last executing test programs: 3m38.225655428s ago: executing program 4 (id=18): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073"], 0xdc}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 3m37.051418187s ago: executing program 4 (id=26): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd700010dcdf253b00000008000000", @ANYRES32=0x0, @ANYBLOB="0c009900f4ffffff260000000a00cd0009000300070000000800570080110000080057002903000005001901080000000800a10004000000080027000200000008009f00010000000500190106000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r6 = userfaultfd(0x80800) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r7 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 3m34.91926647s ago: executing program 4 (id=38): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, r0, 0x8b819000) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000000)) 3m34.657330216s ago: executing program 4 (id=41): prlimit64(0x0, 0xa, &(0x7f0000000180)={0x8, 0x7}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x3, 0x17e, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) 3m34.303822315s ago: executing program 4 (id=44): memfd_create(&(0x7f0000000000)='+}))\x00', 0x6) 3m33.795524007s ago: executing program 4 (id=48): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd700010dcdf253b00000008000000", @ANYRES32=0x0, @ANYBLOB="0c009900f4ffffff260000000a00cd0009000300070000000800570080110000080057002903000005001901080000000800a10004000000080027000200000008009f00010000000500190106000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r6 = userfaultfd(0x80800) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r7 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 3m33.29994775s ago: executing program 32 (id=48): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd700010dcdf253b00000008000000", @ANYRES32=0x0, @ANYBLOB="0c009900f4ffffff260000000a00cd0009000300070000000800570080110000080057002903000005001901080000000800a10004000000080027000200000008009f00010000000500190106000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r6 = userfaultfd(0x80800) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xfffffffc, 0x80000014}, 0xc) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r7 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) read(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 15.547048587s ago: executing program 3 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)="310a1e0511d9", 0x6) 14.99055953s ago: executing program 3 (id=1161): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.2072716s ago: executing program 3 (id=1165): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x37, 0x8}, 'port1\x00', 0x40, 0x0, 0x6, 0x4, 0xfffffffb, 0x2, 0x1, 0x0, 0x4, 0x4}) 13.37771409s ago: executing program 3 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x2a01404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x100) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 13.098877717s ago: executing program 3 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) 9.025769668s ago: executing program 1 (id=1180): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) r1 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='smaps_rollup\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.893718361s ago: executing program 3 (id=1181): write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x90001) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, &(0x7f0000000000)) 8.884668701s ago: executing program 5 (id=1182): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/112, 0x2b}], 0x1, 0x2, 0xfffffffe) 8.299654106s ago: executing program 33 (id=1181): write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x90001) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, &(0x7f0000000000)) 8.286147306s ago: executing program 1 (id=1186): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 8.285982946s ago: executing program 5 (id=1187): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 7.973835503s ago: executing program 5 (id=1189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004084) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 7.876932105s ago: executing program 1 (id=1190): r0 = syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x185, &(0x7f0000000440)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24000040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x60c501, 0x5d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd7000fcdbdf25650000000c0000000800004a000000040003800800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480d5) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) r5 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x68, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6b}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x121042, 0x55) creat(0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000080)={[{@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@acl}, {@noblock_validity}]}, 0x0, 0x526, &(0x7f0000000c00)="$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") r8 = socket(0x11, 0x2, 0x0) r9 = epoll_create1(0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r10, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x3c}}, 0x20000010) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0xa0179e08}) pwrite64(r8, &(0x7f0000000740)="7a27e9acc2f45619cca6e8d39becbe08c8e1abd93fa722b9317c1c95e6fe274c94a7573863ec7d22e1d28e13363077e71299ec6ce116a21bb26daec86d8bc0ac0ae91ad79055ac35aa3ba5d1515d49ae60cb4b1ed0c472b81601bea8699d46f8", 0x60, 0x8000) 7.393619718s ago: executing program 0 (id=1192): r0 = socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000240)=0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) io_setup(0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e24, 0x68, @mcast1, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0x17, 0x9}, &(0x7f0000000380)=0x9c) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f07", 0x39}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r6 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x2, 0x7fffffff}}, './file1\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x244, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x9}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x244}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.354983999s ago: executing program 1 (id=1193): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = epoll_create(0x4583) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xc8000015}) 3.489196444s ago: executing program 2 (id=1198): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000084, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@user_xattr}, {@inlinecrypt}]}, 0xfe, 0x7bd, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400008000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001cc0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEWQI9O6QHLxocipJ6KFjaDogW0D+BQwmNm34pKiIloUJUr+fGzquzv73ux7M6s3FME3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945dzxE2m7pT9Y293WAAAPwoWxrxw/ue3rPwDwOLj0of79DwAAAAAAAAAAAAAAPAQpingyUsxeWE0T1fOu+vnOwI2b4yOjW1c7kKqa+6ry5Vf9xMlTp7/4wvCZXp7vTK/XH9ztbnw6Xhu7dK7x8sz12bn2/Hx7sjE+3bkyM9ne9h52Wn+zo9UBaFx//cbk1avzjZPPn9rw8s2h9wefODx0dvjZY8/0yo6PjI6OrRep95ev3XNDuu40w2N/FHEsUjz33Z+mVkQUsfNjUd9w7h+4A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGW5+LqA080D7cWTNisWx+2eCjZffGZltzrctT7cbF1txCZ6EzM30xdVtb9qcRRZxJEUsRsbLFX8OBKKIWKb59aDVdjoh9vePwhWpi8J3bUexiH7ehbGdjIGKpeATO2R42GEW8Gil+9s6RuJLHmWqs+XzEq2V+P+KtMl+KSOUH43TEe7s+nPOg1KKIvyzP/9nVNFmNB71x5fxXG1+evjrTV7Y3rnzI68NtI8VDuj4c2JQPxh4fm+pRRKsa8VfTvX+zAwAAAAAAAAAAAAAAAMD9diCK+FSkeOXf/6SaVxzVvPRDZ4f/cOhX++eMP32X/ZRln4+IxWJ7c3L354mBF9PFlB7yXOKPsnoU8ad5/t83H3ZjAAAAAAAAAAAAAAAAAAAAPtKK+EmkePHdI2kp+tcU70xfa1xqXZ7qrgrbW/u3t2b62traWiN1s5lzIudizqWcyzlXckaR6+ds5pzIuZhzKedyzpWcsS/Xz9nMOZFzMedSzuWcKzmjluvnbOacyLmYcykvur+cn6/kjD2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOOkiCJ+Him+9fXVFCkimhET0c3lwYfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNJiK+F6kaPxR89a2WkSk6v+uI+Ufp6O5v8yPR3O4zJeieS5nq8pa85sPof3szEAq4seRYrD+9q0Tns//QPfZrY9BvPWN9WefrnVzX+/FofcHnzh86Ozw6G88fafHaasGHD3fmb5xszE+Mjo61re5lt/9433bhvL7Fven60TE/Btvvt6ammrP3fuD8iOwg+qP0INU+6j09NF+8Jv3a4dR2wvdeTgP7j52/P+DGKDYVeX1/71I8bvv/kfvgt+9/tfjV7rPbl3h44M/W7/+v7h5R9u8/tc218vX//KavtX1/8m+bS/m70YGahH1heuzA4cj6vNvvHmsc711rX2tPX36+PEvDQ9/6dTxgf0R9audqXb3UYqp9vH7crgAAAAAAAAAAAAAAAAAHpxUxO9HitaPV1MjIm5W87WGzg4/e+yZfbGvmm+1Yd72a2OXzjVenrk+O9een29PNsanO1dmJtvbfbt6Nd1rfGR0VzpzVwd2uf0H6i/PzL4x17n2xwtbvn6wfu7y/MJc68rWL8eBKCKa/VuOVg0eHxmtGj3VaU1XVS9uOZn+wxtIRfxnpLhyupE+m7fl+f+bZ/hvmP+/uHlHuzT//2N928r3TKmIDyLF7/zV0/HZqp0H47Zjlsv9XaQ4euYzuVzsL8v12tC9r0B3jmBZ9n8jxT/9fGPZ3nzIJ9fLntj2gX1ElOf/UKT43l98J34rb9t4/4etz//BzTvapfP/VN+2gxvuV7DjrpPP/7FI8dKTb8fn8rZfdv+P3r03juTCt+7PsUvn/xN924by+/72/ek6AAAAAAAAAADAI20gFfH3keKHo7X0Qt62nd//m9y8o136/a9P9m2bvD/rFd31wY4PKgAAAADsEQOpiJ9EimsLb9+aQ71x/nff/M/fW5//OZI2vVr9nO/XqvsG3M+f//Ubyu87sfNuAwAAAAAAAAAAAAAAAAAAwJ6SUhEv5PXUJ6r5/JN3XE99OVK88t/P5XLpcFmutw78UPVn/cLM9LFzU1MzV1oLrctT7cbYbOtKu6z7VKRY/dvP5LpFtb56b7357hrv62uxz0WK0X/ole2uxd5bm/yp9bInyrIfixT/9Y8by34ul/vEetmTZdm/iRRf+8HtZUuH18ueKst+J1L86GuNXtmDZdne/VE/uV72+R/cuiMCAAAAAAAAAAAAAAAAAAAA3LuBVMSfR4r/ub50ay5/Xv9/oO9p5a1v9K33v8nNap3/oWr9/zs9vpf1/6v7Cize6V0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxlKKINyPF7IXVtDxYPu+qn+9M37g5PjK6dbUDqaq5rypfftVPnDx1+osvDJ/p5S+vf799Kl4bu3Su8fLM9dm59vx8e7IxPt25MjPZ3vYedlp/s6PVAWhcf/3G5NWr842Tz5/a8PLNofcHnzg8dHb42WPP9MqOj4yOjvWVqQ3c87vfJt1h+/4o4q8jxXPf/Wn64WBEETs/Fnf57Oy2A1UnjladGB8ZrToy1WlNL5QvXuwdiCKi0Vep2TtGD+Bc7EgzYrFsftngo2X3xmZbc63LU+3GxdbcQmehMzN9MXVbW/anEUWcSRFLEbEyePvuBqKI1yPFtw+tpn8ZjNjXOw5fuDD2leMn79yOYhf7uA1lOxsDEUvFI3DO9rDBKOKfI8XP3jkS/zoYUYvuV3w+4tUyvx/xVnTPdyo/GKcj3tvic8SjqRZF/F95/s+upncGy/GgN66c/2rjy9NXZ/rK9saVR/768CDt8bGpHkX8qBrxV9O/+XsNAAAAAAAAAAAAAAAAsIcU8euR4sV3j6RqfvCtOcWd6WuNS63LU91pfb25f70502tra2uN1M1mzomcizmXci7nXMkZRa6fs1lmfW1tIj9fzLmUcznnSs7Yl+vnbOacyLmYcynncs6VnFHL9XM2c07kXMy5lHM550rO2CNz9wAAAAAAAAAAAAAAAAAAgMdLUf2X4ltfX01rg931pSeim8vWA33s/SIAAP//YnX2fg==") rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0xc7, 0x10, 0x200000004040}}, 0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) 2.978154517s ago: executing program 5 (id=1199): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x5b800080, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x143142, 0x2) read$FUSE(r2, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x1000000201005) 2.935262527s ago: executing program 1 (id=1200): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x800a, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x69f, &(0x7f00000001c0)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='.\x02\x00', 0x0, 0x0, 0x0, 0x0) 2.809681991s ago: executing program 2 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900fd070000740000001400040073793a6b616c6c65723000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4044884) 2.809093151s ago: executing program 0 (id=1202): pipe2(0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x86e40, 0x293) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x40500, 0x80) 2.731314732s ago: executing program 1 (id=1203): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x2400) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0xfffffff6, 0x9, 0x7, 0x7f}) 2.475754829s ago: executing program 2 (id=1204): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x14, 0x400, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x9, 0xc}, {0xb, 0xa}}}, 0x24}}, 0x28008080) r0 = socket(0x10, 0x3, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) fsmount(r1, 0x0, 0x8) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000040000000000800040001000000", 0x24) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000940)={0x1, 0x1, 0x20, 0x3, 0x17d, &(0x7f0000000540)}) recvmmsg(r0, 0x0, 0x0, 0x10122, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.42970626s ago: executing program 0 (id=1205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.231086485s ago: executing program 0 (id=1206): r0 = socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, 0x0, 0x303042, 0x95) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="f4cc31e5135e", @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x4, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) 1.249815669s ago: executing program 0 (id=1207): r0 = socket$inet(0x2, 0x3, 0x6) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x30}}}}], 0x30}}], 0x1, 0x4040) 989.613786ms ago: executing program 0 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004084) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x3, 0x6, @remote}, 0x14) 726.881392ms ago: executing program 2 (id=1209): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = epoll_create(0x4583) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0xc8000015}) 315.995172ms ago: executing program 5 (id=1210): mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) preadv(r0, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/112, 0x2b}], 0x1, 0x2, 0xfffffffe) 165.657946ms ago: executing program 2 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x20, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1}]}}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x0, 0x0}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002001, r1, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x639, 0x0, 0x3}]}) 131.857067ms ago: executing program 5 (id=1212): r0 = socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000240)=0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) io_setup(0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e24, 0x68, @mcast1, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0x17, 0x9}, &(0x7f0000000380)=0x9c) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f07", 0x39}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r6 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x2, 0x7fffffff}}, './file1\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x248, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x1fc, 0x8, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x9}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @mcast1, 0x7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x248}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 2 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c009900fd070000740000001400040073793a6b616c6c65723000000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4044884) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 77.879939][ T4262] cgroup: Unknown subsys name 'net' [ 77.981173][ T4262] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.570901][ T4262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.112910][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.120929][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.129209][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.138769][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.146499][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.154051][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.161690][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.163981][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.170016][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.177285][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.186310][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.191474][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.200524][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.205444][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.213039][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.223403][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.226547][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.235043][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.240139][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.253056][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.253502][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.267121][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.269420][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.274818][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.283675][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.295841][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.342499][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.369031][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.376818][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.389387][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.790535][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 81.820902][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 81.934139][ T4285] chnl_net:caif_netlink_parms(): no params data found [ 81.961588][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 81.983767][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.990967][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.000163][ T4275] device bridge_slave_0 entered promiscuous mode [ 82.022837][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 82.050494][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.057852][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.066461][ T4275] device bridge_slave_1 entered promiscuous mode [ 82.120185][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.128102][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.138978][ T4277] device bridge_slave_0 entered promiscuous mode [ 82.162761][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.174537][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.184144][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.191252][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.202744][ T4277] device bridge_slave_1 entered promiscuous mode [ 82.273463][ T4275] team0: Port device team_slave_0 added [ 82.299139][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.306457][ T4285] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.314944][ T4285] device bridge_slave_0 entered promiscuous mode [ 82.324508][ T4275] team0: Port device team_slave_1 added [ 82.330455][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.337637][ T4285] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.346419][ T4285] device bridge_slave_1 entered promiscuous mode [ 82.356239][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.405045][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.417723][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.424943][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.433180][ T4276] device bridge_slave_0 entered promiscuous mode [ 82.440699][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451346][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.459858][ T4278] device bridge_slave_0 entered promiscuous mode [ 82.482810][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.489811][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.515846][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.534968][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542447][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.550381][ T4276] device bridge_slave_1 entered promiscuous mode [ 82.558039][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.565963][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.574495][ T4278] device bridge_slave_1 entered promiscuous mode [ 82.583048][ T4285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.592851][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.599826][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.626859][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.663210][ T4285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.680186][ T4277] team0: Port device team_slave_0 added [ 82.696617][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.721788][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.733319][ T4277] team0: Port device team_slave_1 added [ 82.750019][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.781911][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.805283][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.812578][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.839037][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.853055][ T4285] team0: Port device team_slave_0 added [ 82.884602][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.891608][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.921294][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.935002][ T4285] team0: Port device team_slave_1 added [ 82.958534][ T4275] device hsr_slave_0 entered promiscuous mode [ 82.971398][ T4275] device hsr_slave_1 entered promiscuous mode [ 82.980707][ T4278] team0: Port device team_slave_0 added [ 82.990631][ T4276] team0: Port device team_slave_0 added [ 83.010334][ T4278] team0: Port device team_slave_1 added [ 83.021783][ T4276] team0: Port device team_slave_1 added [ 83.029534][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.041171][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.067823][ T4285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.115639][ T4285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.123611][ T4285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.149733][ T4285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.190299][ T4277] device hsr_slave_0 entered promiscuous mode [ 83.197229][ T4277] device hsr_slave_1 entered promiscuous mode [ 83.204415][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.212414][ T4277] Cannot create hsr debugfs directory [ 83.218782][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.226097][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.252885][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.273748][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.280737][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.307185][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.325419][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.334079][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.354970][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 83.360776][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.387983][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.398600][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.424861][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.432879][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 83.441678][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 83.448103][ T4289] Bluetooth: hci2: command 0x0409 tx timeout [ 83.454643][ T4293] Bluetooth: hci3: command 0x0409 tx timeout [ 83.466585][ T4285] device hsr_slave_0 entered promiscuous mode [ 83.473850][ T4285] device hsr_slave_1 entered promiscuous mode [ 83.480421][ T4285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.488125][ T4285] Cannot create hsr debugfs directory [ 83.566490][ T4276] device hsr_slave_0 entered promiscuous mode [ 83.573876][ T4276] device hsr_slave_1 entered promiscuous mode [ 83.580609][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.588362][ T4276] Cannot create hsr debugfs directory [ 83.626294][ T4278] device hsr_slave_0 entered promiscuous mode [ 83.633268][ T4278] device hsr_slave_1 entered promiscuous mode [ 83.639915][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.647678][ T4278] Cannot create hsr debugfs directory [ 83.973369][ T4285] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.986077][ T4285] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.002431][ T4285] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.014792][ T4285] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.074865][ T4275] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.085547][ T4275] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.095221][ T4275] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.107387][ T4275] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.186294][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.196807][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.214749][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.224397][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.296729][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.339318][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.347084][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.357578][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.379671][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.408753][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.417996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.428867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.439207][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.446575][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.455705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.485250][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.497468][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.536883][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.546862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.557174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.566187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.573351][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.581726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.590763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.606077][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.626621][ T4278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.660142][ T4278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.671677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.682896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.694872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.704562][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.711743][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.719761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.728877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.737514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.744663][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.753316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.762369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.779232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.787838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.797155][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.808607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.824718][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.840922][ T4278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.853997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.862862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.874240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.884339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.893749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.902717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.911326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.923690][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.938959][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.950839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.969649][ T4278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.990521][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.003895][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.013284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.022348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.030675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.045947][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.056408][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.065283][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.083188][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.114383][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.127627][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.137329][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.144508][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.154351][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.190578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.200050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.208981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.220402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.229646][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.236859][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.293805][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.308375][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.341652][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.353635][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.364239][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.422545][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.431115][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.440459][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 85.453963][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.469673][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.486603][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.496793][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.510031][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.513778][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 85.524179][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 85.530247][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 85.537113][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 85.547354][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.561345][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.638865][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.666791][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.702792][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.719172][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.733811][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.764014][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.780556][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.825637][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.839433][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.863191][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.870388][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.881635][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.898466][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.908889][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.916087][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.925713][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.934891][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.944845][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.952043][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.960484][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.969597][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.004319][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.031725][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.052866][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.060024][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.082558][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.102779][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.122979][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.163471][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.178630][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.199496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.209542][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.219777][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.229726][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.240442][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.249847][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.259160][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.283852][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.292282][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.300479][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.314763][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.324200][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.334171][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.341714][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.351037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.374073][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.381591][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.401713][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.413746][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.430890][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.439885][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.454406][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.463828][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.473718][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.482768][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.491220][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.501395][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.510433][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.530131][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.546049][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.578823][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.606301][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.686031][ T4275] device veth0_vlan entered promiscuous mode [ 86.734502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.753801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.772824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.792677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.801637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.824745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.891098][ T4285] device veth0_vlan entered promiscuous mode [ 86.913849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.932273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.940299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.962976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.982244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.004510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.019234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.027718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.048996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.059565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.070792][ T4275] device veth1_vlan entered promiscuous mode [ 87.086722][ T4276] device veth0_vlan entered promiscuous mode [ 87.120809][ T4285] device veth1_vlan entered promiscuous mode [ 87.160595][ T4276] device veth1_vlan entered promiscuous mode [ 87.213415][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.232675][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.251271][ T4285] device veth0_macvtap entered promiscuous mode [ 87.284570][ T4275] device veth0_macvtap entered promiscuous mode [ 87.302404][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.310588][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.332619][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.344151][ T4285] device veth1_macvtap entered promiscuous mode [ 87.357904][ T4276] device veth0_macvtap entered promiscuous mode [ 87.375991][ T4275] device veth1_macvtap entered promiscuous mode [ 87.402480][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.410683][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.443138][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.451327][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.473035][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.497282][ T4276] device veth1_macvtap entered promiscuous mode [ 87.512166][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 87.521706][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.564568][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.579722][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.592191][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 87.602316][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 87.602559][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 87.608381][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 87.633859][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.651784][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.680222][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.720528][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.735419][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.747355][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.762736][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.772374][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.781107][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.789666][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.798415][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.806199][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.817684][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.826547][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.840394][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.852362][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.862800][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.873621][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.890260][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.903605][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.910889][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.923245][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.934721][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.956025][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.974034][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.988443][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.001276][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.020961][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.029197][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.043083][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.052545][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.063038][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.078318][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.088620][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.105579][ T4285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.114859][ T4285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.126696][ T4285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.135939][ T4285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.154700][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.164284][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182035][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.190791][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.204556][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.219812][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.229117][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.239352][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.249161][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.376674][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.393640][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.437459][ T4278] device veth0_vlan entered promiscuous mode [ 88.465261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.491171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.530596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.550166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.571601][ T4278] device veth1_vlan entered promiscuous mode [ 88.607562][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.623726][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.662041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.670470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.681563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.709110][ T4278] device veth0_macvtap entered promiscuous mode [ 88.723982][ T4278] device veth1_macvtap entered promiscuous mode [ 88.735362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.746085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.755166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.768476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.776643][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.800200][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.803400][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.828327][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.838283][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.855764][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.867828][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.885184][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.899974][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.925191][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.930436][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.948840][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.965786][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.982682][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.002329][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.012823][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.025286][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.036424][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.047209][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.060842][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.072984][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.085374][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.115842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.126080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.138255][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.148479][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158921][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.168676][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.196257][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.208191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.220820][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.229441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.239152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.283617][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.296344][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.310344][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.324936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.336490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.360763][ T4277] device veth0_vlan entered promiscuous mode [ 89.374715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.389098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.434198][ T4277] device veth1_vlan entered promiscuous mode [ 89.443757][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.451625][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.504620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.523163][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.598363][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 89.641277][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.673384][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 89.679725][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 89.685900][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 89.693340][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 89.755801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.775252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.814248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.893578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.946105][ T4277] device veth0_macvtap entered promiscuous mode [ 90.160099][ T4277] device veth1_macvtap entered promiscuous mode [ 90.295320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.344564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.436155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.661598][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.715522][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.754523][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.786764][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.822226][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.902940][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.921907][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.933268][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.957061][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.987001][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.019603][ T4383] cifs: Unknown parameter '' [ 91.031173][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.091219][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.103493][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.138603][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.153704][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.176374][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.201004][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.227907][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.259849][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.286912][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.315791][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.341484][ T7] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 91.352340][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.371615][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.388822][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 91.400187][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 91.422930][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.436552][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.448454][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.471164][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.495812][ T7] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.515544][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549819][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.566651][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 91.585539][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.604357][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.686023][ T3046] cfg80211: failed to load regulatory.db [ 91.698627][ T7] usb 4-1: invalid MIDI out EP 0 [ 91.934796][ T4387] loop2: detected capacity change from 0 to 1024 [ 91.984467][ T4387] ======================================================= [ 91.984467][ T4387] WARNING: The mand mount option has been deprecated and [ 91.984467][ T4387] and is ignored by this kernel. Remove the mand [ 91.984467][ T4387] option from the mount to silence this warning. [ 91.984467][ T4387] ======================================================= [ 92.163751][ T7] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 92.203833][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.302428][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.311587][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.339910][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.350814][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.409111][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.481321][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.529008][ T4387] syz.2.8: attempt to access beyond end of device [ 92.529008][ T4387] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 92.649424][ T4387] syz.2.8: attempt to access beyond end of device [ 92.649424][ T4387] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 92.699991][ T4387] Buffer I/O error on dev loop2, logical block 2889, async page read [ 92.729143][ T27] audit: type=1800 audit(1786329290.598:2): pid=4387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 92.753969][ T4386] syz.2.8: attempt to access beyond end of device [ 92.753969][ T4386] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 92.928886][ T4401] loop4: detected capacity change from 0 to 256 [ 93.008600][ T4401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 93.057492][ T4404] capability: warning: `syz.0.13' uses 32-bit capabilities (legacy support in use) [ 93.142977][ T27] audit: type=1800 audit(1786329291.018:3): pid=4401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=1048595 res=0 errno=0 [ 93.195743][ T4401] syz.4.5: attempt to access beyond end of device [ 93.195743][ T4401] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 93.215058][ T4401] syz.4.5: attempt to access beyond end of device [ 93.215058][ T4401] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 93.236526][ T4401] syz.4.5: attempt to access beyond end of device [ 93.236526][ T4401] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 93.263202][ T4401] syz.4.5: attempt to access beyond end of device [ 93.263202][ T4401] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 93.302174][ T4401] syz.4.5: attempt to access beyond end of device [ 93.302174][ T4401] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 93.347570][ T4401] syz.4.5: attempt to access beyond end of device [ 93.347570][ T4401] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 93.391868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 93.401879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 93.411348][ T4401] syz.4.5: attempt to access beyond end of device [ 93.411348][ T4401] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 93.835537][ T4412] loop1: detected capacity change from 0 to 8 [ 94.136841][ T4416] loop2: detected capacity change from 0 to 4096 [ 94.250459][ T4416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.299497][ T27] audit: type=1804 audit(1786329292.168:4): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.17" name=2F6E6577726F6F742F332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop2" ino=18 res=1 errno=0 [ 94.387681][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 94.552399][ T4323] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.690513][ T4282] usb 4-1: USB disconnect, device number 2 [ 94.714153][ T4323] usb 2-1: device descriptor read/64, error -71 [ 94.801214][ T4428] xt_CT: No such helper "pptp" [ 94.900310][ T4432] loop0: detected capacity change from 0 to 1024 [ 94.984553][ T4323] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.183022][ T4323] usb 2-1: device descriptor read/64, error -71 [ 95.213977][ T4442] loop0: detected capacity change from 0 to 8 [ 95.326430][ T4323] usb usb2-port1: attempt power cycle [ 95.370642][ T4445] cifs: Unknown parameter '' [ 95.410529][ T4449] loop2: detected capacity change from 0 to 256 [ 95.417643][ T4450] Bluetooth: MGMT ver 1.22 [ 95.530440][ T4449] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 95.552600][ T4442] loop0: detected capacity change from 0 to 512 [ 95.620685][ T4442] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 95.772085][ T4323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.798176][ T4442] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 95.844955][ T4323] usb 2-1: device descriptor read/8, error -71 [ 95.853595][ T4442] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 95.873043][ T4442] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 95.881124][ T4442] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 95.898091][ T4442] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.923191][ T4442] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.27: bg 0: block 34: padding at end of block bitmap is not set [ 95.954850][ T4442] Quota error (device loop0): write_blk: dquota write failed [ 95.976201][ T4442] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 95.991756][ T4442] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.27: Failed to acquire dquot type 1 [ 96.027762][ T4442] EXT4-fs (loop0): 1 truncate cleaned up [ 96.103050][ T4442] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.125971][ T4323] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.183946][ T4323] usb 2-1: device descriptor read/8, error -71 [ 96.386916][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 96.393659][ T4323] usb usb2-port1: unable to enumerate USB device [ 96.451920][ T4326] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.599819][ T4467] loop0: detected capacity change from 0 to 128 [ 96.642608][ T4467] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 96.671179][ T4326] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 96.690220][ T4326] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 96.733753][ T4326] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 96.764502][ T4326] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.807233][ T4326] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 96.846052][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.910629][ T4326] usb 4-1: invalid MIDI out EP 0 [ 97.106404][ T4326] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 97.154901][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.583303][ T4481] loop4: detected capacity change from 0 to 16 [ 97.608419][ T4481] erofs: (device loop4): mounted with root inode @ nid 36. [ 98.312115][ T4326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.416651][ T4339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.531891][ T4326] usb 1-1: Using ep0 maxpacket: 8 [ 98.551521][ T4326] usb 1-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 98.579190][ T4339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.597099][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.615434][ T4326] usb 1-1: Product: syz [ 98.627726][ T4326] usb 1-1: Manufacturer: syz [ 98.648442][ T4326] usb 1-1: SerialNumber: syz [ 98.687640][ T4339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.866876][ T4339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.902477][ T4326] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 98.919763][ T4326] usb 1-1: unit 3 not found! [ 99.046298][ T4326] usb 1-1: selecting invalid altsetting 1 [ 99.066424][ T4326] snd-usb-caiaq 1-1:1.2: can't set alt interface. [ 99.090366][ T4326] usb 1-1: unable to init card! (ret=-5) [ 99.109458][ T4326] snd-usb-caiaq: probe of 1-1:1.2 failed with error -5 [ 99.157211][ T4326] usb 1-1: USB disconnect, device number 2 [ 99.460899][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.003612][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.012987][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.020920][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.043935][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.053251][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.060805][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.150090][ T4323] usb 4-1: USB disconnect, device number 3 [ 100.201565][ T4522] loop1: detected capacity change from 0 to 512 [ 100.220852][ T4522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.276830][ T4522] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.57: iget: bad i_size value: 38620345925642 [ 100.318651][ T4526] input: syz0 as /devices/virtual/input/input5 [ 100.330509][ T4522] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.57: couldn't read orphan inode 15 (err -117) [ 100.370104][ T4522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.414647][ T27] audit: type=1804 audit(1786329298.288:5): pid=4522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.57" name="/newroot/13/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 100.666249][ T4522] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.57: bg 0: block 5: invalid block bitmap [ 100.723751][ T4522] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 100.752011][ T4522] EXT4-fs (loop1): This should not happen!! Data will be lost [ 100.752011][ T4522] [ 100.828456][ T4535] loop0: detected capacity change from 0 to 512 [ 100.843686][ T4522] EXT4-fs (loop1): Total free blocks count 0 [ 100.849787][ T4522] EXT4-fs (loop1): Free/Dirty block details [ 100.892475][ T4522] EXT4-fs (loop1): free_blocks=0 [ 100.906510][ T4388] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.919331][ T4522] EXT4-fs (loop1): dirty_blocks=1 [ 100.942080][ T4522] EXT4-fs (loop1): Block reservation details [ 101.001894][ T4522] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 101.117444][ T4541] loop3: detected capacity change from 0 to 736 [ 101.175956][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 101.305192][ T4516] chnl_net:caif_netlink_parms(): no params data found [ 101.329225][ T4541] rock: directory entry would overflow storage [ 101.352003][ T4541] rock: sig=0x3b10, size=4, remaining=3 [ 101.462956][ T4547] loop1: detected capacity change from 0 to 1024 [ 101.511069][ T4547] EXT4-fs: Ignoring removed orlov option [ 101.639210][ T4547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.856502][ T4339] device hsr_slave_0 left promiscuous mode [ 101.883902][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 101.924038][ T4339] device hsr_slave_1 left promiscuous mode [ 101.951189][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.999901][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.023618][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.031137][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.052597][ T4339] device bridge_slave_1 left promiscuous mode [ 102.060480][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.135600][ T4339] device bridge_slave_0 left promiscuous mode [ 102.146466][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.153863][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 102.221020][ T4339] device veth1_macvtap left promiscuous mode [ 102.229064][ T4339] device veth0_macvtap left promiscuous mode [ 102.242981][ T4339] device veth1_vlan left promiscuous mode [ 102.258094][ T4339] device veth0_vlan left promiscuous mode [ 102.384129][ T3046] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.576205][ T3046] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 102.592580][ T3046] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.607450][ T3046] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 102.619467][ T3046] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.637299][ T3046] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.646914][ T3046] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.705970][ T3046] usb 4-1: invalid MIDI out EP 0 [ 102.789383][ T4573] input: syz0 as /devices/virtual/input/input6 [ 102.930801][ T3046] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 102.984229][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.216856][ T4581] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.984620][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 104.073587][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 104.211435][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.232757][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 104.270775][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.366836][ T4593] loop1: detected capacity change from 0 to 2048 [ 104.803317][ T4339] bond0 (unregistering): Released all slaves [ 104.940162][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.000502][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.029380][ T4516] device bridge_slave_0 entered promiscuous mode [ 105.079910][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.132114][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.171369][ T4516] device bridge_slave_1 entered promiscuous mode [ 105.333125][ T4516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.381629][ T3046] usb 4-1: USB disconnect, device number 4 [ 105.427011][ T4516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.477972][ T4609] loop2: detected capacity change from 0 to 1024 [ 105.523874][ T4609] EXT4-fs: inline encryption not supported [ 105.548314][ T4609] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 105.588995][ T4609] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 105.640581][ T4516] team0: Port device team_slave_0 added [ 105.657282][ T4609] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.84: unexpected bad inode w/o EXT4_IGET_BAD [ 105.671138][ T4614] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 105.695376][ T4516] team0: Port device team_slave_1 added [ 105.717359][ T4609] EXT4-fs (loop2): no journal found [ 105.740159][ T4609] EXT4-fs (loop2): can't get journal size [ 105.813977][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.814389][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.820965][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.821000][ T4516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.883552][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.941279][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.025734][ T4516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.174408][ T4516] device hsr_slave_0 entered promiscuous mode [ 106.183232][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 106.222481][ T4516] device hsr_slave_1 entered promiscuous mode [ 106.256579][ T4516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.295879][ T4516] Cannot create hsr debugfs directory [ 106.311952][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 106.389113][ T4633] loop2: detected capacity change from 0 to 1024 [ 106.403573][ T4633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.523866][ T4633] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 106.675569][ T4641] process 'syz.1.92' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 106.814469][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 107.036969][ T4516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.073738][ T4652] loop2: detected capacity change from 0 to 2048 [ 107.087895][ T4516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.116672][ T4516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.201624][ T4516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 107.219712][ T4652] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.275338][ T4652] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.342094][ T4326] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.579562][ T4326] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 107.607553][ T4326] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.708283][ T4516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.738281][ T4326] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 107.769460][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.806467][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.814029][ T4326] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.853944][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 107.875906][ T4516] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.959809][ T4516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.005304][ T4516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.022028][ T4326] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.038284][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.042058][ T4326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.063237][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.082163][ T4282] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.103049][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.110171][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.138432][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.149096][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.170390][ T4670] loop1: detected capacity change from 0 to 512 [ 108.177980][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.185144][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.213962][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.233326][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.256554][ T4670] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.99: iget: bad i_size value: 38620345925642 [ 108.270931][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.280785][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.289677][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.299500][ T4670] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.99: couldn't read orphan inode 15 (err -117) [ 108.304388][ T4282] usb 4-1: Using ep0 maxpacket: 32 [ 108.319414][ T4282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.330966][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.336110][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.346941][ T4282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.358368][ T4282] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.370999][ T4326] usb 1-1: invalid MIDI out EP 0 [ 108.391994][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 108.398128][ T4282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.421688][ T4282] usb 4-1: config 0 descriptor?? [ 108.443216][ T4282] hub 4-1:0.0: USB hub found [ 108.451606][ T4670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.483302][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.493040][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.592945][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.630425][ T4282] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 108.647473][ T4326] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 108.657845][ T4674] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.99: bg 0: block 5: invalid block bitmap [ 108.704039][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.743952][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.786031][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.836687][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.851963][ T4282] usbhid 4-1:0.0: can't add hid device: -71 [ 108.859057][ T4282] usbhid: probe of 4-1:0.0 failed with error -71 [ 108.920046][ T4674] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 72 with error 28 [ 108.936996][ T4282] usb 4-1: USB disconnect, device number 5 [ 108.965404][ T4674] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.965404][ T4674] [ 109.010120][ T4674] EXT4-fs (loop1): Total free blocks count 0 [ 109.060055][ T4674] EXT4-fs (loop1): Free/Dirty block details [ 109.088584][ T4674] EXT4-fs (loop1): free_blocks=0 [ 109.106160][ T4674] EXT4-fs (loop1): dirty_blocks=72 [ 109.124207][ T4674] EXT4-fs (loop1): Block reservation details [ 109.159950][ T4674] EXT4-fs (loop1): i_reserved_data_blocks=72 [ 109.189625][ T4679] EXT4-fs (loop1): shut down requested (0) [ 109.281850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.301851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.311858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.321845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.331845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.341847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.351846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.361848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 111.661289][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.681059][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.720972][ T4516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.381565][ T4282] usb 1-1: USB disconnect, device number 3 [ 113.019599][ T4732] loop3: detected capacity change from 0 to 4096 [ 113.042181][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.083348][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.109690][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.174691][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.218938][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.311783][ T4516] device veth0_vlan entered promiscuous mode [ 113.352777][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.377966][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.411424][ T4516] device veth1_vlan entered promiscuous mode [ 113.475628][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 113.572019][ T4745] ip_tables: iptables: counters copy to user failed while replacing table [ 113.574334][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.626157][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.657956][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.720450][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.759280][ T4754] netlink: 'syz.1.117': attribute type 29 has an invalid length. [ 113.821566][ T4516] device veth0_macvtap entered promiscuous mode [ 113.897050][ T4754] netlink: 'syz.1.117': attribute type 29 has an invalid length. [ 113.925794][ T4516] device veth1_macvtap entered promiscuous mode [ 113.987463][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.024567][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.068340][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.196774][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.262263][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.279169][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.282196][ T4376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.296836][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.317908][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.357694][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.399735][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.422407][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.511399][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.611540][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.623840][ T4376] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 114.686113][ T4376] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.742051][ T4376] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 114.752564][ T4376] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.770690][ T4376] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.878950][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.007598][ T4376] usb 1-1: invalid MIDI out EP 0 [ 115.205588][ T4376] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 115.330695][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.442378][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.479507][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.618840][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.648701][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.648998][ T4783] loop2: detected capacity change from 0 to 512 [ 115.701739][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.714905][ T4783] EXT4-fs: Ignoring removed oldalloc option [ 115.745150][ T4783] EXT4-fs (loop2): Test dummy encryption mode enabled [ 115.762276][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.777308][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.816174][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.840506][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.939956][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.005492][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.023394][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.101125][ T4781] device veth0 entered promiscuous mode [ 116.117639][ T4780] device veth0 left promiscuous mode [ 116.138992][ T4516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.181413][ T4516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.201168][ T4516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.226488][ T4516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.560083][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.590127][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.599771][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 116.641149][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.848835][ T4689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.907482][ T4689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.937207][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.131652][ T4808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 117.295454][ T4812] loop2: detected capacity change from 0 to 128 [ 117.417912][ T4812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.462302][ T4812] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.044394][ T4812] fscrypt: Error allocating hmac(sha512): -2 [ 118.197419][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 118.268595][ T4323] usb 1-1: USB disconnect, device number 4 [ 118.891531][ T4856] loop1: detected capacity change from 0 to 256 [ 118.902125][ T4323] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.917153][ T4860] loop3: detected capacity change from 0 to 128 [ 118.987284][ T4860] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 119.050761][ T4860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.121949][ T4323] usb 3-1: Using ep0 maxpacket: 8 [ 119.134290][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.185893][ T4323] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 119.234064][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.265014][ T4864] loop5: detected capacity change from 0 to 256 [ 119.279579][ T4323] usb 3-1: Product: syz [ 119.292866][ T4323] usb 3-1: Manufacturer: syz [ 119.297529][ T4323] usb 3-1: SerialNumber: syz [ 119.365185][ T4864] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 119.491194][ T27] audit: type=1800 audit(1786329317.358:6): pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.142" name="file1" dev="loop5" ino=1048600 res=0 errno=0 [ 119.590312][ T4323] snd-usb-audio: probe of 3-1:1.0 failed with error -2 [ 119.612768][ T4870] capability: warning: `syz.3.144' uses deprecated v2 capabilities in a way that may be insecure [ 119.665238][ T4323] usb 3-1: USB disconnect, device number 2 [ 120.431930][ T4326] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.593361][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 120.624147][ T4326] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 120.646896][ T4326] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.678555][ T4326] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 120.698928][ T4326] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.712444][ T4326] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.733435][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.770552][ T4326] usb 2-1: invalid MIDI out EP 0 [ 120.798804][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.847191][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.865471][ T4326] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 120.919046][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.970624][ T7] usb 6-1: config 1 has no interface number 0 [ 120.996887][ T7] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.056649][ T7] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 121.106596][ T7] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 121.182963][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.232190][ T7] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.327433][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.405657][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.469002][ T7] usb 6-1: Product: syz [ 121.499264][ T7] usb 6-1: Manufacturer: syz [ 121.533000][ T7] usb 6-1: SerialNumber: syz [ 121.590749][ T4891] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 121.627139][ T4912] loop0: detected capacity change from 0 to 128 [ 121.660869][ T4912] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 121.728058][ T4912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.874009][ T27] audit: type=1800 audit(1786329319.748:7): pid=4912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=104 res=0 errno=0 [ 122.017719][ T4891] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 122.211531][ T4925] loop0: detected capacity change from 0 to 764 [ 122.239059][ T7] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 122.257753][ T7] cdc_ncm 6-1:1.1: bind() failure [ 122.305042][ T7] usb 6-1: USB disconnect, device number 2 [ 123.142135][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 124.105138][ T4972] loop0: detected capacity change from 0 to 16 [ 124.139481][ T4972] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.525358][ T3046] usb 2-1: USB disconnect, device number 6 [ 124.819517][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 125.174544][ T5002] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 125.863010][ T4282] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.919345][ T5019] loop0: detected capacity change from 0 to 2048 [ 125.972764][ T5019] EXT4-fs: inline encryption not supported [ 126.071301][ T5019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.122478][ T4282] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 126.139706][ T5019] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 126.152560][ T4282] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.224565][ T4282] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 126.278909][ T4282] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.341497][ T5019] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 126.398683][ T4282] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.450119][ T4282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.545682][ T5019] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.545682][ T5019] [ 126.559016][ T4282] usb 4-1: invalid MIDI out EP 0 [ 126.687781][ T5019] EXT4-fs (loop0): Total free blocks count 0 [ 126.755523][ T4282] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 126.784596][ T5019] EXT4-fs (loop0): Free/Dirty block details [ 126.790571][ T5019] EXT4-fs (loop0): free_blocks=2415919104 [ 126.842045][ T5019] EXT4-fs (loop0): dirty_blocks=16 [ 126.847260][ T5019] EXT4-fs (loop0): Block reservation details [ 126.857633][ T4358] udevd[4358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.921145][ T5019] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 126.995678][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 127.315099][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 127.340334][ T5051] loop1: detected capacity change from 0 to 1024 [ 127.369835][ T5053] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 128.573007][ T5081] loop5: detected capacity change from 0 to 128 [ 128.596340][ T5081] EXT4-fs: Ignoring removed orlov option [ 128.629339][ T5081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 128.651682][ T5081] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.805505][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 129.271106][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 129.370280][ T5095] loop2: detected capacity change from 0 to 128 [ 129.405593][ T5095] FAT-fs (loop2): Unrecognized mount option "fmask=00000000000000003Oojnonumtail=0" or missing value [ 131.081659][ T5110] loop1: detected capacity change from 0 to 2048 [ 131.093162][ T4320] usb 4-1: USB disconnect, device number 6 [ 131.170607][ T5110] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 131.216883][ T5110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.787751][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 132.161396][ T5141] loop2: detected capacity change from 0 to 2048 [ 132.175132][ T5141] UDF-fs: error (device loop2): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 132.186059][ T5141] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 132.499937][ T5149] Zero length message leads to an empty skb [ 132.581327][ T5149] loop3: detected capacity change from 0 to 1024 [ 132.636125][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642988][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.052766][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.124060][ T5162] loop5: detected capacity change from 0 to 1024 [ 133.222739][ T5162] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 133.241481][ T5162] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.263895][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 133.271679][ T7] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 133.304156][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.332244][ T5168] loop3: detected capacity change from 0 to 2048 [ 133.358682][ T7] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 133.385332][ T5168] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 133.425669][ T7] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.427048][ T5173] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.235: Freeing blocks not in datazone - block = 0, count = 16 [ 133.562350][ T5168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.588609][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.637586][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.692023][ T7] usb 2-1: invalid MIDI out EP 0 [ 133.783264][ T5172] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 133.802390][ T7] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 133.889399][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.913066][ T60] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 133.961585][ T60] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.961585][ T60] [ 134.013639][ T60] EXT4-fs (loop5): Total free blocks count 0 [ 134.037014][ T60] EXT4-fs (loop5): Free/Dirty block details [ 134.059652][ T60] EXT4-fs (loop5): free_blocks=16 [ 134.069636][ T60] EXT4-fs (loop5): dirty_blocks=16 [ 134.080369][ T60] EXT4-fs (loop5): Block reservation details [ 134.090973][ T60] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 134.107651][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 136.087631][ T5200] loop2: detected capacity change from 0 to 512 [ 136.094984][ T5200] EXT4-fs: inline encryption not supported [ 136.100912][ T5200] ext4: Unknown parameter 'nouser_xattr' [ 136.615267][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 136.677292][ T5212] loop0: detected capacity change from 0 to 2048 [ 136.718670][ T5212] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 136.781395][ T5212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.121300][ T4320] usb 2-1: USB disconnect, device number 7 [ 137.248183][ T5222] loop2: detected capacity change from 0 to 512 [ 137.303497][ T5222] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 137.427287][ T5222] EXT4-fs (loop2): 1 orphan inode deleted [ 137.433305][ T5222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 137.442434][ T5222] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.660524][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 137.677702][ T4320] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.855342][ T4320] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 138.902165][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.936733][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 138.985949][ T4320] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.001429][ T4320] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.010637][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.083371][ T5252] loop5: detected capacity change from 0 to 128 [ 139.090609][ T5252] EXT4-fs: Ignoring removed orlov option [ 139.109111][ T4320] usb 1-1: invalid MIDI out EP 0 [ 139.227260][ T5252] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.263278][ T5252] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.298648][ T4320] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 139.339292][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.473127][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 139.616814][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 139.908987][ T5273] loop5: detected capacity change from 0 to 128 [ 139.960943][ T5273] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.017752][ T5273] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.593569][ T5290] loop2: detected capacity change from 0 to 128 [ 140.619960][ T5290] EXT4-fs: Ignoring removed orlov option [ 140.657265][ T5290] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.672516][ T5290] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.703071][ T5293] loop3: detected capacity change from 0 to 256 [ 140.983938][ T5293] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.701923][ T5293] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 141.773837][ T5293] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc4d1c548, utbl_chksum : 0xe619d30d) [ 141.906471][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 142.269613][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'. [ 142.578649][ T5324] loop1: detected capacity change from 0 to 128 [ 142.625690][ T5324] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.704488][ T5324] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.603365][ T4342] usb 1-1: USB disconnect, device number 5 [ 144.734367][ T5351] loop1: detected capacity change from 0 to 128 [ 144.741678][ T5351] EXT4-fs: Ignoring removed orlov option [ 144.919269][ T5351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.929940][ T5351] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.163942][ T5361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 145.361233][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 145.599180][ T5379] loop2: detected capacity change from 0 to 128 [ 145.617501][ T5378] loop0: detected capacity change from 0 to 128 [ 145.631762][ T5379] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.660548][ T5378] EXT4-fs: Ignoring removed orlov option [ 145.696826][ T5379] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.753069][ T5378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 145.787249][ T5378] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.001418][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 146.532118][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.739123][ T7] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 146.754589][ T7] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.776113][ T7] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 146.786335][ T7] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.799569][ T7] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.815757][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.859760][ T7] usb 6-1: invalid MIDI out EP 0 [ 146.938384][ T7] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 147.018220][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.392500][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 147.629764][ T5430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.409095][ T4293] Bluetooth: hci3: command 0x0405 tx timeout [ 148.775620][ T5434] loop3: detected capacity change from 0 to 4096 [ 148.843352][ T5434] EXT4-fs (loop3): can't read group descriptor 0 [ 149.971644][ T5468] binder: BINDER_SET_CONTEXT_MGR already set [ 150.004279][ T5468] binder: 5465:5468 ioctl 4018620d 200000004a80 returned -16 [ 151.021669][ T4376] usb 6-1: USB disconnect, device number 3 [ 151.199144][ T5492] loop2: detected capacity change from 0 to 2048 [ 151.288397][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 151.383371][ T5492] UDF-fs: error (device loop2): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 151.443530][ T5492] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 152.319491][ T5511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.482623][ T5513] loop0: detected capacity change from 0 to 512 [ 152.538354][ T5513] ext4: Unknown parameter 'nouser_xattr' [ 152.575406][ T5511] loop1: detected capacity change from 0 to 4096 [ 152.611460][ T5511] EXT4-fs (loop1): can't read group descriptor 0 [ 153.014781][ T5511] loop1: detected capacity change from 0 to 1024 [ 153.060516][ T5511] EXT4-fs (loop1): #clusters per group too big: 671096832 [ 153.691998][ T26] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 153.778550][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 153.883914][ T26] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 153.897350][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.921993][ T4342] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.964208][ T26] usb 1-1: config 0 descriptor?? [ 153.995059][ T26] cp210x 1-1:0.0: cp210x converter detected [ 154.142980][ T4342] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 154.169052][ T4342] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.180849][ T4342] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 154.197501][ T26] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 154.208709][ T26] cp210x 1-1:0.0: querying part number failed [ 154.240098][ T4342] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.276151][ T26] usb 1-1: cp210x converter now attached to ttyUSB0 [ 154.289830][ T4342] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.336692][ T4342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.400413][ T4342] usb 3-1: invalid MIDI out EP 0 [ 155.465151][ T4342] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 155.488547][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.330298][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.352'. [ 156.488156][ T7] usb 1-1: USB disconnect, device number 6 [ 156.527573][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 156.602735][ T7] cp210x 1-1:0.0: device disconnected [ 156.891871][ T5597] blktrace: Concurrent blktraces are not allowed on sda1 [ 158.055672][ T5605] loop1: detected capacity change from 0 to 128 [ 158.213894][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 158.328836][ T5605] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.828351][ T7] usb 3-1: USB disconnect, device number 3 [ 158.951115][ T5620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.364'. [ 159.173341][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 159.332098][ T4329] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.537139][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 159.578888][ T4329] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 159.619587][ T4329] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 159.678081][ T4329] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 159.708251][ T4329] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.731246][ T4329] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.747829][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.837642][ T4329] usb 1-1: invalid MIDI out EP 0 [ 160.967842][ T4329] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 161.072814][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.739192][ T5685] loop3: detected capacity change from 0 to 128 [ 162.867529][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.895830][ T5685] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.062657][ T5699] blktrace: Concurrent blktraces are not allowed on sda1 [ 163.955288][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.384'. [ 164.403621][ T5708] input: syz0 as /devices/virtual/input/input8 [ 165.031293][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 166.040520][ T7] usb 1-1: USB disconnect, device number 7 [ 166.318173][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 166.680477][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 166.724251][ T5761] loop0: detected capacity change from 0 to 128 [ 166.763233][ T5761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.804085][ T5762] input: syz0 as /devices/virtual/input/input9 [ 166.808929][ T5761] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.959919][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 168.521951][ T3046] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 168.616814][ T5799] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 168.683720][ T5800] loop0: detected capacity change from 0 to 8 [ 168.715537][ T3046] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 168.736108][ T3046] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.771353][ T3046] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 168.781516][ T3046] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.805468][ T3046] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 168.825100][ T3046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.850535][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 168.881035][ T3046] usb 6-1: invalid MIDI out EP 0 [ 168.915789][ T5800] SQUASHFS error: lzo decompression failed, data probably corrupt [ 168.960120][ T3046] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 168.971140][ T5800] SQUASHFS error: Failed to read block 0x144: -5 [ 169.019646][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.086645][ T5800] SQUASHFS error: Unable to read metadata cache entry [142] [ 169.102927][ T5800] SQUASHFS error: Unable to read inode 0x11f [ 169.809439][ T5818] input: syz0 as /devices/virtual/input/input11 [ 171.197276][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 172.919387][ T5859] loop1: detected capacity change from 0 to 8 [ 173.017930][ T5859] SQUASHFS error: lzo decompression failed, data probably corrupt [ 173.035090][ T7] usb 6-1: USB disconnect, device number 4 [ 173.043454][ T5859] SQUASHFS error: Failed to read block 0x144: -5 [ 173.060685][ T5859] SQUASHFS error: Unable to read metadata cache entry [142] [ 173.126888][ T5859] SQUASHFS error: Unable to read inode 0x11f [ 173.567569][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 173.616299][ T5874] input: syz0 as /devices/virtual/input/input12 [ 175.132184][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.331351][ T5906] loop5: detected capacity change from 0 to 8 [ 175.365538][ T7] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 175.389284][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.431014][ T7] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 175.477708][ T7] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.529323][ T5906] SQUASHFS error: lzo decompression failed, data probably corrupt [ 175.540230][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.557290][ T5906] SQUASHFS error: Failed to read block 0x144: -5 [ 175.571975][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.611533][ T7] usb 4-1: invalid MIDI out EP 0 [ 175.617098][ T5906] SQUASHFS error: Unable to read metadata cache entry [142] [ 175.668147][ T5906] SQUASHFS error: Unable to read inode 0x11f [ 175.725947][ T7] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 175.758891][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.014815][ T5912] loop1: detected capacity change from 0 to 128 [ 176.080295][ T5912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.124351][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.459'. [ 176.162361][ T5912] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.509597][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 179.286658][ T5954] loop2: detected capacity change from 0 to 8 [ 180.284597][ T5954] SQUASHFS error: lzo decompression failed, data probably corrupt [ 180.302035][ T5954] SQUASHFS error: Failed to read block 0x144: -5 [ 180.308509][ T5954] SQUASHFS error: Unable to read metadata cache entry [142] [ 180.413656][ T5954] SQUASHFS error: Unable to read inode 0x11f [ 180.469637][ T5962] loop0: detected capacity change from 0 to 128 [ 180.477425][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 180.634039][ T5962] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.714539][ T5962] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.986845][ T7] usb 4-1: USB disconnect, device number 7 [ 181.004253][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 181.420346][ T5989] loop3: detected capacity change from 0 to 128 [ 182.388249][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 182.501736][ T5989] loop3: detected capacity change from 0 to 8192 [ 182.548121][ T4358] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 182.844700][ T6008] loop2: detected capacity change from 0 to 128 [ 182.936991][ T6008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 183.039342][ T6008] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.310876][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 183.441936][ T3046] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.662251][ T3046] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 183.682027][ T3046] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.723667][ T3046] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 183.762323][ T3046] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.816150][ T3046] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.846542][ T3046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.134944][ T3046] usb 1-1: invalid MIDI out EP 0 [ 184.259285][ T3046] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 185.009656][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.142132][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 185.265942][ T6041] loop1: detected capacity change from 0 to 512 [ 185.325188][ T6041] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.354307][ T6043] loop2: detected capacity change from 0 to 128 [ 185.440572][ T6041] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 185.454949][ T6041] EXT4-fs (loop1): 1 truncate cleaned up [ 185.460787][ T6041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 185.547650][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 185.721650][ T6043] loop2: detected capacity change from 0 to 8192 [ 186.038795][ T6052] loop1: detected capacity change from 0 to 128 [ 186.094721][ T6052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 186.142056][ T6052] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.253767][ T6057] input: syz0 as /devices/virtual/input/input13 [ 186.371667][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 187.717188][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.519'. [ 187.966467][ T6078] loop2: detected capacity change from 0 to 256 [ 188.015763][ T6081] loop1: detected capacity change from 0 to 128 [ 188.077635][ T6078] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.212123][ T6078] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 189.053346][ T6078] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 189.334673][ T6091] input: syz0 as /devices/virtual/input/input14 [ 189.798836][ T6081] loop1: detected capacity change from 0 to 8192 [ 190.011931][ T4393] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.390349][ T4342] usb 1-1: USB disconnect, device number 8 [ 190.780425][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 191.702229][ T6122] input: syz0 as /devices/virtual/input/input15 [ 192.851553][ T6140] loop5: detected capacity change from 0 to 256 [ 193.081895][ T3046] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.084018][ T6140] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.163408][ T6140] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 193.207891][ T6140] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.335588][ T3046] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 193.372068][ T3046] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 193.581879][ T3046] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 193.610564][ T3046] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.239991][ T27] audit: type=1800 audit(2000000064.560:8): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.543" name="file1" dev="loop5" ino=1048605 res=0 errno=0 [ 194.262120][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268467][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.291950][ T3046] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.311438][ T3046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.533611][ T3046] usb 3-1: invalid MIDI out EP 0 [ 195.156925][ T3046] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 195.226474][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 195.271236][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.536649][ T6170] input: syz0 as /devices/virtual/input/input16 [ 197.536010][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 197.694377][ T6205] input: syz0 as /devices/virtual/input/input17 [ 197.946690][ T6211] loop3: detected capacity change from 0 to 256 [ 197.978025][ T6211] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.010283][ T6211] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 198.068709][ T6211] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 199.735997][ T6211] sched: RT throttling activated [ 200.370491][ T4376] usb 3-1: USB disconnect, device number 4 [ 201.114920][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 201.162907][ T6241] input: syz0 as /devices/virtual/input/input18 [ 201.610199][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 201.626686][ T6256] loop5: detected capacity change from 0 to 1764 [ 201.668170][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 201.734907][ T4388] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.831967][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.184640][ T26] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 202.205837][ T26] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.252391][ T26] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 202.262899][ T26] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.276842][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.286364][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.303459][ T26] usb 1-1: invalid MIDI out EP 0 [ 203.302356][ T26] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 203.382160][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.527228][ T6281] input: syz0 as /devices/virtual/input/input19 [ 204.013373][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 204.087644][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 205.509275][ T6315] input: syz0 as /devices/virtual/input/input20 [ 206.496418][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 206.589024][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 206.625931][ T26] usb 1-1: USB disconnect, device number 9 [ 207.745998][ T6356] input: syz0 as /devices/virtual/input/input21 [ 208.057628][ T6368] loop2: detected capacity change from 0 to 16 [ 208.143336][ T6368] erofs: (device loop2): mounted with root inode @ nid 36. [ 208.458556][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 208.485760][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 208.509568][ T4289] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 208.523232][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 208.551463][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 208.570105][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 208.579500][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 208.598611][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 208.608138][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 208.625617][ T6368] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 208.649854][ T6368] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 208.664370][ T6368] bio_check_eod: 1201 callbacks suppressed [ 208.664385][ T6368] syz.2.628: attempt to access beyond end of device [ 208.664385][ T6368] loop2: rw=524288, sector=2048, nr_sectors = 8 limit=16 [ 208.777486][ T6368] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 208.801705][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 208.809929][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 208.821470][ T27] audit: type=1800 audit(2000000079.250:9): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.628" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 208.963331][ T26] usb 1-1: device descriptor read/64, error -32 [ 209.711931][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.939767][ T26] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 209.978714][ T26] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.031830][ T26] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 210.078944][ T26] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.131923][ T26] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.162408][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.205829][ T26] usb 1-1: invalid MIDI out EP 0 [ 210.284969][ T26] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 211.521108][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.835582][ T6420] loop1: detected capacity change from 0 to 256 [ 211.922627][ T6420] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.971366][ T6426] loop3: detected capacity change from 0 to 16 [ 211.981114][ T6420] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 212.077509][ T6420] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.094775][ T6426] erofs: (device loop3): mounted with root inode @ nid 36. [ 212.297936][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 212.297999][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 212.298784][ T4289] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 212.300646][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 212.300666][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 212.300680][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 212.300694][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 212.300708][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 212.300722][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 212.300777][ T6426] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 212.300793][ T6426] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 212.300876][ T6426] syz.3.651: attempt to access beyond end of device [ 212.300876][ T6426] loop3: rw=524288, sector=2048, nr_sectors = 8 limit=16 [ 212.301037][ T6426] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 212.301252][ T27] audit: type=1800 audit(2000000082.720:10): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.651" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 214.410156][ T26] usb 1-1: USB disconnect, device number 11 [ 215.084091][ T6477] loop1: detected capacity change from 0 to 16 [ 215.294338][ T6477] erofs: (device loop1): mounted with root inode @ nid 36. [ 216.009646][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 216.027167][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 216.087208][ T4289] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 216.112454][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89 [ 216.121588][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89 [ 216.242532][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89 [ 216.305197][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89 [ 216.321917][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 216.339657][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 216.349878][ T6477] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 216.369276][ T6477] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89 [ 216.462056][ T6477] syz.1.669: attempt to access beyond end of device [ 216.462056][ T6477] loop1: rw=524288, sector=2048, nr_sectors = 8 limit=16 [ 216.495856][ T6477] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 216.562224][ T4322] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 216.603616][ T27] audit: type=1800 audit(2000000087.030:11): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.669" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 216.722816][ T6506] loop2: detected capacity change from 0 to 1024 [ 216.794513][ T4322] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 216.828629][ T4322] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 216.877255][ T6506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 216.893481][ T4322] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 216.978550][ T4322] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.002241][ T6506] EXT4-fs (loop2): shut down requested (2) [ 217.066392][ T4322] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.108856][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.203402][ T4322] usb 1-1: invalid MIDI out EP 0 [ 218.185638][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 218.358165][ T4322] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 218.482837][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.968498][ T6544] loop5: detected capacity change from 0 to 1024 [ 219.036971][ T6544] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 219.144862][ T6544] EXT4-fs (loop5): shut down requested (2) [ 219.239913][ T6553] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 219.315612][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 221.293575][ T6588] loop2: detected capacity change from 0 to 512 [ 221.317060][ T6590] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 221.330541][ T6588] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.378492][ T6588] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.726: invalid indirect mapped block 4294967295 (level 0) [ 221.409411][ T6588] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.726: invalid indirect mapped block 4294967295 (level 1) [ 221.466884][ T6588] EXT4-fs (loop2): 1 orphan inode deleted [ 221.479740][ T6588] EXT4-fs (loop2): 1 truncate cleaned up [ 221.496209][ T6588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.610687][ T4376] usb 1-1: USB disconnect, device number 12 [ 221.644856][ T6588] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 221.846101][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 221.951685][ T6602] loop0: detected capacity change from 0 to 256 [ 221.993685][ T6602] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.019960][ T6602] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 222.083906][ T6602] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 224.142718][ T6627] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 224.921950][ T4323] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 224.937744][ T6642] loop1: detected capacity change from 0 to 512 [ 225.020037][ T6642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 225.143658][ T4323] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 225.154379][ T4323] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.165547][ T4323] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 225.176313][ T4323] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.189452][ T4323] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.198607][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.213715][ T4323] usb 3-1: invalid MIDI out EP 0 [ 225.223725][ T6642] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.735: invalid indirect mapped block 4294967295 (level 0) [ 225.290798][ T6642] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.735: invalid indirect mapped block 4294967295 (level 1) [ 225.333747][ T6642] EXT4-fs (loop1): 1 orphan inode deleted [ 225.341582][ T4323] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 225.348832][ T6642] EXT4-fs (loop1): 1 truncate cleaned up [ 225.356020][ T6642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.394592][ T6642] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 225.483380][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.663028][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 227.335790][ T6682] loop3: detected capacity change from 0 to 2048 [ 227.347111][ T6681] loop1: detected capacity change from 0 to 1024 [ 227.403341][ T6682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 227.423740][ T6681] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 227.451515][ T6681] EXT4-fs (loop1): orphan cleanup on readonly fs [ 227.493398][ T6681] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.750: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 227.538716][ T6687] loop0: detected capacity change from 0 to 512 [ 227.552130][ T6688] input: syz0 as /devices/virtual/input/input28 [ 227.629502][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 227.632145][ T6681] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.750: Bad quota inode: 3, type: 0 [ 227.668761][ T6687] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.754: iget: bad i_size value: 38620345925642 [ 227.716177][ T6687] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.754: couldn't read orphan inode 15 (err -117) [ 227.750497][ T6681] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 227.796403][ T6687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.826351][ T6681] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 227.880467][ T6681] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.035801][ T6698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.754: bg 0: block 5: invalid block bitmap [ 228.067353][ T6698] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 228.132198][ T6698] EXT4-fs (loop0): This should not happen!! Data will be lost [ 228.132198][ T6698] [ 228.194438][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 228.212044][ T6698] EXT4-fs (loop0): Total free blocks count 0 [ 228.237772][ T6698] EXT4-fs (loop0): Free/Dirty block details [ 228.313050][ T6698] EXT4-fs (loop0): free_blocks=0 [ 228.318091][ T6698] EXT4-fs (loop0): dirty_blocks=112 [ 228.406108][ T6698] EXT4-fs (loop0): Block reservation details [ 228.433172][ T6698] EXT4-fs (loop0): i_reserved_data_blocks=112 [ 229.297301][ T5784] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 108 with max blocks 4 with error 28 [ 229.316121][ T6708] loop5: detected capacity change from 0 to 512 [ 229.352176][ T4376] usb 3-1: USB disconnect, device number 5 [ 229.410637][ T6708] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.489387][ T6708] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.761: invalid indirect mapped block 4294967295 (level 0) [ 229.623435][ T6708] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.761: invalid indirect mapped block 4294967295 (level 1) [ 229.642840][ T6708] EXT4-fs (loop5): 1 orphan inode deleted [ 229.648733][ T6708] EXT4-fs (loop5): 1 truncate cleaned up [ 229.655364][ T6708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 229.737848][ T6708] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 229.995405][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 231.479432][ T6758] loop5: detected capacity change from 0 to 512 [ 231.532025][ T4322] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 231.587364][ T6758] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.781: iget: bad i_size value: 38620345925642 [ 231.624814][ T6758] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.781: couldn't read orphan inode 15 (err -117) [ 231.757672][ T4322] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 231.788938][ T6758] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 231.862856][ T4322] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 231.907491][ T6770] loop3: detected capacity change from 0 to 512 [ 231.934113][ T6770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.949394][ T6769] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.781: bg 0: block 5: invalid block bitmap [ 231.971810][ T4322] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 231.988998][ T6770] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.784: invalid indirect mapped block 4294967295 (level 0) [ 232.023558][ T6769] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 232.050701][ T6770] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.784: invalid indirect mapped block 4294967295 (level 1) [ 232.072141][ T4322] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.102996][ T6770] EXT4-fs (loop3): 1 orphan inode deleted [ 232.108844][ T6770] EXT4-fs (loop3): 1 truncate cleaned up [ 232.126741][ T6769] EXT4-fs (loop5): This should not happen!! Data will be lost [ 232.126741][ T6769] [ 232.161453][ T6770] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.181907][ T4322] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.190529][ T6769] EXT4-fs (loop5): Total free blocks count 0 [ 232.206755][ T6769] EXT4-fs (loop5): Free/Dirty block details [ 232.241398][ T6769] EXT4-fs (loop5): free_blocks=0 [ 232.261872][ T6769] EXT4-fs (loop5): dirty_blocks=424 [ 232.267639][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.296650][ T6769] EXT4-fs (loop5): Block reservation details [ 232.303346][ T6770] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 232.359133][ T4322] usb 1-1: invalid MIDI out EP 0 [ 232.375199][ T6769] EXT4-fs (loop5): i_reserved_data_blocks=424 [ 232.420293][ T4322] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 232.476108][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.501116][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 232.723406][ T6744] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 420 with max blocks 4 with error 28 [ 234.560919][ T6808] loop5: detected capacity change from 0 to 512 [ 234.598439][ T6810] device syzkaller0 entered promiscuous mode [ 234.598445][ T6808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 234.644299][ T6808] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.801: invalid indirect mapped block 4294967295 (level 0) [ 234.687105][ T6808] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.801: invalid indirect mapped block 4294967295 (level 1) [ 234.748804][ T6808] EXT4-fs (loop5): 1 orphan inode deleted [ 234.755142][ T6808] EXT4-fs (loop5): 1 truncate cleaned up [ 234.769274][ T6808] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 234.894534][ T6817] loop1: detected capacity change from 0 to 512 [ 234.905318][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 235.043203][ T6817] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.805: iget: bad i_size value: 38620345925642 [ 235.072867][ T6817] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.805: couldn't read orphan inode 15 (err -117) [ 235.085496][ T6817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 235.166997][ T6823] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.805: bg 0: block 5: invalid block bitmap [ 236.162010][ T6823] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 492 with error 28 [ 236.237654][ T4376] usb 1-1: USB disconnect, device number 13 [ 236.251862][ T6823] EXT4-fs (loop1): This should not happen!! Data will be lost [ 236.251862][ T6823] [ 236.300106][ T6823] EXT4-fs (loop1): Total free blocks count 0 [ 236.311974][ T6823] EXT4-fs (loop1): Free/Dirty block details [ 236.328275][ T6823] EXT4-fs (loop1): free_blocks=0 [ 236.338400][ T6823] EXT4-fs (loop1): dirty_blocks=492 [ 236.383656][ T6823] EXT4-fs (loop1): Block reservation details [ 236.389733][ T6823] EXT4-fs (loop1): i_reserved_data_blocks=492 [ 236.615277][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 236.915499][ T6852] loop2: detected capacity change from 0 to 512 [ 236.998817][ T6852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.078765][ T6852] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.818: invalid indirect mapped block 4294967295 (level 0) [ 237.122366][ T6852] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.818: invalid indirect mapped block 4294967295 (level 1) [ 237.909072][ T6852] EXT4-fs (loop2): 1 orphan inode deleted [ 237.926985][ T6852] EXT4-fs (loop2): 1 truncate cleaned up [ 238.008611][ T6852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 238.260505][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 238.322444][ T4376] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 238.528626][ T4376] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 238.565973][ T4376] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.649881][ T4376] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 238.690576][ T4376] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.750837][ T4376] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.775804][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.802961][ T6884] device syzkaller0 entered promiscuous mode [ 238.838192][ T4376] usb 2-1: invalid MIDI out EP 0 [ 238.949906][ T4376] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 239.010425][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.070183][ T6894] input: syz0 as /devices/virtual/input/input32 [ 240.230179][ T6904] loop3: detected capacity change from 0 to 512 [ 240.265720][ T6904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.326856][ T6904] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.837: invalid indirect mapped block 4294967295 (level 0) [ 240.382035][ T6904] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.837: invalid indirect mapped block 4294967295 (level 1) [ 240.487614][ T6904] EXT4-fs (loop3): 1 orphan inode deleted [ 240.526073][ T6904] EXT4-fs (loop3): 1 truncate cleaned up [ 240.569387][ T6904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.762269][ T4276] EXT4-fs (loop3): unmounting filesystem. [ 242.151660][ T6931] input: syz0 as /devices/virtual/input/input33 [ 242.220305][ T4393] udevd[4393]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 242.841284][ T7] usb 2-1: USB disconnect, device number 8 [ 243.942507][ T6964] loop5: detected capacity change from 0 to 1024 [ 243.993229][ T6964] EXT4-fs: Ignoring removed oldalloc option [ 243.999243][ T6964] EXT4-fs: Ignoring removed orlov option [ 244.161385][ T6964] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 244.231244][ T6975] input: syz0 as /devices/virtual/input/input34 [ 244.452605][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 244.922014][ T4342] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 245.955848][ T7018] input: syz0 as /devices/virtual/input/input35 [ 246.008416][ T4342] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 246.129108][ T4342] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 246.184117][ T4342] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 246.217714][ T4342] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.259196][ T4342] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 246.325401][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.439542][ T4342] usb 1-1: invalid MIDI out EP 0 [ 246.657868][ T4342] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 246.727076][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.272680][ T7054] input: syz0 as /devices/virtual/input/input36 [ 248.658320][ T7067] device syzkaller0 entered promiscuous mode [ 249.225178][ T3046] usb 1-1: USB disconnect, device number 14 [ 249.231964][ T7079] nfs: Unknown parameter 'ax魧^zRJ̏Pjcbj~@!̼o^w wR FMq%!}!^vk؇7_qr&Wj6OZ)51Dm{TvSާ{E[mUԔ+okƢe|.JYaXͪX*X2rմmedUjպ2Ųu]'m< H1FD$q%1' [ 249.433252][ T7082] netlink: 'syz.5.905': attribute type 4 has an invalid length. [ 249.543147][ T27] audit: type=1326 audit(2000000119.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 249.741583][ T27] audit: type=1326 audit(2000000119.930:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112108][ T27] audit: type=1326 audit(2000000119.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112158][ T27] audit: type=1326 audit(2000000119.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112196][ T27] audit: type=1326 audit(2000000119.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112235][ T27] audit: type=1326 audit(2000000119.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112275][ T27] audit: type=1326 audit(2000000119.930:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112314][ T27] audit: type=1326 audit(2000000119.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112352][ T27] audit: type=1326 audit(2000000119.930:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.112391][ T27] audit: type=1326 audit(2000000119.930:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7078 comm="syz.3.903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7ffc0000 [ 250.401650][ T7085] netlink: 'syz.5.905': attribute type 4 has an invalid length. [ 251.417382][ T7100] input: syz0 as /devices/virtual/input/input37 [ 251.854192][ T7118] device syzkaller0 entered promiscuous mode [ 251.996450][ T7128] netlink: 'syz.2.922': attribute type 4 has an invalid length. [ 253.013130][ T7132] netlink: 'syz.2.922': attribute type 4 has an invalid length. [ 253.024302][ T7136] loop5: detected capacity change from 0 to 512 [ 253.092510][ T7136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.157953][ T7136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 253.167799][ T7136] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.311867][ T4320] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 253.400658][ T7148] input: syz0 as /devices/virtual/input/input38 [ 253.529235][ T4320] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 253.554006][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.585255][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 253.598314][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 253.607484][ T4320] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.622233][ T4329] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 253.655859][ T4320] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 253.689133][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.755868][ T4320] usb 1-1: invalid MIDI out EP 0 [ 253.820068][ T4320] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 253.830244][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.851993][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.887458][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.917485][ T4329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.937117][ T4329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.999710][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.017628][ T7160] loop5: detected capacity change from 0 to 512 [ 254.039204][ T7160] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 254.073010][ T7160] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.931: invalid indirect mapped block 4294967295 (level 0) [ 254.077889][ T4329] usb 3-1: config 0 descriptor?? [ 254.162525][ T7160] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.931: invalid indirect mapped block 4294967295 (level 1) [ 254.223306][ T7160] EXT4-fs (loop5): 1 orphan inode deleted [ 254.245106][ T7160] EXT4-fs (loop5): 1 truncate cleaned up [ 254.277352][ T7160] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 254.397748][ T7160] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 254.541492][ T4329] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 254.578214][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 254.631107][ T4329] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 255.853994][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.860398][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.270310][ T7181] input: syz0 as /devices/virtual/input/input39 [ 256.312047][ T7183] netlink: 'syz.1.938': attribute type 4 has an invalid length. [ 256.354695][ T7183] netlink: 'syz.1.938': attribute type 4 has an invalid length. [ 256.667310][ T7] usb 3-1: USB disconnect, device number 6 [ 256.758511][ T26] usb 1-1: USB disconnect, device number 15 [ 256.906771][ T7192] device syzkaller0 entered promiscuous mode [ 258.162829][ T7213] input: syz0 as /devices/virtual/input/input40 [ 258.411845][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.623680][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.642149][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 258.645928][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.674249][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.689843][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.700884][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.732619][ T26] usb 2-1: config 0 descriptor?? [ 258.924811][ T7] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 258.947998][ T7] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 258.987345][ T7] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 259.041493][ T7] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.138513][ T7] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.158015][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.186485][ T26] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 259.199346][ T7] usb 6-1: invalid MIDI out EP 0 [ 259.238700][ T7] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 259.367039][ T26] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 259.374329][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 259.483856][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.690787][ T7239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.221880][ T7242] device syzkaller0 entered promiscuous mode [ 260.704775][ T7259] input: syz0 as /devices/virtual/input/input41 [ 261.254034][ T4376] usb 2-1: USB disconnect, device number 9 [ 263.112754][ T4282] usb 6-1: USB disconnect, device number 5 [ 264.628888][ T7284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.662397][ T7284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.950145][ T7296] input: syz0 as /devices/virtual/input/input42 [ 265.751818][ T4282] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 265.962451][ T4282] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 265.980352][ T4282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.022072][ T4282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 266.033073][ T4282] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.047058][ T4282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.061975][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.274432][ T4282] usb 1-1: invalid MIDI out EP 0 [ 266.525608][ T4282] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 266.556141][ T7339] input: syz0 as /devices/virtual/input/input43 [ 266.620620][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.962586][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 266.962602][ T27] audit: type=1326 audit(2000000137.390:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.041430][ T27] audit: type=1326 audit(2000000137.430:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.146291][ T27] audit: type=1326 audit(2000000137.430:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.228087][ T27] audit: type=1326 audit(2000000137.430:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.300211][ T27] audit: type=1326 audit(2000000137.430:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.393701][ T27] audit: type=1326 audit(2000000137.430:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.587609][ T27] audit: type=1326 audit(2000000137.430:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.804045][ T27] audit: type=1326 audit(2000000137.430:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.865568][ T27] audit: type=1326 audit(2000000137.430:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 267.901813][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 267.977309][ T27] audit: type=1326 audit(2000000137.430:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.3.1004" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84d59e0d9 code=0x7fc00000 [ 268.091862][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 268.102554][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.126747][ T26] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 268.136390][ T26] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.146682][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.164708][ T26] usb 3-1: config 0 descriptor?? [ 268.474453][ T4282] usb 3-1: USB disconnect, device number 7 [ 270.532171][ T4376] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 270.660573][ T4329] usb 1-1: USB disconnect, device number 16 [ 270.773037][ T4376] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.786609][ T4376] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.796847][ T4376] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.810450][ T4376] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.819749][ T4376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.830440][ T4376] usb 6-1: config 0 descriptor?? [ 270.901901][ T4320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.091858][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 271.100089][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.128395][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.161204][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.201068][ T4320] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.212326][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.225570][ T4320] usb 3-1: config 0 descriptor?? [ 271.253457][ T4376] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 271.280226][ T4376] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 271.401348][ T7425] Error parsing options; rc = [-22] [ 271.466188][ T4282] usb 6-1: USB disconnect, device number 6 [ 271.644369][ T4320] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 271.662108][ T4320] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 271.719080][ T4320] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input44 [ 271.764042][ T7426] fido_id[7426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 271.831153][ T4320] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 272.021585][ T4320] usb 3-1: USB disconnect, device number 8 [ 272.181832][ T4282] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 272.238941][ T7437] fido_id[7437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 272.381991][ T4282] usb 1-1: Using ep0 maxpacket: 16 [ 272.392125][ T4282] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 272.460602][ T4282] usb 1-1: config 0 has no interface number 0 [ 272.476834][ T4282] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 272.498076][ T4282] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 272.519706][ T4282] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 272.532122][ T4329] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 272.546860][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.572504][ T4282] usb 1-1: Product: syz [ 272.620971][ T4282] usb 1-1: Manufacturer: syz [ 272.629175][ T4282] usb 1-1: SerialNumber: syz [ 272.648946][ T4282] usb 1-1: config 0 descriptor?? [ 272.659535][ T7434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.677368][ T7434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.746661][ T4329] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 272.769299][ T4329] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.817828][ T4329] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 272.848394][ T4329] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.886250][ T4329] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.906117][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.935724][ T7434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.967562][ T4329] usb 4-1: invalid MIDI out EP 0 [ 272.998465][ T7434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.204673][ T4329] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 273.236783][ T4282] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 273.261212][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.265656][ T4282] asix: probe of 1-1:0.34 failed with error -61 [ 273.951841][ T4329] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 274.146936][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.185617][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.243591][ T4329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.332172][ T4329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.374196][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.449213][ T4329] usb 3-1: config 0 descriptor?? [ 274.490242][ T7491] loop5: detected capacity change from 0 to 512 [ 274.559071][ T7491] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 274.616986][ T7491] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1064: invalid indirect mapped block 4294967295 (level 0) [ 274.638239][ T7491] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1064: