last executing test programs: 23m37.523040099s ago: executing program 0 (id=945): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) close(r0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x8, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() process_madvise(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)='\a', 0x1}], 0x1, 0x18, 0x0) openat$tun(0xffffff9c, 0x0, 0x300, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r5, &(0x7f0000000400)='PASV\r\n', 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) 23m37.255362006s ago: executing program 0 (id=947): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x121302, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') read$FUSE(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) 23m36.155833814s ago: executing program 0 (id=948): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x28, 0x0, 0x0, 0x2}) 23m35.882170481s ago: executing program 0 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800001, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ecfff4001000130720000000fedbdf25e0000001000000000000000000000000ac1414bb00000000000000baa1b38b195d09e82e0000000000000400ff4e210002400021000000deb82f1cc2", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 23m34.421288338s ago: executing program 0 (id=954): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x4e0, 0xa8, 0x288, 0xfeffffff, 0x1b0, 0x288, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @loopback, @multicast2, @port=0x4e22, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x1e8, 0x220, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e22, 0x4e22], [0x4e20, 0x4e22], 0x3, 0x5, 0xff3f, 0xbe}}, @common=@ah={{}, {[0x7, 0x1]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x6, @multicast2, @multicast2, @icmp_id=0x67, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x2, 0x80, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key=0x7}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x0, 'pim6reg0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @empty, @remote, @port=0x4e24, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffd0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4014) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x400970, 0x1f280, 0xfffffffe, 0x399}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0xfffe, {0xffffffff}}, 0xb) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x35, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260"], 0x104}}, 0x0) socket$igmp(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 23m31.162347491s ago: executing program 0 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800001, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ecfff4001000130720000000fedbdf25e0000001000000000000000000000000ac1414bb00000000000000baa1b38b195d09e82e0000000000000400ff4e210002400021000000deb82f1cc2", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 23m15.774122682s ago: executing program 32 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB='\b\x00'], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, 0x0, 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r4, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800001, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ecfff4001000130720000000fedbdf25e0000001000000000000000000000000ac1414bb00000000000000baa1b38b195d09e82e0000000000000400ff4e210002400021000000deb82f1cc2", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r5, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 22.933562797s ago: executing program 2 (id=3437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vcsa(0x0, 0x7, 0x80280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 22.297616181s ago: executing program 2 (id=3438): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r4, 0xffffffffffffffff, 0xee01) shmget(0x2, 0x3000, 0x78000000, &(0x7f00003f2000/0x3000)=nil) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x20000014}) 17.283762008s ago: executing program 2 (id=3443): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 13.083889096s ago: executing program 2 (id=3449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f63"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r5, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 11.230489319s ago: executing program 2 (id=3450): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r4, 0xffffffffffffffff, 0xee01) shmget(0x2, 0x3000, 0x78000000, &(0x7f00003f2000/0x3000)=nil) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x20000014}) 8.831556045s ago: executing program 3 (id=3456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0}]) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000600)=0x1) 8.075276782s ago: executing program 3 (id=3457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f63"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r5, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 7.559215184s ago: executing program 1 (id=3459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000001500)=ANY=[@ANYBLOB="34140000", @ANYRES16=r1], 0x1434}, 0x1, 0x0, 0x0, 0x80}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) 7.221041092s ago: executing program 1 (id=3460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="01002c00000000dbdf25010000001400020077673000000000000000000000000000080005000100000088000880840000805c0009801c000080060001000200000008000200ac14141f05000300000000001c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac1414aa05000300030000000200008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000240004802000018007000100637400001400028034d100000000000c080002400000000a140000ffff00000000000000000000230200000a108ad3d1c3c94108b8024a7d19f8de"], 0x78}}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f0000000200), 