last executing test programs: 20.754279485s ago: executing program 1 (id=3325): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x3, 0x2d, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 19.633936761s ago: executing program 1 (id=3328): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) 12.518633286s ago: executing program 2 (id=3338): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x34}, 0x94) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c880}, 0x8000) 12.482736687s ago: executing program 1 (id=3339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) socket$inet(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04) 10.999372381s ago: executing program 2 (id=3341): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x8, 0x0, {}, {0x0, 0xe, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 10.968566903s ago: executing program 1 (id=3342): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lchown(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x4002c2, 0xc8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 9.736304804s ago: executing program 1 (id=3345): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.376036472s ago: executing program 3 (id=3346): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xf5}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x10000007) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0)) getsockopt(r4, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) 9.107655096s ago: executing program 3 (id=3347): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x3, 0x2d, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 8.955090454s ago: executing program 2 (id=3348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 8.178665332s ago: executing program 2 (id=3350): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000880}, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {@grpid}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000540), 0xff57, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 6.589910691s ago: executing program 3 (id=3351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r1, 0x0, 0x1000, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) 6.342021894s ago: executing program 1 (id=3352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) write$bt_hci(r1, 0x0, 0xa) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x0) 4.308552695s ago: executing program 0 (id=3353): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa05", 0x5c}, {&(0x7f0000000580)}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a", 0xdb}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632f", 0x34}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.288680566s ago: executing program 3 (id=3354): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd4", 0x73}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a", 0x5c}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667", 0xa8}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.143427143s ago: executing program 2 (id=3355): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8014) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x10000007) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) 3.761744202s ago: executing program 0 (id=3356): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xf5}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x10000007) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0)) getsockopt(r4, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) 2.771948972s ago: executing program 2 (id=3357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket(0x2b, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) fanotify_init(0x40, 0x800) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r8, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2e}) ioctl$TCXONC(r5, 0x540a, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.669208847s ago: executing program 0 (id=3358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendto$netrom(0xffffffffffffffff, &(0x7f0000000440)="f0af1f22b1385d6b0be742fdb5b9b4d44120f393437f3d9608caa951b5f632871017115c73e57d6f675cbc59cc647f13454556749b917a9a9caf1194421f1efe8d01e74cc48af53ed1b1d3f3e906cffee1de189f33257223c72e80776c42d52855931379697f531d3768b73152ad1a0c07ef73eacf83865a6e88b93e1311e5fb943cfaa06723d473a2c01780303833cc4d0a8ab9f2c638462dd4b74f4957217ca8f782064b2266500d9d9acbfefc5a193ffc0d9c71bf5a7147f25755e942d4e0107ed39127968fa9d3b46cc9aab9f0639443532cf9d19d5588dcd50895a9405a7dd0e0", 0xe3, 0x800, &(0x7f0000000640)={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x6c20, 0x881, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1c1f15f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}]}}]}, 0x154}}, 0x20000004) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="23000300010007", 0x7) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000240000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f5"], 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) 2.60962652s ago: executing program 3 (id=3359): socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close_range(r0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) 1.880837946s ago: executing program 0 (id=3360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000e003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300c0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 1.420593619s ago: executing program 3 (id=3361): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) unshare(0x6020480) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000002) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/217, 0xd9}], 0x1) 1.149900342s ago: executing program 0 (id=3362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) write$bt_hci(r1, 0x0, 0xa) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x20, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in=@empty}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x0) 0s ago: executing program 0 (id=3363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r3, 0x0, r1, 0x0, 0x1000, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) kernel console output (not intermixed with test programs): p0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.535661][ T27] usb 2-1: can't set config #0, error -71 [ 1040.554788][ T27] usb 2-1: USB disconnect, device number 121 [ 1040.566675][T14266] veth0_macvtap: entered promiscuous mode [ 1040.609579][T14266] veth1_macvtap: entered promiscuous mode [ 1040.690751][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.726609][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.745117][T14266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.789412][T14266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.939826][T14266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.952590][T14266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.983457][T14266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.995583][T14266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.007619][T14266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.018552][T14266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.208383][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.237786][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.315319][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1041.327636][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.563598][T14543] loop0: detected capacity change from 0 to 32768 [ 1041.634671][T14543] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1041.994341][T14554] loop1: detected capacity change from 0 to 32768 [ 1042.097327][T14554] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1042.111893][T14543] XFS (loop0): Ending clean mount [ 1042.131509][T14543] XFS (loop0): Quotacheck needed: Please wait. [ 1042.301918][T14554] XFS (loop1): Ending clean mount [ 1042.321805][T14543] XFS (loop0): Quotacheck: Done. [ 1042.327646][T14554] XFS (loop1): Quotacheck needed: Please wait. [ 1042.893794][ T28] audit: type=1800 audit(1774517089.181:141): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2440" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1043.148145][T14554] XFS (loop1): Quotacheck: Done. [ 1043.432879][ T28] audit: type=1800 audit(1774517089.811:142): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2441" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1043.622964][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1043.627558][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1043.870234][ T5823] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1044.141287][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 1044.169831][ T5823] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1044.190673][ T5823] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1044.205139][ T5823] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.227262][ T5823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1044.255456][ T5823] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1044.264818][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.278452][ T5823] usb 3-1: Product: syz [ 1044.286789][ T5823] usb 3-1: Manufacturer: syz [ 1044.298794][ T5823] usb 3-1: SerialNumber: syz [ 1044.541208][ T5823] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1045.607265][T13452] usb 3-1: USB disconnect, device number 109 [ 1045.950275][T14602] hub 9-0:1.0: USB hub found [ 1045.956326][T14602] hub 9-0:1.0: 1 port detected [ 1046.251040][T12520] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1046.287364][T12520] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1046.329951][T12520] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1046.352003][T12520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1046.368147][T12520] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1046.376892][T12520] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.519780][ T1800] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1046.522011][T14606] wg1 speed is unknown, defaulting to 1000 [ 1046.732971][ T1800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.769311][ T1800] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1046.804504][ T1800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.856808][ T1800] usb 4-1: config 0 descriptor?? [ 1047.302080][ T1800] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 1047.366574][ T1800] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0020/input/input97 [ 1047.628044][ T1800] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1048.206870][T14629] loop1: detected capacity change from 0 to 256 [ 1048.400902][T13452] usb 4-1: USB disconnect, device number 125 [ 1048.501678][ T5778] Bluetooth: hci2: command tx timeout [ 1048.963347][T14606] chnl_net:caif_netlink_parms(): no params data found [ 1049.184246][T14626] fido_id[14626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1049.502405][T14572] usblp0: removed [ 1049.680163][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2452'. [ 1050.018804][ T5966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.550338][ T5778] Bluetooth: hci2: command tx timeout [ 1051.145015][ T5966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.193135][T14655] hub 9-0:1.0: USB hub found [ 1051.225039][T14655] hub 9-0:1.0: 1 port detected [ 1051.244516][T14606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.271363][T14606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.316555][T14606] bridge_slave_0: entered allmulticast mode [ 1051.347798][T14606] bridge_slave_0: entered promiscuous mode [ 1051.378445][T14606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.409247][T14606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.422219][T14606] bridge_slave_1: entered allmulticast mode [ 1051.445212][T14606] bridge_slave_1: entered promiscuous mode [ 1051.557908][ T5966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.647645][ T5778] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1051.704859][ T5966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.772307][T14606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.804367][T14606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.928222][T14606] team0: Port device team_slave_0 added [ 1051.979102][T14606] team0: Port device team_slave_1 added [ 1052.205343][T14606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.205362][T14606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.205390][T14606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.255769][T14606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.353463][T14606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.394283][T14606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.656953][ T5778] Bluetooth: hci2: command tx timeout [ 1052.761391][T14606] hsr_slave_0: entered promiscuous mode [ 1052.781720][T14606] hsr_slave_1: entered promiscuous mode [ 1054.207666][T14693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2461'. [ 1054.996313][ T5778] Bluetooth: hci2: command tx timeout [ 1055.011178][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.021342][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.345014][ T1801] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 1055.542147][ T1801] usb 2-1: config 1 has no interfaces? [ 1055.548111][ T1801] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1055.571804][ T1801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.823167][ T1801] usb 2-1: string descriptor 0 read error: -71 [ 1055.844248][ T1801] usb 2-1: USB disconnect, device number 122 [ 1056.261495][ T5966] hsr_slave_0: left promiscuous mode [ 1056.273689][ T5966] hsr_slave_1: left promiscuous mode [ 1056.314044][ T5966] veth1_macvtap: left promiscuous mode [ 1056.320133][ T5966] veth0_macvtap: left promiscuous mode [ 1056.325986][ T5966] veth1_vlan: left promiscuous mode [ 1056.332520][ T5966] veth0_vlan: left promiscuous mode [ 1056.968408][T14724] hub 9-0:1.0: USB hub found [ 1056.999021][T14724] hub 9-0:1.0: 1 port detected [ 1057.215922][T14729] loop3: detected capacity change from 0 to 32768 [ 1057.314532][T14729] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1057.492680][T14729] XFS (loop3): Ending clean mount [ 1057.517127][T14729] XFS (loop3): Quotacheck needed: Please wait. [ 1057.709538][T14729] XFS (loop3): Quotacheck: Done. [ 1057.747609][ T28] audit: type=1800 audit(1774517104.211:143): pid=14729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2467" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1057.792530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.827800][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1061.331390][T14758] loop2: detected capacity change from 0 to 32768 [ 1061.394813][T14758] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1061.485054][T14758] XFS (loop2): Ending clean mount [ 1061.512978][T14758] XFS (loop2): Quotacheck needed: Please wait. [ 1062.389460][T14758] XFS (loop2): Quotacheck: Done. [ 1063.094238][ T28] audit: type=1800 audit(1774517109.181:144): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2471" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1063.184449][T14266] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1063.713654][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2477'. [ 1064.072549][ T27] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1064.269944][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1064.285582][ T27] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1064.305925][ T27] usb 3-1: config 0 has