP: 0010:u2fzero_rng_read+0x27d/0x710 [ 258.072837][ T3688] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a2 ad c6 f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 04 ae c6 f9 48 8d 84 24 80 00 00 [ 258.092449][ T3688] RSP: 0018:ffffc900046c6720 EFLAGS: 00010202 [ 258.098533][ T3688] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 258.106505][ T3688] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805964df69 [ 258.114547][ T3688] RBP: ffffc900046c68d0 R08: dffffc0000000000 R09: ffff88805964df2e [ 258.122499][ T3688] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8880755733e0 [ 258.130463][ T3688] R13: 1ffff1100eaae606 R14: ffff888075573030 R15: dffffc0000000000 [ 258.138436][ T3688] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 258.147347][ T3688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.153913][ T3688] CR2: 00007f69e59fe3cc CR3: 00000000777e6000 CR4: 00000000003506e0 [ 258.161871][ T3688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.169821][ T3688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.177778][ T3688] Call Trace: [ 258.181037][ T3688] [ 258.183949][ T3688] ? __die_body+0x5e/0xa0 [ 258.188268][ T3688] ? die_addr+0x95/0xc0 [ 258.192406][ T3688] ? exc_general_protection+0x3ae/0x590 [ 258.197944][ T3688] ? asm_exc_general_protection+0x22/0x30 [ 258.203658][ T3688] ? u2fzero_rng_read+0x27d/0x710 [ 258.208670][ T3688] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 258.214202][ T3688] ? mutex_lock_nested+0x10/0x10 [ 258.219127][ T3688] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 258.224656][ T3688] add_early_randomness+0x78/0x140 [ 258.229751][ T3688] hwrng_register+0x3a0/0x440 [ 258.234412][ T3688] devm_hwrng_register+0x43/0xb0 [ 258.239333][ T3688] u2fzero_probe+0x31a/0x410 [ 258.243909][ T3688] ? hid_map_usage_clear+0x180/0x180 [ 258.249176][ T3688] hid_device_probe+0x298/0x3a0 [ 258.254010][ T3688] ? hid_uevent+0x310/0x310 [ 258.258491][ T3688] really_probe+0x2ab/0xcb0 [ 258.262980][ T3688] __driver_probe_device+0x1a2/0x3d0 [ 258.268246][ T3688] driver_probe_device+0x50/0x420 [ 258.273265][ T3688] __device_attach_driver+0x2cf/0x510 [ 258.278640][ T3688] ? coredump_store+0x90/0x90 [ 258.283299][ T3688] bus_for_each_drv+0x183/0x200 [ 258.288132][ T3688] ? subsys_find_device_by_id+0x310/0x310 [ 258.293831][ T3688] __device_attach+0x359/0x570 [ 258.298577][ T3688] ? device_attach+0x20/0x20 [ 258.303148][ T3688] ? kobject_uevent_env+0x54a/0x8c0 [ 258.308334][ T3688] ? kobject_uevent_env+0x54a/0x8c0 [ 258.313516][ T3688] bus_probe_device+0xba/0x1e0 [ 258.318258][ T3688] ? device_add+0xab9/0xfd0 [ 258.322753][ T3688] device_add+0xb48/0xfd0 [ 258.327086][ T3688] hid_add_device+0x3a5/0x510 [ 258.331758][ T3688] usbhid_probe+0xb2d/0xeb0 [ 258.336254][ T3688] usb_probe_interface+0x5c0/0xaf0 [ 258.341352][ T3688] ? usb_register_driver+0x3d0/0x3d0 [ 258.346617][ T3688] really_probe+0x2ab/0xcb0 [ 258.351103][ T3688] __driver_probe_device+0x1a2/0x3d0 [ 258.356370][ T3688] driver_probe_device+0x50/0x420 [ 258.361376][ T3688] __device_attach_driver+0x2cf/0x510 [ 258.366727][ T3688] ? coredump_store+0x90/0x90 [ 258.371383][ T3688] bus_for_each_drv+0x183/0x200 [ 258.376225][ T3688] ? subsys_find_device_by_id+0x310/0x310 [ 258.381931][ T3688] __device_attach+0x359/0x570 [ 258.386676][ T3688] ? device_attach+0x20/0x20 [ 258.391423][ T3688] ? kobject_uevent_env+0x54a/0x8c0 [ 258.396615][ T3688] ? kobject_uevent_env+0x54a/0x8c0 [ 258.401792][ T3688] bus_probe_device+0xba/0x1e0 [ 258.406534][ T3688] ? device_add+0xab9/0xfd0 [ 258.411019][ T3688] device_add+0xb48/0xfd0 [ 258.415332][ T3688] usb_set_configuration+0x19dd/0x2020 [ 258.420780][ T3688] usb_generic_driver_probe+0x84/0x140 [ 258.426228][ T3688] usb_probe_device+0x130/0x260 [ 258.431060][ T3688] ? usb_register_device_driver+0x240/0x240 [ 258.436929][ T3688] really_probe+0x2ab/0xcb0 [ 258.441415][ T3688] __driver_probe_device+0x1a2/0x3d0 [ 258.446681][ T3688] driver_probe_device+0x50/0x420 [ 258.451694][ T3688] __device_attach_driver+0x2cf/0x510 [ 258.457053][ T3688] ? coredump_store+0x90/0x90 [ 258.461712][ T3688] bus_for_each_drv+0x183/0x200 [ 258.466546][ T3688] ? subsys_find_device_by_id+0x310/0x310 [ 258.472248][ T3688] __device_attach+0x359/0x570 [ 258.476997][ T3688] ? device_attach+0x20/0x20 [ 258.481566][ T3688] ? kobject_uevent_env+0x54a/0x8c0 [ 258.486744][ T3688] ? kobject_uevent_env+0x54a/0x8c0 [ 258.491919][ T3688] bus_probe_device+0xba/0x1e0 [ 258.496666][ T3688] ? device_add+0xab9/0xfd0 [ 258.501162][ T3688] device_add+0xb48/0xfd0 [ 258.505485][ T3688] usb_new_device+0xbdd/0x18f0 [ 258.510237][ T3688] ? usb_disconnect+0x8c0/0x8c0 [ 258.515067][ T3688] ? do_raw_spin_unlock+0x137/0x8a0 [ 258.520252][ T3688] ? _raw_spin_unlock_irq+0x1f/0x40 [ 258.525448][ T3688] ? lockdep_hardirqs_on+0x94/0x130 [ 258.530627][ T3688] hub_event+0x2efe/0x5730 [ 258.535042][ T3688] ? led_work+0x700/0x700 [ 258.539356][ T3688] ? read_lock_is_recursive+0x10/0x10 [ 258.544709][ T3688] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 258.550671][ T3688] ? print_irqtrace_events+0x210/0x210 [ 258.556121][ T3688] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 258.561997][ T3688] ? do_raw_spin_unlock+0x137/0x8a0 [ 258.567181][ T3688] ? process_one_work+0x7a9/0x11d0 [ 258.572275][ T3688] process_one_work+0x8a9/0x11d0 [ 258.577197][ T3688] ? worker_detach_from_pool+0x260/0x260 [ 258.582812][ T3688] ? _raw_spin_lock_irqsave+0x120/0x120 [ 258.588338][ T3688] ? kthread_data+0x4e/0xc0 [ 258.592846][ T3688] ? wq_worker_running+0x97/0x190 [ 258.597855][ T3688] worker_thread+0xa47/0x1200 [ 258.602525][ T3688] kthread+0x28d/0x320 [ 258.606584][ T3688] ? worker_clr_flags+0x190/0x190 [ 258.611587][ T3688] ? kthread_blkcg+0xd0/0xd0 [ 258.616158][ T3688] ret_from_fork+0x1f/0x30 [ 258.620559][ T3688] [ 258.623565][ T3688] Modules linked in: [ 258.630312][ T3688] ---[ end trace 0000000000000000 ]--- [ 258.636363][ T3688] RIP: 0010:u2fzero_rng_read+0x27d/0x710 [ 258.642073][ T3688] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a2 ad c6 f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 04 ae c6 f9 48 8d 84 24 80 00 00 [ 258.661804][ T3688] RSP: 0018:ffffc900046c6720 EFLAGS: 00010202 [ 258.667934][ T3688] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 258.676004][ T3688] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805964df69 [ 258.684456][ T3688] RBP: ffffc900046c68d0 R08: dffffc0000000000 R09: ffff88805964df2e [ 258.692463][ T3688] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8880755733e0 [ 258.700816][ T3688] R13: 1ffff1100eaae606 R14: ffff888075573030 R15: dffffc0000000000 [ 258.708852][ T3688] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 258.718534][ T3688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.726279][ T3688] CR2: 00007f69e59fe3cc CR3: 000000000d08e000 CR4: 00000000003506e0 [ 258.734313][ T3688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 258.742372][ T3688] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 258.750585][ T3688] Kernel panic - not syncing: Fatal exception [ 258.756873][ T3688] Kernel Offset: disabled [ 258.761180][ T3688] Rebooting in 86400 seconds..