0x4) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) unshare(0xe040400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000001040)=ANY=[@ANYBLOB="9feb010018000000894963dcb53ec7b0d6000000000c0000000c00000002000000000000000000000b000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x10) clock_gettime(0x17, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x6, 'ip6_vti0\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0800000030008829"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r10, 0x0, 0x82, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x5, 0x4, 0x1, 0x7fff, 0x100000005]}, &(0x7f0000000080)=0xd) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x5, 0x80805, 0x7ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.182349909s ago: executing program 3 (id=3461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vcsa(0x0, 0x7, 0x80280) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x4000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 4.774381079s ago: executing program 1 (id=3462): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_usb_connect(0x4, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000240)={0x1, [0x86, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x100, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x65b, 0x0, 0x1, 0x1, 0x1}, {0x4000009, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x10001ff, 0x1, 0x1, 0x0, 0x1}, {0x5e1c80e2, 0x8004, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x7fffffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x44844) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x3, "750538d1ee602ec4802a04ea7cfcd151bb2cd9893bc33f808a8336d9bd3517076db9ad1f6a124d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1a}, 0x58) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r0, 0x0, 0x4884) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7d, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) 4.570820984s ago: executing program 4 (id=3431): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4048091) sendmsg$alg(0xffffffffffffffff, 0x0, 0x24044010) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x12, 0x0) 3.605372056s ago: executing program 1 (id=3463): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.479714559s ago: executing program 1 (id=3464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0}]) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000600)=0x1) 2.292563427s ago: executing program 4 (id=3465): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002800)="c954", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)='xew', 0x3}], 0x1, &(0x7f0000001180)=ANY=[], 0x168}}], 0x5, 0x40488c1) 2.234775188s ago: executing program 1 (id=3466): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x86, 0x1, 0x1}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = accept4(r1, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x80, 0x80800) sendmsg$802154_raw(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="bfbeeb1efae03655f8ea8f1df2bb52f45bcca3dc1ca4374ff754318d8bb5302185e49da74dbf6b787c70bb741285d67cb3a84c493f5126ec9b8f5204de87fc4aff8b5a7bd39557fffc13386dfcdb28e671c25699db7c4ee790", 0x59}, 0x1, 0x0, 0x0, 0x48080}, 0x4) r4 = accept4(r1, 0x0, 0x0, 0x0) close(r4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af165", 0x54}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "0400d8c7"}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r7, r6, 0x0, 0x10002) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f0000000480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008800000000000000c702000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09200000000000550901000000008095000000ff7f00000000000000000000b7020000020000008500000085000000b7000000000500009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7f, 0x3fb8}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r9) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0xffffffff, {{0xa, 0x4e20, 0x8, @empty, 0x6}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x40a, @private2, 0x10000}}]}, 0x110) 2.047855722s ago: executing program 4 (id=3467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000001500)=ANY=[@ANYBLOB="34140000", @ANYRES16=r1], 0x1434}, 0x1, 0x0, 0x0, 0x80}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) 1.987814124s ago: executing program 2 (id=3468): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x64) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002780)={{r5}, r6, 0x4, @inherit={0x68, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000004000000000000005b0a0000000000000400000000007f0009000000000000000100000000000000f9ffffffffffffff0800000000000000050000000000000002000000000000000b0000000000000006000000000000000400000000000000"]}, @name="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"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x19, 0x0, 0xb161, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000001200), 0x0, 0x200000000000, 0x20000000000001bc}}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000180001000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d790000007131a38e60e251e4a5c5bb62b99eede5a1a5fa9f07116b96e9dad250bc3bc2410d6da3b2fbaef28a8976eb55aeaae2f0fe1b59de9f334146692693425ca7f9d383d55e696685f4d87f386752a73882f14513c92ed36c233cd25aa40fd186e06e8dbf721be22dfe929eb30b380736e35adb45dc7c965c6ec798b76b89"], 0x40}}, 0x0) 1.849151277s ago: executing program 4 (id=3469): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x1, r1}, 0xc) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000100)="0a00000000000000fe8000000000000000000000000000bb000000000a00000000000000ff0e000000000000000000000000123400000000000000000200"/92, 0x5c) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e000000000000000000000000123400"/70], 