no interface number 0 [ 1064.334811][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1064.355509][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.365049][ T27] usb 3-1: Product: syz [ 1064.369373][ T27] usb 3-1: Manufacturer: syz [ 1064.375309][ T27] usb 3-1: SerialNumber: syz [ 1064.414389][ T27] usb 3-1: config 0 descriptor?? [ 1064.433226][ T27] hub 3-1:0.132: bad descriptor, ignoring hub [ 1064.439517][ T27] hub: probe of 3-1:0.132 failed with error -5 [ 1064.475973][ T27] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input98 [ 1065.109790][ T5966] bond0 (unregistering): Released all slaves [ 1066.730986][T14606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1066.807849][T14606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1067.034100][T14606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1067.046323][T14606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1068.036237][ T5966] IPVS: stop unused estimator thread 0... [ 1068.074679][T14606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.154420][T14606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.189843][ T1801] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1068.196017][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.205091][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.246573][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.254165][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.298246][T14808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2485'. [ 1068.343670][T14606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1068.394350][ T1801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.420222][ T1801] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1068.431835][ T1801] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1068.448545][ T1801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.509262][ T1801] usb 2-1: config 0 descriptor?? [ 1068.739476][ T1801] usb 2-1: USB disconnect, device number 123 [ 1068.888705][T14606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.975312][T14606] veth0_vlan: entered promiscuous mode [ 1068.992479][T14606] veth1_vlan: entered promiscuous mode [ 1069.067828][T14606] veth0_macvtap: entered promiscuous mode [ 1069.081795][T14606] veth1_macvtap: entered promiscuous mode [ 1069.112354][T14606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.124368][T14606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.135671][T14606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.147599][T14606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.163299][T14606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.180291][T14606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.196128][T14606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.236937][T14606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.248745][T14606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.271780][T14606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.284287][T14606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.295987][T14606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.309785][ T1801] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1069.335733][T14606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.386937][T14606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.706558][ T1801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.271861][ T1801] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1070.282319][ T1801] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1070.292586][ T1801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.304608][ T1801] usb 2-1: config 0 descriptor?? [ 1071.576915][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.637529][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.770275][T14831] loop3: detected capacity change from 0 to 256 [ 1072.378613][ T788] usb 2-1: USB disconnect, device number 124 [ 1072.412129][T10761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.438942][T10761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.466493][T13452] usb 3-1: USB disconnect, device number 110 [ 1074.148302][T14844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2493'. [ 1075.892324][T14862] hub 9-0:1.0: USB hub found [ 1075.897453][T14862] hub 9-0:1.0: 1 port detected [ 1077.359432][T14873] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1077.565846][T14874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1077.637869][T12520] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1077.678160][T12520] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1077.689375][T12520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1077.709298][T12520] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1077.722747][T12520] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1077.733728][T12520] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1077.744212][T14873] Bluetooth: MGMT ver 1.22 [ 1078.059511][T14881] loop2: detected capacity change from 0 to 256 [ 1078.073940][T14881] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1078.084973][T14881] FAT-fs (loop2): Filesystem has been set read-only [ 1078.092419][T14881] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1078.102860][T14881] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1078.114150][T14881] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 1078.139775][ T28] audit: type=1800 audit(1774517124.611:145): pid=14881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2505" name="file1" dev="loop2" ino=1048615 res=0 errno=0 [ 1078.219336][ T5970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.422665][ T5970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.594338][ T5970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.669729][T14872] wg1 speed is unknown, defaulting to 1000 [ 1079.322021][ T5970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.839992][T12520] Bluetooth: hci3: command tx timeout [ 1079.858597][T14893] loop0: detected capacity change from 0 to 32768 [ 1079.938152][T14893] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1080.232494][T14893] XFS (loop0): Ending clean mount [ 1080.248679][T14893] XFS (loop0): Quotacheck needed: Please wait. [ 1080.311856][T14893] XFS (loop0): Quotacheck: Done. [ 1080.841457][ T28] audit: type=1800 audit(1774517127.161:146): pid=14913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2509" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1081.476449][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1081.911878][T12520] Bluetooth: hci3: command tx timeout [ 1082.299938][T14926] hub 9-0:1.0: USB hub found [ 1082.306516][T14926] hub 9-0:1.0: 1 port detected [ 1083.487020][T14938] loop2: detected capacity change from 0 to 256 [ 1083.567880][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1083.578534][T14938] FAT-fs (loop2): Filesystem has been set read-only [ 1083.585637][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1083.596527][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1083.607361][T14938] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 1083.617878][ T28] audit: type=1800 audit(1774517130.091:147): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2515" name="file1" dev="loop2" ino=1048616 res=0 errno=0 [ 1083.813073][T14872] chnl_net:caif_netlink_parms(): no params data found [ 1083.889763][ T5761] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1083.989905][T12520] Bluetooth: hci3: command tx timeout [ 1084.227901][T14872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.258301][T14872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.283849][T14872] bridge_slave_0: entered allmulticast mode [ 1084.308250][T14872] bridge_slave_0: entered promiscuous mode [ 1084.382692][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.398717][ T5761] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1084.408271][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.418945][ T5761] usb 2-1: config 0 descriptor?? [ 1084.429026][T14872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.438506][T14872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.446234][T14872] bridge_slave_1: entered allmulticast mode [ 1084.450181][ T5823] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1084.460738][T14872] bridge_slave_1: entered promiscuous mode [ 1084.548050][T14872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.561846][T14872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.615032][T14872] team0: Port device team_slave_0 added [ 1084.682672][ T5823] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1084.699053][T14872] team0: Port device team_slave_1 added [ 1084.710940][ T5823] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.722388][ T5823] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1084.732846][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.744850][ T5823] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.759145][ T5823] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1084.770813][ T5823] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1084.779468][ T5823] usb 1-1: Product: syz [ 1084.807310][ T5823] usb 1-1: Manufacturer: syz [ 1084.858519][ T5761] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 1084.886000][ T5823] cdc_wdm 1-1:1.0: skipping garbage [ 1084.904098][ T5823] cdc_wdm 1-1:1.0: skipping garbage [ 1084.936921][ T5823] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1084.944171][ T5761] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0021/input/input99 [ 1084.975323][T14872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.990107][ T5823] cdc_wdm 1-1:1.0: Unknown control protocol [ 1084.995836][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.045579][T14872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.082442][T14872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.129253][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1085.206025][ T5761] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1085.257003][T14872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.397234][ T1801] usb 2-1: USB disconnect, device number 125 [ 1085.466066][T14954] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 1085.698512][T14872] hsr_slave_0: entered promiscuous mode [ 1085.724398][T14872] hsr_slave_1: entered promiscuous mode [ 1085.734800][T14872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1085.757622][T14872] Cannot create hsr debugfs directory [ 1086.069819][T12520] Bluetooth: hci3: command tx timeout [ 1086.244834][ T5970] hsr_slave_0: left promiscuous mode [ 1086.261488][ T5970] hsr_slave_1: left promiscuous mode [ 1086.521002][T14963] loop1: detected capacity change from 0 to 32768 [ 1086.547199][ T5970] veth1_macvtap: left promiscuous mode [ 1086.555098][ T5970] veth0_macvtap: left promiscuous mode [ 1086.561154][ T5970] veth1_vlan: left promiscuous mode [ 1086.566679][ T5970] veth0_vlan: left promiscuous mode [ 1086.682682][T14963] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1086.771154][T14963] XFS (loop1): Ending clean mount [ 1086.784800][T14963] XFS (loop1): Quotacheck needed: Please wait. [ 1086.877866][T14963] XFS (loop1): Quotacheck: Done. [ 1087.266257][ T28] audit: type=1800 audit(1774517133.731:148): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1087.718696][ T27] usb 1-1: USB disconnect, device number 13 [ 1087.774649][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1088.014315][T14984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2522'. [ 1088.629314][T14991] hub 9-0:1.0: USB hub found [ 1088.634798][T14991] hub 9-0:1.0: 1 port detected [ 1092.229189][T15015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2530'. [ 1092.290478][ T5761] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1092.890833][T12520] Bluetooth: hci4: command 0x0406 tx timeout [ 1092.976576][T15021] loop1: detected capacity change from 0 to 256 [ 1092.996005][ T5761] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1093.044860][ T5761] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1093.079753][ T5761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1093.089037][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1093.107073][T15021] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1093.122268][T15021] FAT-fs (loop1): Filesystem has been set read-only [ 1093.139704][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1093.162808][ T5761] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1093.179742][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1093.182566][T15021] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1093.198604][ T5761] usb 1-1: Product: syz [ 1093.204452][T15021] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1093.214910][ T5761] usb 1-1: Manufacturer: syz [ 1093.224268][ T5761] cdc_wdm 1-1:1.0: skipping garbage [ 1093.225412][T15021] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 1093.230155][ T28] audit: type=1800 audit(1774517139.711:149): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2532" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 1093.269997][ T5761] cdc_wdm 1-1:1.0: skipping garbage [ 1093.279463][ T5761] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1095.076873][ T5818] usb 1-1: USB disconnect, device number 14 [ 1095.344026][T15037] siw: device registration error -23 [ 1095.603149][ T5970] bond0 (unregistering): Released all slaves [ 1095.801998][T15041] hub 9-0:1.0: USB hub found [ 1095.808872][T15041] hub 9-0:1.0: 1 port detected [ 1095.929095][ T5823] wg1 speed is unknown, defaulting to 1000 [ 1095.967169][T15036] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2535'. [ 1096.099299][T15047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2538'. [ 1097.631285][ T5970] IPVS: stop unused estimator thread 0... [ 1097.850439][T13452] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1098.560980][T15077] hub 9-0:1.0: USB hub found [ 1098.566153][T15077] hub 9-0:1.0: 1 port detected [ 1098.680111][T13452] usb 3-1: Using ep0 maxpacket: 16 [ 1098.691162][T13452] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1098.719704][T13452] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1098.729956][T13452] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.743483][T13452] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1098.770416][T13452] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1098.782445][T13452] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.806172][T13452] usb 3-1: Product: syz [ 1098.810963][T13452] usb 3-1: Manufacturer: syz [ 1098.815954][T13452] usb 3-1: SerialNumber: syz [ 1099.038955][T14872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1099.046603][T13452] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1099.071140][T14872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1099.112696][T14872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1099.141543][T14872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1099.308580][T14872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.405426][T14872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.440853][T12215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.448321][T12215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.476366][T15093] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2548'. [ 1099.495564][T12215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.503210][T12215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.514851][T15093] siw: device registration