invalid indirect mapped block 4294967295 (level 1) [ 274.685465][ T7491] EXT4-fs (loop5): 1 orphan inode deleted [ 274.741835][ T7491] EXT4-fs (loop5): 1 truncate cleaned up [ 274.747810][ T7491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 274.883606][ T4329] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 274.910331][ T4329] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 274.919238][ T7] usb 1-1: USB disconnect, device number 17 [ 274.962766][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 275.093073][ T4282] usb 3-1: USB disconnect, device number 9 [ 275.741925][ T7504] fido_id[7504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 275.839812][ T7510] device syzkaller0 entered promiscuous mode [ 277.958795][ T4282] usb 4-1: USB disconnect, device number 8 [ 278.221807][ T7552] device syzkaller0 entered promiscuous mode [ 278.235046][ T7556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1088'. [ 278.311934][ T4342] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 278.697315][ T4342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.535820][ T4342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.609941][ T4342] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.622982][ T4342] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.632204][ T4342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.709477][ T4342] usb 6-1: config 0 descriptor?? [ 281.055973][ T4342] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 281.102403][ T4342] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 281.690258][ T4323] usb 6-1: USB disconnect, device number 7 [ 281.798272][ T7589] fido_id[7589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 281.947968][ T7594] loop5: detected capacity change from 0 to 2048 [ 281.961913][ T4342] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 282.049841][ T7594] EXT4-fs: inline encryption not supported [ 282.109709][ T7597] device syzkaller0 entered promiscuous mode [ 282.169220][ T4342] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 282.180116][ T4342] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 282.195290][ T4342] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 282.205466][ T4342] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.211497][ T7594] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 282.220449][ T4342] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.236363][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.264306][ T4342] usb 4-1: invalid MIDI out EP 0 [ 282.333690][ T4342] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 283.274619][ T7594] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 283.391995][ T7594] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 283.429814][ T7240] udevd[7240]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.483479][ T7594] EXT4-fs (loop5): This should not happen!! Data will be lost [ 283.483479][ T7594] [ 283.591323][ T7594] EXT4-fs (loop5): Total free blocks count 0 [ 283.643179][ T7594] EXT4-fs (loop5): Free/Dirty block details [ 283.721837][ T7594] EXT4-fs (loop5): free_blocks=2415919104 [ 283.770361][ T7594] EXT4-fs (loop5): dirty_blocks=16 [ 283.860867][ T7594] EXT4-fs (loop5): Block reservation details [ 283.934678][ T7594] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 284.069466][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 284.318316][ T7611] device syzkaller0 entered promiscuous mode [ 285.757758][ T4323] usb 4-1: USB disconnect, device number 9 [ 286.121808][ T4320] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 286.154826][ T7630] loop5: detected capacity change from 0 to 512 [ 286.192105][ T7630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.207786][ T7630] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1112: invalid indirect mapped block 4294967295 (level 0) [ 286.240662][ T7630] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1112: invalid indirect mapped block 4294967295 (level 1) [ 286.270336][ T7630] EXT4-fs (loop5): 1 orphan inode deleted [ 286.276607][ T7630] EXT4-fs (loop5): 1 truncate cleaned up [ 286.283668][ T7630] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 286.332114][ T4320] usb 2-1: Using ep0 maxpacket: 16 [ 286.339142][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.351453][ T4320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.361669][ T4320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 286.380195][ T4320] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 286.392336][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.414441][ T4320] usb 2-1: config 0 descriptor?? [ 286.444394][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 286.564439][ T7636] loop5: detected capacity change from 0 to 128 [ 286.616267][ T7636] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 286.669518][ T7636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.725222][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 286.725239][ T27] audit: type=1800 audit(2000000157.150:76): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1113" name="file1" dev="loop5" ino=104 res=0 errno=0 [ 286.839937][ T4320] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 286.864821][ T4320] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 286.914908][ T4320] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input45 [ 287.186630][ T4320] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 287.270540][ T4320] usb 2-1: USB disconnect, device number 10 [ 288.272187][ T7650] fido_id[7650]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 290.252652][ T4320] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 290.467338][ T4320] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 290.491876][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.521887][ T4282] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 290.543734][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 290.591198][ T4320] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.718042][ T4320] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.722080][ T4282] usb 6-1: Using ep0 maxpacket: 16 [ 290.733006][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.749967][ T4320] usb 1-1: invalid MIDI out EP 0 [ 290.761092][ T4282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.809686][ T4282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.837132][ T4282] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.881071][ T4320] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 290.887071][ T4282] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.019594][ T4574] udevd[4574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.085827][ T4282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.146386][ T4282] usb 6-1: config 0 descriptor?? [ 291.223237][ T7697] device syzkaller0 entered promiscuous mode [ 291.602587][ T4282] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 291.615912][ T4282] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 291.656014][ T4282] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input46 [ 291.769322][ T4282] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 291.928874][ T7] usb 6-1: USB disconnect, device number 8 [ 292.076454][ T7713] fido_id[7713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory Stopping sshd: stopped /usr/sbin/sshd (pid 4028) OK Stopping crond: stopped /usr/sbin/crond (pid 4014) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3934) [ 296.304597][ T7] usb 1-1: USB disconnect, device number 18 [ 296.610044][ T7756] loop5: detected capacity change from 0 to 512 [ 296.647590][ T7756] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 296.725101][ T27] audit: type=1326 audit(2000000167.150:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 296.749229][ T7756] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1155: invalid indirect mapped block 4294967295 (level 0) [ 296.752943][ T7756] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1155: invalid indirect mapped block 4294967295 (level 1) [ 296.781225][ T7756] EXT4-fs (loop5): 1 orphan inode deleted [ 296.792102][ T7756] EXT4-fs (loop5): 1 truncate cleaned up [ 296.820918][ T27] audit: type=1326 audit(2000000167.230:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 296.822198][ T7756] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 296.844751][ T27] audit: type=1326 audit(2000000167.230:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 296.844796][ T27] audit: type=1326 audit(2000000167.230:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 296.844866][ T27] audit: type=1326 audit(2000000167.230:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 Stopping network: [ 297.082139][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 297.120157][ T4516] EXT4-fs (loop5): unmounting filesystem. [ 297.161806][ T27] audit: type=1326 audit(2000000167.230:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 297.278758][ T27] audit: type=1326 audit(2000000167.230:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 297.304513][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.352612][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.411974][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.435003][ T7776] logitech-hidpp-device 0005:046D:B012.0009: received hid++ report of bad size (4096) [ 297.442030][ T27] audit: type=1326 audit(2000000167.230:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 297.488590][ T7] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.494940][ T4329] logitech-hidpp-device 0005:046D:B012.0009: Device not connected [ 297.532027][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.560146][ T7] usb 1-1: config 0 descriptor?? [ 297.581924][ T27] audit: type=1326 audit(2000000167.230:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 297.657086][ T27] audit: type=1326 audit(2000000167.230:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.1157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038099e0d9 code=0x50000 [ 297.934885][ T7782] device syzkaller0 entered promiscuous mode [ 298.018466][ T7] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 298.103200][ T7] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 298.311891][ T4329] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 298.531126][ T4329] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 298.562140][ T4329] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.618575][ T4329] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 298.669182][ T4329] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 298.744711][ T4329] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.799372][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.867332][ T4329] usb 6-1: invalid MIDI out EP 0 [ 298.947234][ T4329] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 299.078956][ T7796] udevd[7796]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.105544][ T4342] usb 1-1: USB disconnect, device number 19 [ 300.457455][ T7813] logitech-hidpp-device 0005:046D:B012.000B: received hid++ report of bad size (4096) [ 300.526966][ T4342] logitech-hidpp-device 0005:046D:B012.000B: Device not connected [ 303.009033][ T7816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.052596][ T7816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.144818][ T4342] usb 6-1: USB disconnect, device number 9 [ 303.377443][ T6896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.392769][ T4323] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 303.593592][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.614423][ T6896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.623731][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.655074][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.698677][ T4323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.739139][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.764871][ T4323] usb 3-1: config 0 descriptor?? [ 303.839749][ T6896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.989269][ T4376] kernel read not supported for file /usbmon0 (pid: 4376 comm: kworker/0:7) [ 304.042264][ T6896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 OK [ 304.204491][ T4323] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 304.263988][ T4323] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 Stopping iptables: [ 304.511101][ T7858] device syzkaller0 entered promiscuous mode OK [ 304.943460][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.953164][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.974091][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.983713][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.991468][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 305.006051][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.022072][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.034242][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.042825][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.050724][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.059187][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 305.066783][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 Stopping system message bus: [ 305.415094][ T4329] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 305.527687][ T7] usb 3-1: USB disconnect, device number 10 [ 305.625432][ T4329] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 305.648500][ T4329] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 305.690827][ T4329] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 305.721522][ T4329] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.742141][ T4329] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 305.761450][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.793841][ T4329] usb 1-1: invalid MIDI out EP 0 [ 305.883566][ T4329] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 305.906340][ T7743] udevd[7743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory done killall: can't kill pid 7746: No such process killall: can't kill pid 7765: No such process killall: can't kill pid 7796: No such process killall: can't kill pid 7797: No such process [ 307.111883][ T4289] Bluetooth: hci2: command 0x0409 tx timeout Stopping klogd: OK Stopping acpid: [ 308.985478][ T7871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 308.995278][ T7871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.192077][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 309.205717][ T4329] usb 1-1: USB disconnect, device number 20 OK Stopping syslogd: [ 309.764206][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 309.777198][ T4376] usb 2-1: new high-speed USB device number 11 using dummy_hcd stopped /sbin/syslogd (pid 3622) OK [ 310.010395][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.031927][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 310.073033][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.142266][ T4376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.211997][ T4376] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.251602][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.263168][ T7] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.283384][ T7] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 310.315695][ T4376] usb 2-1: config 0 descriptor?? [ 310.335076][ T7] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.366891][ T7] usb 3-1: config 220 has no interface number 2 [ 310.380187][ T7] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.406439][ T7] usb 3-1: config 220 interface 0 has no altsetting 0 [ 310.426571][ T7] usb 3-1: config 220 interface 76 has no altsetting 0 [ 310.451920][ T7] usb 3-1: config 220 interface 1 has no altsetting 0 [ 310.491847][ T7] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.504360][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.526337][ T7] usb 3-1: Product: syz [ 310.530627][ T7] usb 3-1: Manufacturer: syz [ 310.561972][ T7] usb 3-1: SerialNumber: syz [ 310.629502][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.660116][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.683669][ T7872] device bridge_slave_0 entered promiscuous mode [ 310.732975][ T4376] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 310.768514][ T4376] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 310.803261][ T7] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 310.809841][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.827674][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.834939][ T7] usb 3-1: No valid video chain found. [ 310.851955][ T7] usb 3-1: selecting invalid altsetting 0 [ 310.871193][ T7872] device bridge_slave_1 entered promiscuous mode [ 310.920022][ T7] usb 3-1: selecting invalid altsetting 0 [ 310.929083][ T7] usbtest: probe of 3-1:220.1 failed with error -22 [ 310.953963][ T7] usb 3-1: USB disconnect, device number 11 umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 311.052907][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.272028][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 311.297338][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.495037][ T7946] device syzkaller0 entered promiscuous mode [ 311.694500][ T7950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.724833][ T7950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.797222][ T7872] team0: Port device team_slave_0 added [ 312.481921][ T4322] usb 6-1: new high-speed USB device number 10 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 312.803023][ T4376] usb 2-1: USB disconnect, device number 11 Connection to 10.128.0.20 closed by remote host. [ 313.361869][ T4293] Bluetooth: hci2: command 0x0419 tx timeout Sent SIGKILL to all processes Requesting system poweroff [ 315.046508][ T7964] kvm: exiting hardware virtualization [ 315.646324][ T7872] team0: Port device team_slave_1 added [ 315.940371][ T6896] device hsr_slave_0 left promiscuous mode [ 315.980737][ T6896] device hsr_slave_1 left promiscuous mode [ 315.999295][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.029704][ T4322] usb 6-1: device descriptor read/all, error -71 [ 316.036827][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.054768][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.082253][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.112166][ T6896] device bridge_slave_1 left promiscuous mode [ 316.118466][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.178635][ T6896] device bridge_slave_0 left promiscuous mode [ 316.205193][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.278581][ T6896] device veth1_macvtap left promiscuous mode [ 316.292032][ T6896] device veth0_macvtap left promiscuous mode [ 316.298284][ T6896] device veth1_vlan left promiscuous mode [ 316.305937][ T6896] device veth0_vlan left promiscuous mode [ 316.854107][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 316.883165][ T7964] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 316.904911][ T7964] ACPI: PM: Preparing to enter system sleep state S5 [ 316.928497][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 316.928886][ T7964] reboot: Power down [ 316.966285][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.973053][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.991405][ T6896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface serialport: VM disconnected.