0x0) 1.377487418s ago: executing program 3 (id=3470): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 868.62877ms ago: executing program 4 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) syz_usb_connect(0x4, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000240)={0x1, [0x86, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x100, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x65b, 0x0, 0x1, 0x1, 0x1}, {0x4000009, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x10001ff, 0x1, 0x1, 0x0, 0x1}, {0x5e1c80e2, 0x8004, 0x1, 0x1, 0x1, 0x1}, {0x40, 0x7fffffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x44844) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1f}, 0x20) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x3, "750538d1ee602ec4802a04ea7cfcd151bb2cd9893bc33f808a8336d9bd3517076db9ad1f6a124d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1a}, 0x58) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r0, 0x0, 0x4884) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7d, 0x0, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) 783.730382ms ago: executing program 3 (id=3472): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 577.454686ms ago: executing program 3 (id=3473): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4048091) sendmsg$alg(0xffffffffffffffff, 0x0, 0x24044010) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x12, 0x0) 0s ago: executing program 4 (id=3474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, 0xffffffffffffffff, 0x0}]) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x4, 0x2) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000600)=0x1) kernel console output (not intermixed with test programs): ted capacity change from 0 to 32768 [ 1447.795189][T14326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2378 (14326) [ 1447.914738][T14326] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1447.979783][T14326] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1448.057227][T14326] BTRFS info (device loop2): setting nodatasum [ 1448.074279][T14326] BTRFS info (device loop2): force zlib compression, level 3 [ 1448.090683][T14326] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1448.134105][T14326] BTRFS info (device loop2): use lzo compression, level 0 [ 1448.150496][T14326] BTRFS info (device loop2): turning on flush-on-commit [ 1448.175734][T14326] BTRFS info (device loop2): enabling auto defrag [ 1448.232936][T14326] BTRFS info (device loop2): max_inline at 4096 [ 1448.240575][T14326] BTRFS info (device loop2): using free space tree [ 1448.274680][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1448.302050][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1448.322561][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1448.369203][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1448.406854][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1448.589614][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1448.708801][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1448.867668][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1449.040555][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1449.228973][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1449.395633][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1449.418673][T14257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1449.437209][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1449.439721][T14326] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1449.500545][T14326] BTRFS error (device loop2): open_ctree failed: -12 [ 1449.568698][T14257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1449.646727][T14257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1451.293316][T14257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1452.180853][T14257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.240384][T14257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.269187][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.276531][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.353719][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.360995][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.704830][T14367] loop2: detected capacity change from 0 to 40427 [ 1452.714852][T14367] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 1452.724045][T14367] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 1452.785465][T14367] F2FS-fs (loop2): invalid crc value [ 1452.813491][T14367] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1452.859711][T14367] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 1452.931970][T14367] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1453.089481][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.146900][T14257] veth0_vlan: entered promiscuous mode [ 1453.174281][T14257] veth1_vlan: entered promiscuous mode [ 1453.279815][T14383] CIFS: Attempting to mount //127.0.0.1/share [ 1455.675686][T14257] veth0_macvtap: entered promiscuous mode [ 1455.685649][T14383] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1455.706737][T14383] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1455.717322][T14257] veth1_macvtap: entered promiscuous mode [ 1455.836618][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1455.863765][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.893356][T14257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.914827][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.952351][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.972914][T14257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.997841][T14257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.022323][T14257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.034025][T14257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1456.062454][T14257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.828262][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.937751][T14400] loop2: detected capacity change from 0 to 256 [ 1459.955980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.047414][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.071676][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.371738][ T23] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1474.291323][ T23] usb 4-1: device descriptor read/all, error -71 [ 1474.323039][T14450] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1476.357642][T14461] hub 8-0:1.0: USB hub found [ 1476.363405][T14461] hub 8-0:1.0: 1 port detected [ 1484.665138][T14490] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1487.056588][T13900] Bluetooth: hci4: command 0x0406 tx timeout [ 1489.906646][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.913200][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.670273][T14524] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1491.441399][ T23] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1493.337526][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1494.482695][ T23] usb 2-1: device descriptor read/all, error -71 [ 1496.657385][T14554] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1500.921428][ T9679] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1501.121801][ T9679] usb 2-1: Using ep0 maxpacket: 8 [ 1501.149467][ T9679] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1501.298358][ T9679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1501.472273][ T9679] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1501.618553][ T9679] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1501.835535][ T9679] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1502.015921][ T9679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.274130][ T9679] usbtmc 2-1:16.0: bulk endpoints not found [ 1504.073925][T14583] loop4: detected capacity change from 0 to 128 [ 1504.113880][T14361] usb 2-1: USB disconnect, device number 50 [ 1504.135241][T13900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1504.149213][T13900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1504.159412][T13900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1504.170268][T13900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1504.203008][T13900] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1504.220770][T13900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1504.236978][T14582] syz.4.2442: attempt to access beyond end of device [ 1504.236978][T14582] loop4: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 1504.396166][T14591] hub 8-0:1.0: USB hub found [ 1504.403088][T14591] hub 8-0:1.0: 1 port detected [ 1506.321982][T13900] Bluetooth: hci1: command tx timeout [ 1506.390668][T14594] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1507.707943][T14581] chnl_net:caif_netlink_parms(): no params data found [ 1507.787464][T14606] loop1: detected capacity change from 0 to 512 [ 1507.796679][T14606] EXT4-fs: Ignoring removed nobh option [ 1507.814568][T14606] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1507.821630][T14606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1507.860969][T14606] EXT4-fs (loop1): 1 truncate cleaned up [ 1507.868496][T14606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.946274][T13899] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.067769][T14581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.092822][T14581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.111638][T14581] bridge_slave_0: entered allmulticast mode [ 1508.123147][T14581] bridge_slave_0: entered promiscuous mode [ 1508.143891][T14581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.161418][T14581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.168746][T14581] bridge_slave_1: entered allmulticast mode [ 1508.193297][T14581] bridge_slave_1: entered promiscuous mode [ 1508.283701][T14581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.307321][T14581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.351712][ T23] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1508.401943][T13900] Bluetooth: hci1: command tx timeout [ 1508.439391][T14581] team0: Port device team_slave_0 added [ 1508.465239][T14581] team0: Port device team_slave_1 added [ 1508.545126][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1508.553159][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1508.567133][T14581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.574647][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1508.581747][T14581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.624373][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1508.643977][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1508.654641][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.668135][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1508.677635][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.691003][T14581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.710691][ T23] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1508.732130][T14581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.739166][T14581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.791490][T14581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.966564][T14581] hsr_slave_0: entered promiscuous mode [ 1508.991802][T14581] hsr_slave_1: entered promiscuous mode [ 1509.000763][T14581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1509.013507][T14581] Cannot create hsr debugfs directory [ 1509.263950][T14626] hub 8-0:1.0: USB hub found [ 1509.270036][T14626] hub 8-0:1.0: 1 