error -23 [ 1100.000299][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1100.070058][ T5823] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1100.192637][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.221433][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.259426][ T5818] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1100.271509][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 1100.308708][ T1800] usb 3-1: USB disconnect, device number 111 [ 1100.320200][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.332201][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.367203][ T1800] usblp0: removed [ 1100.429817][ T5823] usb 2-1: config 0 has no interfaces? [ 1100.436745][T14872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.452316][ T5818] usb 1-1: config 0 descriptor?? [ 1100.591567][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.636341][T14872] veth0_vlan: entered promiscuous mode [ 1100.674583][T14872] veth1_vlan: entered promiscuous mode [ 1100.774180][T14872] veth0_macvtap: entered promiscuous mode [ 1100.782899][ T5823] usb 2-1: config 0 has no interfaces? [ 1100.792793][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.810124][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.822084][T15118] xt_connbytes: Forcing CT accounting to be enabled [ 1100.834281][ T5823] usb 2-1: config 0 has no interfaces? [ 1100.841206][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.875255][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.899532][T15118] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 1100.915413][ T5818] usbhid 1-1:0.0: can't add hid device: -71 [ 1100.930489][T14872] veth1_macvtap: entered promiscuous mode [ 1100.937510][ T5823] usb 2-1: config 0 has no interfaces? [ 1100.944645][ T5818] usbhid: probe of 1-1:0.0 failed with error -71 [ 1100.969302][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1100.988624][ T5818] usb 1-1: USB disconnect, device number 15 [ 1101.001788][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.013692][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.034423][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.051660][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.063098][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.092789][ T5823] usb 2-1: config 0 descriptor?? [ 1101.105894][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.138747][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.156015][T14872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.204037][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.218214][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.240676][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.256022][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.267211][T14872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.279299][T14872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.333315][T14872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.399236][T14872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.412242][T14872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.421982][T14872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.432346][T14872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.479786][ T5818] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1101.671603][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1101.707395][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.730670][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.763711][ T5818] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 1101.775669][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.792793][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.802189][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.892588][ T5818] usb 1-1: config 0 descriptor?? [ 1101.953563][T10761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.962317][T10761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.344627][ T5818] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 1102.424238][T15125] loop3: detected capacity change from 0 to 1024 [ 1102.453922][ T5818] mcp2221 0003:04D8:00DD.0022: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1102.760571][T15125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.523784][ T5818] usb 1-1: USB disconnect, device number 16 [ 1103.568184][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.454582][T15143] loop2: detected capacity change from 0 to 256 [ 1106.004050][ T5761] usb 2-1: USB disconnect, device number 126 [ 1106.719832][ T27] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1106.902366][T15164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 1106.934212][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.979797][ T27] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1106.989530][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.027912][ T27] usb 3-1: config 0 descriptor?? [ 1107.241196][ T5818] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 1107.460513][T15175] loop0: detected capacity change from 0 to 1024 [ 1107.719873][ T27] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 1107.807212][T15175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.924610][ T5818] usb 4-1: config 1 has no interfaces? [ 1108.152599][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0023/input/input100 [ 1108.193792][ T5818] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1108.207610][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.401716][ T27] keytouch 0003:0926:3333.0023: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1108.444855][ T5818] usb 4-1: string descriptor 0 read error: -71 [ 1108.511002][ T5818] usb 4-1: USB disconnect, device number 126 [ 1108.671154][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.681394][ T5761] usb 3-1: USB disconnect, device number 112 [ 1108.837381][T15183] fido_id[15183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1109.775471][T15197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2563'. [ 1110.012604][T15201] QAT: failed to copy from user cfg_data. [ 1112.363142][T15217] loop2: detected capacity change from 0 to 1024 [ 1112.465434][T15217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.615598][T14266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.765146][T15258] hub 9-0:1.0: USB hub found [ 1115.770343][T15258] hub 9-0:1.0: 1 port detected [ 1116.410561][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.416956][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.704657][T15260] ALSA: mixer_oss: invalid OSS volume '' [ 1119.610045][T15285] loop1: detected capacity change from 0 to 32768 [ 1119.666149][T15285] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1119.977288][T15285] XFS (loop1): Ending clean mount [ 1120.016122][T15285] XFS (loop1): Quotacheck needed: Please wait. [ 1120.146600][T15285] XFS (loop1): Quotacheck: Done. [ 1120.850259][ T28] audit: type=1800 audit(1774517166.931:150): pid=15297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2581" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1120.971702][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1121.018669][T15299] loop0: detected capacity change from 0 to 256 [ 1121.120652][T15299] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1121.161238][T15299] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1121.343344][T15299] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1122.060121][T15308] hub 9-0:1.0: USB hub found [ 1122.086979][T15308] hub 9-0:1.0: 1 port detected [ 1123.755960][T15322] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1123.765528][T15322] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1123.774818][T15322] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1124.550378][T15320] delete_channel: no stack [ 1127.189674][T15342] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1130.324646][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1130.349860][T15365] veth1_to_bond: entered promiscuous mode [ 1130.355707][T15365] veth1_to_bond: entered allmulticast mode [ 1132.856771][T15385] QAT: failed to copy from user cfg_data. [ 1133.633311][T15391] hub 9-0:1.0: USB hub found [ 1133.638769][T15391] hub 9-0:1.0: 1 port detected [ 1134.477167][T12520] Bluetooth: hci1: command 0x0406 tx timeout [ 1134.909997][ T5818] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1135.112930][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.134353][ T5818] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1135.152064][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.169342][ T5818] usb 3-1: config 0 descriptor?? [ 1135.624594][ T5818] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 1135.659484][ T5818] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input101 [ 1136.290913][ T5818] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1136.713711][ T5818] usb 3-1: USB disconnect, device number 113 [ 1136.792790][T15404] fido_id[15404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1137.751641][T15418] loop0: detected capacity change from 0 to 32768 [ 1137.843851][T15423] QAT: failed to copy from user cfg_data. [ 1137.921333][T15418] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1137.965201][ T5818] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1138.052716][T15418] XFS (loop0): Ending clean mount [ 1138.066962][T15418] XFS (loop0): Quotacheck needed: Please wait. [ 1138.191241][T15418] XFS (loop0): Quotacheck: Done. [ 1138.239880][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 1138.386162][ T5818] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1138.434269][ T5818] usb 3-1: config 0 has no interface number 0 [ 1138.448362][ T5818] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1138.489732][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.798530][ T5818] usb 3-1: Product: syz [ 1139.054238][ T28] audit: type=1800 audit(1774517185.541:151): pid=15442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2612" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1139.061173][ T5818] usb 3-1: Manufacturer: syz [ 1139.152410][ T5818] usb 3-1: SerialNumber: syz [ 1139.170375][ T5818] usb 3-1: config 0 descriptor?? [ 1139.191169][ T5818] hub 3-1:0.132: bad descriptor, ignoring hub [ 1139.198120][ T5818] hub: probe of 3-1:0.132 failed with error -5 [ 1139.215486][ T5818] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input102 [ 1140.456017][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1140.799825][ T5126] usb 3-1: reset high-speed USB device number 114 using dummy_hcd [ 1140.944861][ T5126] usb 3-1: device reset changed ep0 maxpacket size! [ 1140.988658][T13452] usb 3-1: USB disconnect, device number 114 [ 1141.239891][T13452] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1141.458385][T13452] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.473661][T13452] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1141.486858][T13452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.617543][T15462] QAT: failed to copy from user cfg_data. [ 1141.630429][T13452] usb 3-1: config 0 descriptor?? [ 1141.990811][T15467] overlayfs: missing 'workdir' [ 1142.091129][T13452] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 1142.117869][T13452] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0025/input/input103 [ 1142.256656][T13452] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1142.265128][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1142.379122][T15469] bond_slave_0: entered promiscuous mode [ 1142.385507][T15469] bond_slave_1: entered promiscuous mode [ 1142.419434][T15469] macvtap1: entered promiscuous mode [ 1142.432759][T15469] bond0: entered promiscuous mode [ 1142.438716][T15469] macvtap1: entered allmulticast mode [ 1142.447926][T15469] bond0: entered allmulticast mode [ 1142.458039][T15469] bond_slave_0: entered allmulticast mode [ 1142.475308][T15469] bond_slave_1: entered allmulticast mode [ 1142.503524][T15469] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1142.537410][T15472] bond0: left allmulticast mode [ 1142.549439][T15472] bond_slave_0: left allmulticast mode [ 1142.562961][T15472] bond_slave_1: left allmulticast mode [ 1142.575581][T15472] bond0: left promiscuous mode [ 1142.587655][T15472] bond_slave_0: left promiscuous mode [ 1142.593667][T15472] bond_slave_1: left promiscuous mode [ 1142.693218][ T5761] usb 3-1: USB disconnect, device number 115 [ 1143.221917][T15481] loop0: detected capacity change from 0 to 32768 [ 1143.331150][T15481] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1143.471944][T15481] XFS (loop0): Ending clean mount [ 1143.485635][T15481] XFS (loop0): Quotacheck needed: Please wait. [ 1143.591002][T15481] XFS (loop0): Quotacheck: Done. [ 1145.273247][ T28] audit: type=1800 audit(1774517191.761:152): pid=15503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2628" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1147.292573][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1147.793288][T15524] QAT: failed to copy from user cfg_data. [ 1148.237771][T15530] loop0: detected capacity change from 0 to 1024 [ 1148.287451][T15530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.301624][T13452] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1148.339787][ T5823] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1148.459313][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.513650][T13452] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.539768][T13452] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1148.549450][T13452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.576295][T13452] usb 3-1: config 0 descriptor?? [ 1148.603377][T13452] pwc: Askey VC010 type 2 USB webcam detected. [ 1148.657517][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.686786][ T5823] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1148.711097][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.747175][ T5823] usb 2-1: config 0 descriptor?? [ 1149.037908][T13452] pwc: send_video_command error -71 [ 1149.044333][T13452] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1149.052896][T13452] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 1149.090082][T13452] usb 3-1: USB disconnect, device number 116 [ 1149.891544][ T5823] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 1149.936307][ T5823] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0026/input/input104 [ 1150.131149][ T5823] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1150.242985][T15544] overlayfs: missing 'workdir' [ 1150.269828][T13452] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1150.466287][ T5823] usb 2-1: USB disconnect, device number 127 [ 1150.512633][T13452] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.564570][T13452] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1150.587943][T13452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.644734][T13452] usb 3-1: config 0 descriptor?? [ 1150.672888][T13452] pwc: Askey VC010 type 2 USB webcam detected. [ 1151.055196][T15552] loop3: detected capacity change from 0 to 256 [ 1151.065419][T13452] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1151.076796][T13452] pwc: recv_control_msg error -32 req 02 val 2700 [ 1151.085164][T13452] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1151.099873][T13452] pwc: recv_control_msg error -32 req 04 val 1000 [ 1151.117627][T13452] pwc: recv_control_msg error -32 req 04 val 1300 [ 1151.140750][T13452] pwc: recv_control_msg error -32 req 04 val 1400 [ 1151.158336][T13452] pwc: recv_control_msg error -32 req 02 val 2000 [ 1151.168684][T13452] pwc: recv_control_msg error -32 req 02 val 2100 [ 1151.398823][T13452] pwc: recv_control_msg error -32 req 02 val 2500 [ 1151.424998][T13452] pwc: recv_control_msg error -32 req 02 val 2400 [ 1151.450656][T13452] pwc: recv_control_msg error -32 req 02 val 2600 [ 1151.468711][T13452] pwc: recv_control_msg error -32 req 02 val 2900 [ 1151.488880][T13452] pwc: recv_control_msg error -32 req 02 val 2800 [ 1151.504215][T13452] pwc: recv_control_msg error -32 req 04 val 1100 [ 1151.507085][T15558] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1151.529829][T13452] pwc: Registered as video103. [ 1151.548242][T13452] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input105 [ 1151.589984][T15558] siw: device registration error -23 [ 1151.758326][T13452] usb 3-1: USB disconnect, device number 117 [ 1154.843563][T15569] QAT: failed to copy from user cfg_data. [ 1155.288836][T15581] overlayfs: missing 'workdir' [ 1158.415343][T15614] QAT: failed to copy from user cfg_data. [ 1158.678001][T15620] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1158.707329][T15620] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1159.054207][T15627] lo speed is unknown, defaulting to 1000 [ 1159.061138][T15627] lo speed is unknown, defaulting to 1000 [ 1159.067694][T15627] lo speed is unknown, defaulting to 1000 [ 1159.086858][T15627] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1159.132229][T15627] lo speed is unknown, defaulting to 1000 [ 1159.140423][T15627] lo speed is unknown, defaulting to 1000 [ 1159.150408][T15627] lo speed is unknown, defaulting to 1000 [ 1159.158134][T15627] lo speed is unknown, defaulting to 1000 [ 1162.298163][T15663] QAT: failed to copy from user cfg_data. [ 1165.331929][T15674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1166.996981][T15685] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2682'. [ 1167.224857][T15685] siw: device registration error -23 [ 1167.695294][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 1167.722579][T15708] team_slave_0: entered promiscuous mode [ 1167.729006][T15708] team_slave_1: entered promiscuous mode [ 1167.736716][T15708] macvtap2: entered promiscuous mode [ 1167.744914][T15708] team0: entered promiscuous mode [ 1167.752816][T15708] macvtap2: entered allmulticast mode [ 1167.760577][T15708] team0: entered allmulticast mode [ 1167.766497][T15708] team_slave_0: entered allmulticast mode [ 1167.773274][T15708] team_slave_1: entered allmulticast mode [ 1167.789494][T15708] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1167.931377][T15712] tipc: Started in network mode [ 1167.936931][T15712] tipc: Node identity 46b288a1c991, cluster identity 4711 [ 1167.967746][T15712] tipc: Enabled bearer , priority 0 [ 1168.146142][T15713] syzkaller0: entered promiscuous mode [ 1168.199770][T15713] syzkaller0: entered allmulticast mode [ 1168.322925][T15713] tipc: Resetting bearer [ 1168.491025][T15711] tipc: Resetting bearer [ 1170.116416][T12520] Bluetooth: hci2: command 0x0406 tx timeout [ 1173.094903][T15751] overlayfs: missing 'lowerdir' [ 1176.311656][T15773] siw: device registration error -23 [ 1177.850444][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.857291][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.765935][T15711] tipc: Disabling bearer [ 1179.776226][ T5840] tipc: Node number set to 2401470625 [ 1179.787819][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2700'. [ 1179.805089][T15748] macvtap3: entered promiscuous mode [ 1179.811035][T15748] macvtap3: entered allmulticast mode [ 1179.818230][T15748] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1179.829356][T15772] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2708'. [ 1179.933299][T15784] overlayfs: missing 'lowerdir' [ 1180.424836][T15792] loop1: detected capacity change from 0 to 1024 [ 1181.230434][T15792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.331133][ T1800] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1181.751901][ T1800] usb 4-1: config 1 has no interfaces? [ 1181.760603][ T1800] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1182.469999][ T1800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.581518][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.707541][ T1800] usb 4-1: string descriptor 0 read error: -71 [ 1182.718149][T15809] loop0: detected capacity change from 0 to 1024 [ 1182.877168][T15809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.423832][ T1800] usb 4-1: USB disconnect, device number 127 [ 1183.748536][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.855664][T15823] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 1183.953133][T15823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1184.029930][T15825] vlan2: entered allmulticast mode [ 1184.035234][T15825] bond1: entered allmulticast mode [ 1184.153466][T15823] bond1: (slave geneve2): making interface the new active one [ 1184.238341][T15823] geneve2: entered allmulticast mode [ 1184.312878][T15823] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1184.602836][T15829] overlayfs: missing 'lowerdir' [ 1187.041635][T15848] loop0: detected capacity change from 0 to 1024 [ 1188.677071][T15848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.304228][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1191.147886][T15877] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2737'. [ 1191.191269][T15877] siw: device registration error -23 [ 1191.511320][T15883] loop2: detected capacity change from 0 to 1024 [ 1193.080488][T15883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.802495][T15887] overlayfs: missing 'lowerdir' [ 1193.993093][T14266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.388810][T15895] kvm: pic: single mode not supported [ 1194.389002][T15895] kvm: pic: level sensitive irq not supported [ 1196.745926][T15910] loop0: detected capacity change from 0 to 32768 [ 1197.308904][T15910] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1197.425944][T15910] XFS (loop0): Ending clean mount [ 1197.436917][T15924] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2749'. [ 1197.464002][T15910] XFS (loop0): Quotacheck needed: Please wait. [ 1197.485220][T15928] siw: device registration error -23 [ 1197.681492][T15910] XFS (loop0): Quotacheck: Done. [ 1198.579654][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1198.912553][ T1800] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1199.039998][ T5818] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 1199.109639][ T1800] usb 4-1: Using ep0 maxpacket: 16 [ 1199.132151][ T1800] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1199.152437][ T1800] usb 4-1: config 0 has no interface number 0 [ 1199.168414][ T1800] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1199.191564][ T1800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.205382][ T1800] usb 4-1: Product: syz [ 1199.213990][ T1800] usb 4-1: Manufacturer: syz [ 1199.219041][ T1800] usb 4-1: SerialNumber: syz [ 1199.274510][ T1800] usb 4-1: config 0 descriptor?? [ 1199.340090][ T5818] usb 2-1: config 1 has no interfaces? [ 1199.345230][ T1800] hub 4-1:0.132: bad descriptor, ignoring hub [ 1199.363494][ T1800] hub: probe of 4-1:0.132 failed with error -5 [ 1199.411850][ T1800] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input106 [ 1199.421618][ T5818] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1199.737449][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.004022][T12878] usb 4-1: USB disconnect, device number 2 [ 1200.055568][ T5818] usb 2-1: string descriptor 0 read error: -71 [ 1200.089451][ T5818] usb 2-1: USB disconnect, device number 2 [ 1200.469651][T15002] Bluetooth: hci3: command 0x0406 tx timeout [ 1201.899420][T15957] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2759'. [ 1201.950918][T15957] siw: device registration error -23 [ 1203.730387][T15975] overlayfs: missing 'workdir' [ 1204.429657][T12878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1205.276144][T12878] usb 4-1: Using ep0 maxpacket: 16 [ 1205.293257][ T5818] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 1205.305515][T12878] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1205.333064][T12878] usb 4-1: config 0 has no interface number 0 [ 1205.363906][T12878] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1205.374235][T12878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.396896][T12878] usb 4-1: Product: syz [ 1205.403005][T12878] usb 4-1: Manufacturer: syz [ 1205.414198][T12878] usb 4-1: SerialNumber: syz [ 1205.491586][T12878] usb 4-1: config 0 descriptor?? [ 1205.519117][ T5818] usb 3-1: config 1 has no interfaces? [ 1205.541537][T12878] hub 4-1:0.132: bad descriptor, ignoring hub [ 1205.547786][T12878] hub: probe of 4-1:0.132 failed with error -5 [ 1205.565381][ T5818] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1205.579811][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.592530][T12878] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input107 [ 1205.671901][T12878] usb 4-1: USB disconnect, device number 3 [ 1205.822179][ T5818] usb 3-1: string descriptor 0 read error: -71 [ 1205.849949][ T5818] usb 3-1: USB disconnect, device number 118 [ 1205.889721][T12878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1209.641831][T16007] overlayfs: missing 'workdir' [ 1211.709737][T12878] usb 3-1: new low-speed USB device number 119 using dummy_hcd [ 1211.912436][T12878] usb 3-1: config 1 has no interfaces? [ 1211.932106][T12878] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1211.958477][T12878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.196070][T12878] usb 3-1: string descriptor 0 read error: -71 [ 1212.227048][T12878] usb 3-1: USB disconnect, device number 119 [ 1215.560677][T16049] overlayfs: missing 'workdir' [ 1216.988994][T16060] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 1217.202157][T16060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1218.809798][ T788] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 1219.108428][ T788] usb 1-1: config 1 has no interfaces? [ 1221.128493][ T788] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1221.157119][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.223533][ T788] usb 1-1: can't set config #1, error -71 [ 1221.266269][ T788] usb 1-1: USB disconnect, device number 17 [ 1226.211068][T16120] loop3: detected capacity change from 0 to 32768 [ 1227.950031][T16120] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1228.114872][T16120] XFS (loop3): Ending clean mount [ 1228.130015][T16120] XFS (loop3): Quotacheck needed: Please wait. [ 1228.251048][T16120] XFS (loop3): Quotacheck: Done. [ 1229.307407][ T28] audit: type=1800 audit(1774517275.791:153): pid=16144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2805" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1230.273504][T16147] hub 9-0:1.0: USB hub found [ 1230.299769][T16147] hub 9-0:1.0: 1 port detected [ 1230.753109][T14872] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1230.850945][ T23] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 1231.111609][ T23] usb 1-1: config 1 has no interfaces? [ 1231.117793][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1231.152510][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.392936][ T23] usb 1-1: string descriptor 0 read error: -71 [ 1231.411473][ T23] usb 1-1: USB disconnect, device number 18 [ 1235.719636][ T27] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1235.919587][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1235.955053][ T27] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1235.969842][ T27] usb 3-1: config 1 has no interface number 0 [ 1235.977206][ T27] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1235.990269][ T27] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1236.002049][ T27] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1236.048073][ T27] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1236.058268][ T27] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1236.067698][ T27] usb 3-1: Product: syz [ 1236.075018][ T27] usb 3-1: Manufacturer: syz [ 1236.080638][ T27] usb 3-1: SerialNumber: syz [ 1236.122965][T16183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1236.255459][T16183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1236.905002][T16183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1236.916702][T16183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1237.145015][ T27] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1237.167693][ T27] aqc111: probe of 3-1:1.105 failed with error -71 [ 1237.191380][ T27] usb 3-1: USB disconnect, device number 120 [ 1238.405876][T16211] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2826'. [ 1239.276669][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.284265][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.908925][T16235] netlink: 'syz.0.2835': attribute type 1 has an invalid length. [ 1241.146092][T16235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1241.421365][T16245] pim6reg: entered allmulticast mode [ 1241.434844][T16246] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1241.460677][T16245] pim6reg: left allmulticast mode [ 1243.342568][T16267] hub 9-0:1.0: USB hub found [ 1243.350239][T16267] hub 9-0:1.0: 1 port detected [ 1245.015455][T16279] overlayfs: missing 'lowerdir' [ 1245.396233][T16284] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2848'. [ 1245.447533][T16286] siw: device registration error -23 [ 1248.013888][T16310] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1248.042692][T16310] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1249.099807][T12878] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1249.944543][T12878] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1249.997771][T12878] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1250.031765][T12878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1250.059653][T12878] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1250.097486][T12878] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1250.118200][T12878] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1250.137210][T16331] loop0: detected capacity change from 0 to 512 [ 1250.148737][T12878] usb 3-1: Product: syz [ 1250.153467][T12878] usb 3-1: Manufacturer: syz [ 1250.173199][T12878] cdc_wdm 3-1:1.0: skipping garbage [ 1250.178889][T12878] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1250.187235][T16331] EXT4-fs: Ignoring removed mblk_io_submit option [ 1250.209923][T16331] EXT4-fs: inline encryption not supported [ 1250.215999][T16331] EXT4-fs: Ignoring removed mblk_io_submit option [ 1250.271836][T16331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1250.304464][T16331] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1250.386587][T16331] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1250.482161][T16331] EXT4-fs (loop0): 1 truncate cleaned up [ 1250.504734][T16331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.139333][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.455618][T16342] loop3: detected capacity change from 0 to 1024 [ 1251.751139][T16342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.399941][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.416955][ T5840] usb 3-1: USB disconnect, device number 121 [ 1254.784223][T16372] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2875'. [ 