port detected [ 1509.347018][T14581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.350204][T14629] loop3: detected capacity change from 0 to 128 [ 1510.481752][T13900] Bluetooth: hci1: command tx timeout [ 1511.083200][T14581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.342710][ T1213] usb 2-1: USB disconnect, device number 51 [ 1512.561404][T13900] Bluetooth: hci1: command tx timeout [ 1512.650365][T14581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.601669][T14581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.793262][T14656] hub 8-0:1.0: USB hub found [ 1514.826480][T14656] hub 8-0:1.0: 1 port detected [ 1514.996262][T14581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1515.037252][T14581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1515.069514][T14581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1515.741943][T14581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1515.858792][T14664] loop4: detected capacity change from 0 to 128 [ 1516.005791][T14664] syz.4.2463: attempt to access beyond end of device [ 1516.005791][T14664] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1516.396748][T14581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.176644][T14670] loop4: detected capacity change from 0 to 1024 [ 1517.205642][T14581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.218221][T14670] EXT4-fs: quotafile must be on filesystem root [ 1517.562258][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.569532][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.311910][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.319186][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1522.695000][T14698] hub 8-0:1.0: USB hub found [ 1522.701971][T14698] hub 8-0:1.0: 1 port detected [ 1523.338560][T14581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.503678][T14581] veth0_vlan: entered promiscuous mode [ 1523.528351][T14581] veth1_vlan: entered promiscuous mode [ 1523.605000][T14581] veth0_macvtap: entered promiscuous mode [ 1523.652981][T14581] veth1_macvtap: entered promiscuous mode [ 1523.711976][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1523.749075][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.759398][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1523.774375][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.786279][T14581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.811600][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.831807][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.862158][T14581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1523.887261][T14581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.913106][T14581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.946718][T14581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.971323][T14581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.991908][T14581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.000712][T14581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.033536][T14703] loop1: detected capacity change from 0 to 1024 [ 1524.048680][T14703] EXT4-fs: quotafile must be on filesystem root [ 1524.324388][T14706] loop4: detected capacity change from 0 to 1024 [ 1525.175282][ T9680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.232621][ T9680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.311376][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.333753][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.370328][T14716] loop3: detected capacity change from 0 to 128 [ 1525.449494][T14716] syz.3.2471: attempt to access beyond end of device [ 1525.449494][T14716] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1526.793630][T14742] hub 8-0:1.0: USB hub found [ 1526.799527][T14742] hub 8-0:1.0: 1 port detected [ 1527.096929][T14738] loop4: detected capacity change from 0 to 1024 [ 1527.121911][ T9679] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1527.223777][T14738] EXT4-fs: quotafile must be on filesystem root [ 1527.450860][ T9679] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1527.768247][ T9679] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1527.779599][ T9679] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1527.789986][ T9679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1527.802941][ T9679] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1527.819653][ T9679] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1527.846460][ T9679] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1528.431301][ T9679] usb 4-1: Product: syz [ 1528.435853][ T9679] usb 4-1: Manufacturer: syz [ 1528.478732][ T9679] cdc_wdm 4-1:1.0: skipping garbage [ 1528.496595][ T9679] cdc_wdm 4-1:1.0: skipping garbage [ 1528.515854][ T9679] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1528.525171][ T9679] cdc_wdm 4-1:1.0: Unknown control protocol [ 1529.086377][T11459] usb 4-1: USB disconnect, device number 30 [ 1529.844096][T14755] hub 8-0:1.0: USB hub found [ 1529.849114][T14755] hub 8-0:1.0: 1 port detected [ 1532.523210][T14774] loop3: detected capacity change from 0 to 1024 [ 1532.531053][T14774] EXT4-fs: quotafile must be on filesystem root [ 1532.551931][T14361] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1532.761477][T11459] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1532.789288][T14778] hub 8-0:1.0: USB hub found [ 1532.794988][T14778] hub 8-0:1.0: 1 port detected [ 1533.064777][T11459] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1533.137576][T11459] usb 3-1: config 0 has no interface number 0 [ 1533.230021][T11459] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1533.308348][T11459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.384860][T11459] usb 3-1: Product: syz [ 