1254.795746][T16372] siw: device registration error -23 [ 1254.901615][T16355] loop3: detected capacity change from 0 to 32768 [ 1255.066775][T16355] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1256.027756][T16355] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 1256.028680][T16355] XFS (loop3): log mount failed [ 1256.670435][T12878] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1256.730108][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 1258.452159][T12878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1258.469616][T12878] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1258.481090][T12878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1258.514030][T12878] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1258.602243][T12878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1258.643639][T12878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1258.669597][T12878] usb 1-1: Product: syz [ 1258.684583][T12878] usb 1-1: Manufacturer: syz [ 1258.710030][T12878] cdc_wdm 1-1:1.0: skipping garbage [ 1258.738101][T12878] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1259.398004][T16397] overlayfs: missing 'lowerdir' [ 1260.255551][T16408] loop1: detected capacity change from 0 to 512 [ 1260.275998][T16408] EXT4-fs: Ignoring removed mblk_io_submit option [ 1260.299660][T16408] EXT4-fs: inline encryption not supported [ 1260.323775][T16408] EXT4-fs: Ignoring removed mblk_io_submit option [ 1260.351961][T16408] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1260.366784][T16408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1260.406424][T16408] EXT4-fs (loop1): 1 truncate cleaned up [ 1260.424752][T16408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1260.648627][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.827547][ T5818] usb 1-1: USB disconnect, device number 19 [ 1260.892221][T16415] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2885'. [ 1260.930306][T16415] siw: device registration error -23 [ 1261.274167][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'. [ 1262.673159][T16435] loop0: detected capacity change from 0 to 512 [ 1262.690647][T16435] EXT4-fs: Ignoring removed mblk_io_submit option [ 1262.707395][T16435] EXT4-fs: inline encryption not supported [ 1262.717579][T16435] EXT4-fs: Ignoring removed mblk_io_submit option [ 1262.749904][T16435] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1262.767251][T16435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1262.802038][T16435] EXT4-fs (loop0): 1 truncate cleaned up [ 1262.820173][T16435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1263.033299][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.052858][T16416] loop2: detected capacity change from 0 to 32768 [ 1263.149733][T16416] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1263.244281][T16416] XFS (loop2): Ending clean mount [ 1263.254088][T16452] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 1263.269651][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1263.282963][T16416] XFS (loop2): Quotacheck needed: Please wait. [ 1263.357462][T16452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1263.382359][T16416] XFS (loop2): Quotacheck: Done. [ 1263.478976][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1263.498884][ T27] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1263.552084][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1263.582601][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1263.625187][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1263.636260][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1263.663086][ T27] usb 2-1: Product: syz [ 1263.687701][ T27] usb 2-1: Manufacturer: syz [ 1263.701863][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 1263.729729][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 1263.735234][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1264.064859][ T28] audit: type=1800 audit(1774517310.541:154): pid=16462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2886" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1264.330521][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1264.572647][T14266] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1266.029760][T12878] usb 2-1: USB disconnect, device number 3 [ 1266.115900][T16479] netlink: 'syz.1.2905': attribute type 1 has an invalid length. [ 1266.334708][T16479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1266.475022][T16483] bond1: (slave geneve2): making interface the new active one [ 1266.660733][T16483] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1269.893571][T16496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2909'. [ 1270.226051][T16504] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2912'. [ 1271.259729][T16512] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2915'. [ 1271.287022][T16515] loop1: detected capacity change from 0 to 512 [ 1271.346200][T16515] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.2916: corrupted in-inode xattr: e_value out of bounds [ 1271.591305][T16515] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.2916: couldn't read orphan inode 15 (err -117) [ 1271.621113][T16515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.525097][T16518] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1273.566023][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2920'. [ 1273.786665][T16536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2923'. [ 1273.800676][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.924047][T16538] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1273.979786][T16538] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1274.290094][T16546] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2926'. [ 1274.588065][T16552] overlayfs: failed to resolve './file0': -2 [ 1274.764196][T16555] loop0: detected capacity change from 0 to 1024 [ 1275.228493][T16555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.635324][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.821091][T16564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2931'. [ 1275.878867][T16567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2933'. [ 1276.123276][T16572] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1276.135466][T16572] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1276.171994][ T1800] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1276.284483][T16575] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2936'. [ 1276.297097][T16575] siw: device registration error -23 [ 1276.681437][ T1800] usb 3-1: Using ep0 maxpacket: 16 [ 1276.718384][ T1800] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1277.734611][ T1800] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1277.746661][ T1800] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1277.764360][ T1800] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1277.846294][ T1800] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1277.907107][ T1800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.932911][ T1800] usb 3-1: Product: syz [ 1278.007967][ T1800] usb 3-1: Manufacturer: syz [ 1278.080257][ T1800] usb 3-1: SerialNumber: syz [ 1278.099702][T16588] overlayfs: failed to resolve './file0': -2 [ 1278.218147][T16589] loop3: detected capacity change from 0 to 1024 [ 1280.731298][T16589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.982955][ T1800] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1281.030843][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.037228][ T1800] usb 3-1: USB disconnect, device number 122 [ 1281.066423][ T1800] usblp0: removed [ 1281.121153][T16594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2943'. [ 1281.207210][T16598] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1281.315847][T16598] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1282.013912][T16604] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2946'. [ 1282.060898][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1282.079213][T16604] siw: device registration error -23 [ 1282.299895][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.340727][ T788] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1282.426321][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.449928][ T788] usb 4-1: config 0 descriptor?? [ 1283.553483][T16615] loop0: detected capacity change from 0 to 1024 [ 1283.657017][ T788] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 1283.694510][T16618] loop1: detected capacity change from 0 to 1024 [ 1283.872892][T16618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.892491][T16615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.095958][ T788] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0027/input/input108 [ 1285.251572][ T788] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1285.276012][ T788] usb 4-1: USB disconnect, device number 5 [ 1285.391347][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.609024][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.644303][T16628] fido_id[16628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1285.806937][T16633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2954'. [ 1285.948612][T16637] overlayfs: failed to resolve './file0': -2 [ 1286.069385][T16639] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1286.109951][T16639] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1286.124713][ T788] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1286.359867][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 1286.422200][ T788] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1286.436852][ T788] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1286.453652][ T788] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1286.485437][ T788] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1286.539079][ T788] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1286.580292][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.615202][ T788] usb 2-1: Product: syz [ 1286.661161][ T788] usb 2-1: Manufacturer: syz [ 1286.676319][ T788] usb 2-1: SerialNumber: syz [ 1287.651133][T16645] loop2: detected capacity change from 0 to 32768 [ 1287.680130][ T788] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1287.788817][T16645] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1288.033874][ T788] usb 2-1: USB disconnect, device number 4 [ 1289.022938][T16645] XFS (loop2): Ending clean mount [ 1289.041602][T16645] XFS (loop2): Quotacheck needed: Please wait. [ 1289.168466][T16645] XFS (loop2): Quotacheck: Done. [ 1289.776057][ T28] audit: type=1800 audit(1774517335.921:155): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2958" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1289.921071][T14266] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1291.884372][T16676] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2963'. [ 1292.104403][T16681] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1292.135505][T16681] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1293.143472][T16631] usblp0: removed [ 1296.608339][T16716] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1296.625898][T16716] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1296.702540][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2974'. [ 1297.128079][ T27] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1298.027794][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.049628][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1298.070507][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.083089][ T27] usb 1-1: config 0 descriptor?? [ 1299.783969][ T27] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 1300.436883][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0028/input/input109 [ 1300.688267][ T27] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1300.732556][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.739699][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.866941][T16754] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 1300.892947][ T27] usb 1-1: USB disconnect, device number 20 [ 1300.913579][T16754] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1301.058779][T16755] fido_id[16755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1305.861183][T16780] loop3: detected capacity change from 0 to 32768 [ 1306.102439][T16780] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1306.752781][T16780] XFS (loop3): Ending clean mount [ 1306.775864][T16780] XFS (loop3): Quotacheck needed: Please wait. [ 1307.151916][T16797] vivid-000: disconnect [ 1307.533103][T16780] XFS (loop3): Quotacheck: Done. [ 1307.726523][T16793] vivid-000: reconnect [ 1308.091044][ T28] audit: type=1800 audit(1774517354.351:156): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2993" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1308.964863][T14872] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1311.910539][T16819] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1311.923695][T16819] siw: device registration error -23 [ 1312.011839][T16827] hub 9-0:1.0: USB hub found [ 1312.029608][T16827] hub 9-0:1.0: 1 port detected [ 1312.388441][T16831] loop3: detected capacity change from 0 to 1024 [ 1313.802482][T16831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.505159][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.380214][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1319.419608][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1319.527211][T16862] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3012'. [ 1319.542734][T16862] siw: device registration error -23 [ 1320.055925][T16868] trusted_key: encrypted_key: insufficient parameters specified [ 1323.792907][T16895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 1323.802570][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 1325.447503][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 1326.209078][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 1326.252930][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3031'. [ 1328.529674][ T27] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1328.932499][ T27] usb 4-1: no configurations [ 1329.223760][ T27] usb 4-1: can't read configurations, error -22 [ 1329.419973][ T27] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 1329.665957][ T27] usb 4-1: no configurations [ 1329.743427][ T27] usb 4-1: can't read configurations, error -22 [ 1329.816201][ T27] usb usb4-port1: attempt power cycle [ 1330.217620][T16961] netlink: 'syz.3.3042': attribute type 1 has an invalid length. [ 1330.322172][T16961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1330.333043][T16960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 1330.344567][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 1330.355907][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 1332.388768][T16981] loop3: detected capacity change from 0 to 1024 [ 1334.797352][T16981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.720288][ T5840] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 1335.925945][ T5840] usb 1-1: no configurations [ 1335.931082][ T5840] usb 1-1: can't read configurations, error -22 [ 1336.089818][ T5840] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 1336.300055][ T5840] usb 1-1: no configurations [ 1336.304821][ T5840] usb 1-1: can't read configurations, error -22 [ 1336.322175][ T5840] usb usb1-port1: attempt power cycle [ 1336.345482][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.409416][T16997] netlink: 'syz.1.3053': attribute type 16 has an invalid length. [ 1336.422592][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3053'. [ 1336.548514][T17000] loop2: detected capacity change from 0 to 1024 [ 1336.749575][ T5840] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1336.955247][T17000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.990268][ T5840] usb 1-1: no configurations [ 1337.060903][ T5840] usb 1-1: can't read configurations, error -22 [ 1337.355698][T14266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.369688][ T5840] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 1339.223871][ T5840] usb 1-1: device descriptor read/8, error -71 [ 1339.403239][ T5840] usb usb1-port1: unable to enumerate USB device [ 1341.939819][T17032] loop0: detected capacity change from 0 to 1024 [ 1342.111093][T17032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1342.534474][T17038] loop1: detected capacity change from 0 to 32768 [ 1342.629976][T17038] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1342.715357][T17038] XFS (loop1): Ending clean mount [ 1342.747996][T17038] XFS (loop1): Quotacheck needed: Please wait. [ 1342.772721][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.869728][T17038] XFS (loop1): Quotacheck: Done. [ 1343.163809][ T28] audit: type=1800 audit(1774517389.641:157): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3064" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1343.394204][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1343.415612][T17052] netlink: 'syz.0.3065': attribute type 16 has an invalid length. [ 1343.437902][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3065'. [ 1343.860026][ T1800] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 1344.076204][ T1800] usb 3-1: no configurations [ 1344.087563][ T1800] usb 3-1: can't read configurations, error -22 [ 1344.239738][ T1800] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1344.459141][ T1800] usb 3-1: no configurations [ 1344.469742][ T1800] usb 3-1: can't read configurations, error -22 [ 1344.486810][ T1800] usb usb3-port1: attempt power cycle [ 1344.845107][T17065] hub 9-0:1.0: USB hub found [ 1344.850652][T17065] hub 9-0:1.0: 1 port detected [ 1345.192314][ T1800] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1345.430536][ T1800] usb 3-1: no configurations [ 1345.457951][ T1800] usb 3-1: can't read configurations, error -22 [ 1346.472680][ T1800] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 1346.565832][T17075] loop3: detected capacity change from 0 to 1024 [ 1346.621062][ T1800] usb 3-1: device descriptor read/8, error -71 [ 1346.770433][T17075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.805628][ T1800] usb usb3-port1: unable to enumerate USB device [ 1346.968319][T17082] netlink: 'syz.2.3076': attribute type 16 has an invalid length. [ 1346.976990][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3076'. [ 1346.996732][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.332727][ T27] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1347.558570][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.585047][ T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1347.660095][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.759250][ T27] usb 1-1: config 0 descriptor?? [ 1348.812136][T17094] loop1: detected capacity change from 0 to 256 [ 1348.859822][ T27] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 1348.919088][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0029/input/input110 [ 1349.293090][ T27] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1349.504605][ T5761] usb 1-1: USB disconnect, device number 25 [ 1349.768985][T17101] fido_id[17101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1349.967849][T17103] hub 9-0:1.0: USB hub found [ 1349.973854][T17103] hub 9-0:1.0: 1 port detected [ 1351.399802][ T5840] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 1351.482506][T17116] vivid-001: disconnect [ 1351.490851][T17115] vivid-001: reconnect [ 1351.622831][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1351.640100][ T5840] usb 3-1: can't read configurations, error -61 [ 1351.743584][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 1351.802535][ T5840] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 1352.038899][ T5840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1352.049941][ T5840] usb 3-1: can't read configurations, error -61 [ 1352.067750][ T5840] usb usb3-port1: attempt power cycle [ 1354.401235][ T5840] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 1354.505961][ T5840] usb 3-1: device descriptor read/8, error -71 [ 1354.921075][T17144] loop3: detected capacity change from 0 to 32768 [ 1355.037588][T17144] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1355.161062][T17144] XFS (loop3): Ending clean mount [ 1355.170737][T17144] XFS (loop3): Quotacheck needed: Please wait. [ 1355.184550][T17158] loop2: detected capacity change from 0 to 256 [ 1355.284070][T17144] XFS (loop3): Quotacheck: Done. [ 1355.759615][ T28] audit: type=1800 audit(1774517402.131:158): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3093" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1356.205384][T14872] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1357.830314][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3098'. [ 1361.996772][T17186] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3102'. [ 1362.017854][T17186] siw: device registration error -23 [ 1362.164174][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.180932][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.653863][T17193] loop2: detected capacity change from 0 to 32768 [ 1362.683160][T17193] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1362.745160][T17193] XFS (loop2): Ending clean mount [ 1362.756916][T17193] XFS (loop2): Quotacheck needed: Please wait. [ 1362.891118][T17193] XFS (loop2): Quotacheck: Done. [ 1363.185011][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 1363.199299][ T28] audit: type=1800 audit(1774517409.681:159): pid=17204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3107" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1363.242128][ C1] vkms_vblank_simulate: vblank timer overrun [ 1363.564454][T14266] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1365.864256][T17219] loop2: detected capacity change from 0 to 32768 [ 1367.186556][T17219] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1367.696974][T17219] XFS (loop2): Ending clean mount [ 1367.823665][T17219] XFS (loop2): Quotacheck needed: Please wait. [ 1368.213229][T17219] XFS (loop2): Quotacheck: Done. [ 1368.591886][ T28] audit: type=1800 audit(1774517415.061:160): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3110" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4428 res=0 errno=0 [ 1368.988419][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3118'. [ 1369.147250][T14266] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1369.570471][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1369.612268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1369.630560][T17252] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3115'. [ 1369.644118][T17252] siw: device registration error -23 [ 1369.664880][T17250] loop0: detected capacity change from 0 to 256 [ 1369.783099][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.801505][ T788] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1369.811129][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.823232][ T788] usb 2-1: config 0 descriptor?? [ 1371.059991][ T788] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 1371.076933][ T788] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.002A/input/input111 [ 1371.238865][ T788] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1372.902833][ T5840] usb 2-1: USB disconnect, device number 5 [ 1373.185514][T17274] overlayfs: missing 'lowerdir' [ 1373.637229][T17276] loop0: detected capacity change from 0 to 32768 [ 1373.695429][T17276] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1373.745000][T17276] XFS (loop0): Ending clean mount [ 1373.759759][T17276] XFS (loop0): Quotacheck needed: Please wait. [ 1373.931625][T17276] XFS (loop0): Quotacheck: Done. [ 1374.307124][ T28] audit: type=1800 audit(1774517420.781:161): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3127" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 1374.823410][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1374.835863][T17290] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3129'. [ 1374.871294][T17290] siw: device registration error -23 [ 1380.074711][T17322] loop3: detected capacity change from 0 to 32768 [ 1380.274004][T17322] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1380.537252][T17334] loop1: detected capacity change from 0 to 1024 [ 1380.560954][T17334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.597756][T17322] XFS (loop3): Ending clean mount [ 1380.608768][T17322] XFS (loop3): Quotacheck needed: Please wait. [ 1380.747998][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.759600][T16874] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1380.790199][T17322] XFS (loop3): Quotacheck: Done. [ 1380.961695][T16874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.004947][T16874] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1381.079699][T16874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.183920][T16874] usb 1-1: config 0 descriptor?? [ 1381.720788][T14872] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1381.910668][T16874] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 1381.934538][T16874] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002B/input/input112 [ 1382.198797][T16874] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1383.294196][ T27] usb 1-1: USB disconnect, device number 26 [ 1383.681986][T17351] hub 9-0:1.0: USB hub found [ 1383.687285][T17351] hub 9-0:1.0: 1 port detected [ 1384.375823][T17348] fido_id[17348]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1384.479368][T17357] overlayfs: failed to resolve './file0': -2 [ 1388.789150][T17379] loop1: detected capacity change from 0 to 32768 [ 1388.872230][T17379] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1389.030998][T17379] XFS (loop1): Ending clean mount [ 1389.042896][T17379] XFS (loop1): Quotacheck needed: Please wait. [ 1389.165361][T17379] XFS (loop1): Quotacheck: Done. [ 1390.067041][T17390] loop0: detected capacity change from 0 to 256 [ 1390.519066][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1391.426438][T17406] overlayfs: failed to resolve './file0': -2 [ 1391.893415][T17410] hub 9-0:1.0: USB hub found [ 1391.994445][T17410] hub 9-0:1.0: 1 port detected [ 1392.808853][T17415] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 1393.127706][T17415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1394.512901][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3162'. [ 1395.874089][T17443] loop0: detected capacity change from 0 to 32768 [ 1395.962804][T17447] loop2: detected capacity change from 0 to 256 [ 1396.516290][T17443] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1396.688620][T17443] XFS (loop0): Ending clean mount [ 1396.703248][T17443] XFS (loop0): Quotacheck needed: Please wait. [ 1396.877877][T17443] XFS (loop0): Quotacheck: Done. [ 1396.893925][T17457] overlayfs: missing 'lowerdir' [ 1398.155936][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1399.095587][T17469] netlink: 'syz.0.3167': attribute type 1 has an invalid length. [ 1399.236758][T17469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1399.718299][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 1401.103353][T17496] loop1: detected capacity change from 0 to 32768 [ 1402.919159][T17496] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1402.971075][T17496] XFS (loop1): Ending clean mount [ 1402.980769][T17496] XFS (loop1): Quotacheck needed: Please wait. [ 1403.124313][T17496] XFS (loop1): Quotacheck: Done. [ 1403.519697][ T28] audit: type=1800 audit(1774517449.981:162): pid=17512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3176" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1404.007544][ T5823] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 1404.030405][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1404.253957][ T5823] usb 1-1: config 1 has no interfaces? [ 1404.269525][ T5823] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1404.278947][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.636441][ T5823] usb 1-1: string descriptor 0 read error: -71 [ 1404.651696][ T5823] usb 1-1: USB disconnect, device number 27 [ 1404.816878][T17524] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 1405.044007][T17524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1405.381637][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1406.204118][T17533] loop2: detected capacity change from 0 to 32768 [ 1406.328613][T17533] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1406.497328][T17533] XFS (loop2): Ending clean mount [ 1406.512085][T17533] XFS (loop2): Quotacheck needed: Please wait. [ 1407.874255][T17533] XFS (loop2): Quotacheck: Done. [ 1408.109680][ T28] audit: type=1800 audit(1774517454.541:163): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3186" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0 [ 1408.236886][T14266] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1409.910165][T17562] hub 9-0:1.0: USB hub found [ 1409.915667][T17562] hub 9-0:1.0: 1 port detected [ 1410.012918][T17565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1410.209168][T17567] loop1: detected capacity change from 0 to 1024 [ 1410.258659][T17567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.448036][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.869484][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1411.105769][T17580] loop3: detected capacity change from 0 to 32768 [ 1411.128538][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1411.146643][ T27] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1411.188510][T17580] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1411.210933][ T27] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1411.265738][ T27] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1411.313643][T17580] XFS (loop3): Ending clean mount [ 1411.347106][ T27] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1411.361225][T17580] XFS (loop3): Quotacheck needed: Please wait. [ 1411.404937][ T27] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1411.500606][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.668817][ T27] usb 3-1: Product: syz [ 1411.733185][ T27] usb 3-1: Manufacturer: syz [ 1411.813744][ T27] usb 3-1: SerialNumber: syz [ 1412.336865][T17580] XFS (loop3): Quotacheck: Done. [ 1412.523137][ T27] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1412.654406][ T28] audit: type=1800 audit(1774517459.031:164): pid=17580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3199" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 1412.654988][T12878] usb 3-1: USB disconnect, device number 5 [ 1412.755482][T14872] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1412.784014][T12878] usblp0: removed [ 1412.862698][T17593] loop1: detected capacity change from 0 to 256 [ 1413.224268][T17597] vivid-001: disconnect [ 1413.229258][T17596] vivid-001: reconnect [ 1413.881667][T17603] hub 9-0:1.0: USB hub found [ 1413.889593][T17603] hub 9-0:1.0: 1 port detected [ 1414.664733][T17609] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1414.740360][T17609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1415.431686][T17618] loop3: detected capacity change from 0 to 1024 [ 1415.491284][T17618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1415.645980][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.395282][T17631] loop1: detected capacity change from 0 to 32768 [ 1416.432027][T17631] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1416.519635][T17631] XFS (loop1): Ending clean mount [ 1416.543330][T17631] XFS (loop1): Quotacheck needed: Please wait. [ 1416.686817][T17631] XFS (loop1): Quotacheck: Done. [ 1417.051596][ T28] audit: type=1800 audit(1774517463.421:165): pid=17631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3210" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0 [ 1417.163094][T17646] vivid-001: disconnect [ 1417.167799][T17644] vivid-001: reconnect [ 1417.268866][T13961] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1417.809689][T16874] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1418.012017][T16874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.036302][T16874] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1418.064000][T16874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.105579][T16874] usb 3-1: config 0 descriptor?? [ 1418.561660][T16874] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 1418.676420][T16874] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002C/input/input113 [ 1418.937147][T16874] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1419.124502][T16874] usb 3-1: USB disconnect, device number 6 [ 1419.248455][T17660] fido_id[17660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1419.896494][T17669] loop3: detected capacity change from 0 to 1024 [ 1420.142171][T17669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.436310][T14872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.450811][T17679] overlayfs: missing 'lowerdir' [ 1420.921781][T17685] vivid-003: disconnect [ 1420.926512][T17683] vivid-003: reconnect [ 1421.752391][T17695] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3223'. [ 1421.818119][T17695] siw: device registration error -23 [ 1423.600222][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.607304][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.760291][T17713] loop2: detected capacity change from 0 to 1024 [ 1423.808954][T17713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.992664][T12878] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1424.038725][T14266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.217920][T12878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.257250][T12878] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1424.369948][T12878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.577952][T17722] vivid-000: disconnect [ 1424.583189][T17721] vivid-000: reconnect [ 1425.893363][T12878] usb 1-1: config 0 descriptor?? [ 1426.431974][T12878] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 1426.444094][T12878] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002D/input/input114 [ 1426.921372][T12878] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1427.490943][ T5761] usb 1-1: USB disconnect, device number 28 [ 1427.718816][T17732] fido_id[17732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1427.839635][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1428.045895][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.076754][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.104882][ T5823] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1428.118447][ T5823] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1428.135862][ T5823] usb 2-1: Manufacturer: syz [ 1428.145696][ T5823] usb 2-1: config 0 descriptor?? [ 1429.415088][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3237'. [ 1429.807886][ T5823] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002E/input/input115 [ 1429.869228][T17754] kvm: pic: single mode not supported [ 1429.869256][T17754] kvm: pic: level sensitive irq not supported [ 1430.023176][ T5823] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002E/input/input116 [ 1430.102838][ T5823] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002E/input/input117 [ 1430.170101][ T5823] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002E/input/input118 [ 1430.220127][ T5823] uclogic 0003:256C:006D.002E: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1430.254303][ T5823] usb 2-1: USB disconnect, device number 6 [ 1430.609257][T17756] fido_id[17756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1431.276347][T17768] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3243'. [ 1431.339616][ T788] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1431.410486][T17771] loop1: detected capacity change from 0 to 256 [ 1433.019498][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 1433.039950][ T788] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1433.109310][ T788] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1433.166811][ T788] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1433.196629][ T788] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1433.210756][ T788] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1433.220881][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.229278][ T788] usb 4-1: Product: syz [ 1433.236247][ T788] usb 4-1: Manufacturer: syz [ 1433.241363][ T788] usb 4-1: SerialNumber: syz [ 1434.013857][ T788] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1434.363810][T16874] usb 4-1: USB disconnect, device number 9 [ 1434.713430][T17766] usblp0: removed [ 1435.253248][T17800] kvm: pic: single mode not supported [ 1435.253276][T17800] kvm: pic: level sensitive irq not supported [ 1437.560331][T17815] loop1: detected capacity change from 0 to 1024 [ 1437.704298][T17815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.752032][T17820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1438.989156][T17823] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.3257: Allocating blocks 497-513 which overlap fs metadata [ 1439.042952][T17823] EXT4-fs (loop1): pa ffff888078b91910: logic 131104, phys. 177, len 21 [ 1439.052199][T17823] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5393: group 0, free 0, pa_free 1 [ 1439.287582][T13961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.974021][ T1800] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1440.209492][ T1800] usb 2-1: Using ep0 maxpacket: 16 [ 1440.219195][ T1800] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1440.249461][ T1800] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1440.278435][ T1800] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1440.309179][ T1800] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1440.329736][ T1800] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1440.339912][ T1800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.358945][ T1800] usb 2-1: Product: syz [ 1440.363852][ T1800] usb 2-1: Manufacturer: syz [ 1440.368699][ T1800] usb 2-1: SerialNumber: syz [ 1441.329885][ T1800] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1441.440138][T17852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3269'. [ 1441.531286][ T1800] usb 2-1: USB disconnect, device number 7 [ 1441.744857][T17836] usblp0: removed [ 1443.392999][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3281'. [ 1443.695993][T17896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1444.521011][ T5823] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1444.751633][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1444.830103][ T5823] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1445.006029][ T5823] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1445.136818][ T5823] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1445.157595][T17913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3291'. [ 1445.263794][ T5823] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1445.445412][ T5823] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1445.539247][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.569784][ T5823] usb 4-1: Product: syz [ 1445.574611][ T5823] usb 4-1: Manufacturer: syz [ 1445.594954][ T5823] usb 4-1: SerialNumber: syz [ 1446.096143][T17926] vivid-003: disconnect [ 1446.102856][T17922] vivid-003: reconnect [ 1446.184392][ T5823] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1446.290960][ T5823] usb 4-1: USB disconnect, device number 10 [ 1446.429611][ T5823] usblp0: removed [ 1447.197415][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1449.746251][ T5823] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1450.072548][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 1450.147474][ T5823] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1450.263423][ T5823] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1450.280134][ T5823] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1450.297438][ T5823] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1450.309293][ T5823] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1450.319322][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.328893][ T5823] usb 4-1: Product: syz [ 1450.339515][ T5823] usb 4-1: Manufacturer: syz [ 1450.354805][ T5823] usb 4-1: SerialNumber: syz [ 1450.598014][ T5823] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1450.705732][T17978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3312'. [ 1450.805101][ T27] usb 4-1: USB disconnect, device number 11 [ 1451.003196][T17967] usblp0: removed [ 1452.283931][T17988] loop0: detected capacity change from 0 to 32768 [ 1452.406085][T17988] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1452.544109][T17988] XFS (loop0): Ending clean mount [ 1452.610974][T17988] XFS (loop0): Quotacheck needed: Please wait. [ 1453.226731][T17988] XFS (loop0): Quotacheck: Done. [ 1453.527531][ T28] audit: type=1800 audit(1774517500.001:166): pid=18007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3316" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1453.962247][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1455.554476][ T1800] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1455.751932][ T1800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1455.774754][ T1800] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1455.798806][ T1800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.822830][ T1800] usb 3-1: config 0 descriptor?? [ 1456.473237][ T1800] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 1456.513367][ T1800] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002F/input/input119 [ 1457.200057][ T1800] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1458.024306][ T1800] usb 3-1: USB disconnect, device number 7 [ 1459.426542][T18047] loop0: detected capacity change from 0 to 32768 [ 1459.588751][T18047] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1459.654882][T18040] fido_id[18040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1459.757892][T18047] XFS (loop0): Ending clean mount [ 1459.776807][T18047] XFS (loop0): Quotacheck needed: Please wait. [ 1459.952707][T18047] XFS (loop0): Quotacheck: Done. [ 1460.669475][ T28] audit: type=1800 audit(1774517506.741:167): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3331" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4429 res=0 errno=0 [ 1460.806497][T14606] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1461.891531][T18065] overlayfs: missing 'lowerdir' [ 1463.039517][T18077] loop3: detected capacity change from 0 to 256 [ 1465.595372][T18098] overlayfs: missing 'lowerdir' [ 1466.272952][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3344'. [ 1466.835328][T18107] kvm: pic: level sensitive irq not supported [ 1466.835537][T18107] kvm: pic: level sensitive irq not supported [ 1467.406864][T18117] vivid-000: disconnect [ 1467.877959][T18114] vivid-000: reconnect [ 1468.219525][ T1800] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1469.054971][T18122] loop2: detected capacity change from 0 to 1024 [ 1469.426376][T18122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1471.751761][ T1800] usb 1-1: device descriptor read/all, error -71 [ 1471.952615][T14266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1473.553149][T18148] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3358'. [ 1473.567887][T18148] siw: device registration error -23 [ 1473.617867][T18152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1475.039591][ T1801] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1476.088854][ T1801] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1476.168483][ T1801] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1476.228664][ T1801] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1476.310142][ T1801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1476.639904][ T1801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1582.659322][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1582.666644][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15575/1:b..l P18132/1:b..l [ 1582.676597][ C1] rcu: (detected by 1, t=10502 jiffies, g=137665, q=145 ncpus=2) [ 1582.684436][ C1] task:syz.1.3352 state:R running task stack:25640 pid:18132 ppid:13961 flags:0x00004002 [ 1582.696900][ C1] Call Trace: [ 1582.700217][ C1] [ 1582.703255][ C1] __schedule+0x1553/0x45a0 [ 1582.707884][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 1582.713211][ C1] ? asan.module_dtor+0x20/0x20 [ 1582.718182][ C1] ? __lock_acquire+0x1273/0x7d40 [ 1582.723431][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1582.729841][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 1582.735471][ C1] preempt_schedule_irq+0xbf/0x150 [ 1582.740673][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1582.746750][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1582.753097][ C1] irqentry_exit+0x67/0x70 [ 1582.757984][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1582.764305][ C1] RIP: 0010:unwind_get_return_address+0x68/0xc0 [ 1582.770652][ C1] Code: 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 bb 25 a4 00 48 8b 3b e8 53 51 1e 00 89 c5 31 ff 89 c6 e8 48 ed 4b 00 <85> ed 74 20 e8 8f e9 4b 00 43 80 3c 37 00 74 08 48 89 df e8 90 25 [ 1582.790832][ C1] RSP: 0018:ffffc9000b966e80 EFLAGS: 00000293 [ 1582.796939][ C1] RAX: ffffffff813b3688 RBX: ffffc9000b966ef0 RCX: 0000000000000000 [ 1582.805388][ C1] RDX: ffff88802d8abc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1582.814195][ C1] RBP: 0000000000000001 R08: ffff88802d8abc00 R09: 0000000000000003 [ 1582.822384][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81f5fd2a [ 1582.830627][ C1] R13: 1ffff11005b1582e R14: dffffc0000000000 R15: 1ffff9200172cdde [ 1582.838660][ C1] ? evict+0x4ca/0x8d0 [ 1582.842784][ C1] ? unwind_get_return_address+0x68/0xc0 [ 1582.848563][ C1] ? stack_trace_save+0x100/0x100 [ 1582.853706][ C1] arch_stack_walk+0x11d/0x190 [ 1582.858518][ C1] ? __dentry_kill+0x431/0x650 [ 1582.863424][ C1] stack_trace_save+0xaa/0x100 [ 1582.868249][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1582.873514][ C1] save_stack+0x125/0x230 [ 1582.878043][ C1] ? __reset_page_owner+0x190/0x190 [ 1582.883363][ C1] ? free_unref_page_prepare+0x7b2/0x8c0 [ 1582.889166][ C1] ? free_unref_page_list+0xbe/0x860 [ 1582.894599][ C1] ? release_pages+0x1f7a/0x2200 [ 1582.899657][ C1] ? __folio_batch_release+0x71/0xe0 [ 1582.905015][ C1] ? shmem_undo_range+0x630/0x1b20 [ 1582.910292][ C1] ? shmem_evict_inode+0x245/0x9e0 [ 1582.915508][ C1] ? evict+0x4ca/0x8d0 [ 1582.919722][ C1] ? page_ext_get+0x22/0x2b0 [ 1582.924520][ C1] ? page_ext_get+0x1e2/0x2b0 [ 1582.929247][ C1] __reset_page_owner+0x4e/0x190 [ 1582.934377][ C1] ? rcu_is_watching+0x15/0xb0 [ 1582.939294][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 1582.945362][ C1] free_unref_page_list+0xbe/0x860 [ 1582.950616][ C1] ? __folio_memcg+0x63/0x160 [ 1582.955433][ C1] ? folio_memcg+0x127/0x480 [ 1582.960068][ C1] release_pages+0x1f7a/0x2200 [ 1582.964974][ C1] ? lru_cache_disable+0x30/0x30 [ 1582.970177][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1582.975591][ C1] __folio_batch_release+0x71/0xe0 [ 1582.980814][ C1] shmem_undo_range+0x630/0x1b20 [ 1582.986333][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 1582.991639][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1582.997674][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1583.002990][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 1583.008829][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 1583.013880][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 1583.019021][ C1] shmem_evict_inode+0x245/0x9e0 [ 1583.023995][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 1583.029829][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1583.035420][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 1583.041443][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 1583.046865][ C1] ? bit_waitqueue+0x30/0x30 [ 1583.051578][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1583.056888][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1583.062633][ C1] evict+0x4ca/0x8d0 [ 1583.066561][ C1] ? proc_nr_inodes+0x230/0x230 [ 1583.071441][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 1583.076874][ C1] ? _raw_spin_unlock+0x28/0x40 [ 1583.082086][ C1] ? iput+0x706/0x920 [ 1583.086345][ C1] __dentry_kill+0x431/0x650 [ 1583.090981][ C1] dentry_kill+0xb8/0x290 [ 1583.095347][ C1] ? dput+0x3b/0x1e0 [ 1583.099469][ C1] dput+0xfe/0x1e0 [ 1583.103424][ C1] __fput+0x5e5/0x970 [ 1583.107429][ C1] task_work_run+0x1d4/0x260 [ 1583.112166][ C1] ? task_work_cancel+0x220/0x220 [ 1583.117316][ C1] do_exit+0x95a/0x2460 [ 1583.121608][ C1] ? put_task_struct+0xc0/0xc0 [ 1583.126426][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1583.132531][ C1] ? get_signal+0x1068/0x13f0 [ 1583.137489][ C1] ? lock_chain_count+0x20/0x20 [ 1583.142628][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1583.147782][ C1] do_group_exit+0x21b/0x2d0 [ 1583.152432][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1583.157656][ C1] get_signal+0x12fc/0x13f0 [ 1583.162328][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 1583.168180][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1583.174287][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 1583.180042][ C1] ? get_sigframe_size+0x20/0x20 [ 1583.185222][ C1] ? __x64_sys_recvmmsg+0x199/0x250 [ 1583.190625][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1583.196139][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1583.201788][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1583.207383][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1583.212892][ C1] do_syscall_64+0x61/0xa0 [ 1583.217368][ C1] ? clear_bhb_loop+0x40/0x90 [ 1583.222442][ C1] ? clear_bhb_loop+0x40/0x90 [ 1583.227378][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1583.233506][ C1] RIP: 0033:0x7fb4cad9c799 [ 1583.238278][ C1] RSP: 002b:00007fb4c8ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1583.247100][ C1] RAX: 0000000000010106 RBX: 00007fb4cb016090 RCX: 00007fb4cad9c799 [ 1583.256012][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1583.264117][ C1] RBP: 00007fb4cae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1583.272278][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1583.280397][ C1] R13: 00007fb4cb016128 R14: 00007fb4cb016090 R15: 00007ffdae0e22e8 [ 1583.288526][ C1] [ 1583.291578][ C1] task:kworker/u4:3 state:R running task stack:22632 pid:15575 ppid:2 flags:0x00004000 [ 1583.302572][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1583.309023][ C1] Call Trace: [ 1583.312482][ C1] [ 1583.315474][ C1] __schedule+0x1553/0x45a0 [ 1583.320131][ C1] ? asan.module_dtor+0x20/0x20 [ 1583.325027][ C1] ? mark_lock+0x94/0x320 [ 1583.329411][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1583.335462][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 1583.341676][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 1583.347042][ C1] preempt_schedule_irq+0xbf/0x150 [ 1583.352249][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1583.358125][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1583.363983][ C1] irqentry_exit+0x67/0x70 [ 1583.368449][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1583.374581][ C1] RIP: 0010:ieee80211_sta_get_rates+0x39a/0x6b0 [ 1583.381050][ C1] Code: ff ff ff ff 44 89 f6 e8 04 80 80 f7 41 83 fe ff 74 22 e8 49 7c 80 f7 49 be 00 00 00 00 00 fc ff df 41 39 dc 0f 84 84 01 00 00 31 7c 80 f7 48 ff c3 eb 8a 48 83 c5 04 48 89 e8 48 c1 e8 03 49 [ 1583.400989][ C1] RSP: 0018:ffffc90004f37778 EFLAGS: 00000206 [ 1583.407342][ C1] RAX: ffffffff8a06a476 RBX: 0000000000000006 RCX: ffff88802b553c00 [ 1583.415526][ C1] RDX: 0000000000000000 RSI: 00000000000001e0 RDI: 0000000000000078 [ 1583.423615][ C1] RBP: 0000000000000078 R08: ffffffff8e8b02af R09: 1ffffffff1d16055 [ 1583.431698][ C1] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: 000000000000000b [ 1583.439804][ C1] R13: 00000000000001e0 R14: dffffc0000000000 R15: ffff88807792b350 [ 1583.447998][ C1] ? ieee80211_sta_get_rates+0x426/0x6b0 [ 1583.453710][ C1] ? ieee80211_sta_get_rates+0x426/0x6b0 [ 1583.459799][ C1] ieee80211_ibss_rx_queued_mgmt+0x10db/0x2c80 [ 1583.466377][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 1583.473013][ C1] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 1583.478972][ C1] ? mark_lock+0x94/0x320 [ 1583.483391][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1583.489442][ C1] ? lock_chain_count+0x20/0x20 [ 1583.494459][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1583.500835][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1583.506250][ C1] ? skb_dequeue+0x124/0x160 [ 1583.511339][ C1] ieee80211_iface_work+0x717/0xc70 [ 1583.516846][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1583.522299][ C1] cfg80211_wiphy_work+0x225/0x260 [ 1583.527437][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1583.533362][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1583.539139][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1583.544912][ C1] ? assign_work+0x3d2/0x5d0 [ 1583.549622][ C1] worker_thread+0xa55/0xfc0 [ 1583.554714][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1583.560762][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1583.565835][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1583.572191][ C1] kthread+0x2fa/0x390 [ 1583.576470][ C1] ? pr_cont_work+0x560/0x560 [ 1583.581213][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1583.585866][ C1] ret_from_fork+0x48/0x80 [ 1583.590398][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1583.595232][ C1] ret_from_fork_asm+0x11/0x20 [ 1583.600142][ C1] [ 1583.603270][ C1] rcu: rcu_preempt kthread starved for 10113 jiffies! g137665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1583.614596][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1583.624664][ C1] rcu: RCU grace-period kthread stack dump: [ 1583.631040][ C1] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 1583.642239][ C1] Call Trace: [ 1583.645678][ C1] [ 1583.648650][ C1] __schedule+0x1553/0x45a0 [ 1583.653295][ C1] ? asan.module_dtor+0x20/0x20 [ 1583.658373][ C1] ? enqueue_timer+0x23d/0x550 [ 1583.663250][ C1] ? __mod_timer+0x984/0xdb0 [ 1583.668093][ C1] schedule+0xbd/0x170 [ 1583.672469][ C1] schedule_timeout+0x188/0x2d0 [ 1583.677632][ C1] ? console_conditional_schedule+0x40/0x40 [ 1583.683666][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1583.689892][ C1] ? update_process_times+0x1b0/0x1b0 [ 1583.695422][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1583.701197][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 1583.707492][ C1] ? rcu_gp_init+0x1162/0x1560 [ 1583.712837][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1583.718056][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1583.724364][ C1] ? rcu_gp_init+0x1560/0x1560 [ 1583.729623][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 1583.734635][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1583.739916][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1583.745345][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 1583.750340][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1583.755670][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1583.760764][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1583.765960][ C1] kthread+0x2fa/0x390 [ 1583.770211][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1583.775635][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1583.780253][ C1] ret_from_fork+0x48/0x80 [ 1583.784694][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1583.789338][ C1] ret_from_fork_asm+0x11/0x20 [ 1583.794200][ C1] [ 1583.797411][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1583.803755][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1583.809645][ C0] NMI backtrace for cpu 0 [ 1583.809679][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1583.809695][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.809706][ C0] RIP: 0010:__lock_acquire+0x57b/0x7d40 [ 1583.809734][ C0] Code: 81 e3 ff 1f 00 00 41 c1 ef 03 41 81 e7 f8 03 00 00 49 8d bf 00 35 1c 91 be 08 00 00 00 e8 1d 29 77 00 48 0f a3 1d 25 00 b4 0f <73> 1f 48 69 c3 d0 00 00 00 48 8d 98 c0 b3 b2 90 48 ba 00 00 00 00 [ 1583.809749][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000057 [ 1583.809765][ C0] RAX: 0000000000000001 RBX: 0000000000000051 RCX: ffffffff816834d3 [ 1583.809777][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911c3508 [ 1583.809788][ C0] RBP: ffffc90000007cc8 R08: ffffffff911c350f R09: 1ffffffff22386a1 [ 1583.809801][ C0] R10: dffffc0000000000 R11: fffffbfff22386a2 R12: ffffffff8ce93f04 [ 1583.809814][ C0] R13: ffffffff8ce93440 R14: 0000000000000000 R15: 0000000000000008 [ 1583.809826][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1583.809840][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1583.809853][ C0] CR2: 00007f25ce0403d6 CR3: 0000000055b71000 CR4: 00000000003506f0 [ 1583.809868][ C0] Call Trace: [ 1583.809877][ C0] [ 1583.809895][ C0] ? __lock_acquire+0x1347/0x7d40 [ 1583.809917][ C0] ? verify_lock_unused+0x140/0x140 [ 1583.809947][ C0] lock_acquire+0x19e/0x420 [ 1583.809966][ C0] ? ktime_get+0x35/0x280 [ 1583.809986][ C0] ? sched_clock+0x3f/0x60 [ 1583.810010][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1583.810028][ C0] ? lockdep_softirqs_on+0x307/0x580 [ 1583.810051][ C0] ? ktime_get+0x35/0x280 [ 1583.810070][ C0] seqcount_lockdep_reader_access+0xd1/0x1d0 [ 1583.810091][ C0] ? ktime_get+0x35/0x280 [ 1583.810110][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 1583.810129][ C0] ? handle_softirqs+0x6cd/0x820 [ 1583.810148][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1583.810170][ C0] ? __irq_exit_rcu+0x115/0x190 [ 1583.810187][ C0] ktime_get+0x35/0x280 [ 1583.810206][ C0] ? __irq_exit_rcu+0x115/0x190 [ 1583.810223][ C0] tick_nohz_start_idle+0xf7/0x200 [ 1583.810251][ C0] __irq_exit_rcu+0x115/0x190 [ 1583.810268][ C0] ? irq_exit_rcu+0x20/0x20 [ 1583.810288][ C0] irq_exit_rcu+0x9/0x20 [ 1583.810303][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1583.810325][ C0] [ 1583.810331][ C0] [ 1583.810336][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1583.810359][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1583.810379][ C0] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1583.810400][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 1583.810414][ C0] RAX: 53ce95ac5bd57400 RBX: ffffffff8162a8c1 RCX: 53ce95ac5bd57400 [ 1583.810427][ C0] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 1583.810439][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1583.810452][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19c0fbc [ 1583.810465][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 1583.810479][ C0] ? do_idle+0x221/0x590 [ 1583.810505][ C0] default_idle+0x13/0x20 [ 1583.810525][ C0] default_idle_call+0x6c/0xa0 [ 1583.810547][ C0] do_idle+0x221/0x590 [ 1583.810569][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1583.810590][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1583.810617][ C0] cpu_startup_entry+0x43/0x60 [ 1583.810637][ C0] rest_init+0x2e2/0x300 [ 1583.810659][ C0] ? time_init+0x40/0x40 [ 1583.810674][ C0] arch_call_rest_init+0xe/0x10 [ 1583.810693][ C0] start_kernel+0x459/0x4e0 [ 1583.810712][ C0] x86_64_start_reservations+0x2a/0x30 [ 1583.810739][ C0] x86_64_start_kernel+0x60/0x60 [ 1583.810765][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1583.810795][ C0] [ 1586.375829][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.400113][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1586.463294][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.493348][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1587.019472][ T1801] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1587.059766][ T1801] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 SYZFAIL: failed to send rpc fd=3 want=6360 sent=0 n=-1 (errno 32: Broken pipe) [ 1587.229555][ T1801] usb 4-1: can't set config #1, error -71 [ 1587.319447][ T1801] usb 4-1: USB disconnect, device number 12 [ 1589.348025][T12215] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.676636][T12215] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.822235][T12215] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.928423][T12215] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.851800][T12215] hsr_slave_0: left promiscuous mode [ 1591.859029][T12215] hsr_slave_1: left promiscuous mode [ 1591.871929][T12215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.879949][T12215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.888299][T12215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.896515][T12215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.905063][T12215] bridge_slave_1: left allmulticast mode [ 1591.912342][T12215] bridge_slave_1: left promiscuous mode [ 1591.918407][T12215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.928882][T12215] bridge_slave_0: left allmulticast mode [ 1591.934905][T12215] bridge_slave_0: left promiscuous mode [ 1591.941136][T12215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.982147][T12215] team0: left allmulticast mode [ 1591.987419][T12215] team_slave_0: left allmulticast mode [ 1591.996946][T12215] team_slave_1: left allmulticast mode [ 1592.004286][T12215] team0: left promiscuous mode [ 1592.010368][T12215] team_slave_0: left promiscuous mode [ 1592.017336][T12215] team_slave_1: left promiscuous mode [ 1592.024614][T12215] veth1_macvtap: left promiscuous mode [ 1592.030585][T12215] veth0_macvtap: left promiscuous mode [ 1592.036769][T12215] veth1_vlan: left promiscuous mode [ 1592.042788][T12215] veth0_vlan: left promiscuous mode [ 1592.423349][T12215] bond5 (unregistering): Released all slaves