1533.435332][T11459] usb 3-1: Manufacturer: syz [ 1533.490290][T11459] usb 3-1: SerialNumber: syz [ 1533.596349][T11459] usb 3-1: config 0 descriptor?? [ 1533.681542][T14361] usb 2-1: Using ep0 maxpacket: 8 [ 1533.688859][T14361] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1533.702487][T14361] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1533.714889][T14361] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1533.727550][T14361] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1533.751060][T14361] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1533.769489][T14361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.889435][T11459] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1534.429286][T14361] usb 2-1: usb_control_msg returned -32 [ 1534.537749][T14361] usbtmc 2-1:16.0: can't read capabilities [ 1534.966407][T14361] usb 2-1: USB disconnect, device number 52 [ 1536.642172][T11459] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1536.747412][T11459] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1536.761455][T11459] usb 3-1: media controller created [ 1536.790541][T11459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1536.858119][T11459] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1536.904388][T11459] usb 3-1: USB disconnect, device number 42 [ 1537.121123][T14789] loop1: detected capacity change from 0 to 1024 [ 1541.342611][T14807] loop2: detected capacity change from 0 to 8192 [ 1541.726825][T14709] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1542.431287][T14709] usb 5-1: Using ep0 maxpacket: 8 [ 1542.637190][T14709] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1542.899096][T14709] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1543.088987][T14709] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1543.239407][T14709] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.408050][T14709] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1543.524278][T14709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.313077][T14709] usb 5-1: usb_control_msg returned -32 [ 1544.397981][T14709] usbtmc 5-1:16.0: can't read capabilities [ 1544.591576][T14709] usb 5-1: USB disconnect, device number 9 [ 1545.989441][T14834] loop4: detected capacity change from 0 to 512 [ 1546.160778][T14834] EXT4-fs: Ignoring removed nobh option [ 1546.224164][T14834] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1546.231025][T14834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1546.289068][T14834] EXT4-fs (loop4): 1 truncate cleaned up [ 1546.314984][T14834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1546.535566][ T9314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.307661][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.341660][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.499086][T14874] loop1: detected capacity change from 0 to 512 [ 1552.581608][T14874] EXT4-fs: Ignoring removed nobh option [ 1552.677091][T14874] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1552.728159][T14874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1552.809899][T14874] EXT4-fs (loop1): 1 truncate cleaned up [ 1552.823187][T14874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1552.897908][T13899] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.751419][ T1197] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1559.285821][ T9316] Bluetooth: hci3: command 0x0406 tx timeout [ 1559.564207][T14905] loop4: detected capacity change from 0 to 1024 [ 1559.574633][ T1197] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1559.588008][T14905] EXT4-fs: quotafile must be on filesystem root [ 1559.594739][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1559.611292][ T1197] usb 3-1: Product: syz [ 1560.432414][ T1197] usb 3-1: SerialNumber: syz [ 1560.439841][ T1197] usb 3-1: config 0 descriptor?? [ 1560.661718][ T1197] hso 3-1:0.0: Can't find BULK IN endpoint [ 1560.872664][T14361] usb 3-1: USB disconnect, device number 43 [ 1560.890023][T14919] loop3: detected capacity change from 0 to 256 [ 1567.507370][T14943] loop3: detected capacity change from 0 to 1024 [ 1567.538864][T14943] EXT4-fs: quotafile must be on filesystem root [ 1570.301295][ T1213] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1571.251275][ T1213] usb 5-1: Using ep0 maxpacket: 8 [ 1571.393783][ T1213] usb 5-1: device descriptor read/all, error -71 [ 1573.334653][T14976] loop1: detected capacity change from 0 to 256 [ 1575.650798][T14987] loop4: detected capacity change from 0 to 1024 [ 1575.683035][T14987] EXT4-fs: quotafile must be on filesystem root [ 1576.002184][T14989] loop1: detected capacity change from 0 to 8192 [ 1577.492732][T15009] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2555'. [ 1578.638308][T15018] loop2: detected capacity change from 0 to 1024 [ 1578.751532][T11459] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1580.501612][T11459] usb 4-1: Using ep0 maxpacket: 8 [ 1580.598138][T11459] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1580.716696][T11459] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1580.796443][T11459] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1580.879134][T11459] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1580.984284][T11459] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1581.060128][T11459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.619470][T15027] loop4: detected capacity change from 0 to 2048 [ 1582.627142][T11459] usb 4-1: usb_control_msg returned -71 [ 1582.693992][T11459] usbtmc 4-1:16.0: can't read capabilities [ 1582.785832][T11459] usb 4-1: USB disconnect, device number 31 [ 1582.931859][T15033] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1583.039992][T15032] loop1: detected capacity change from 0 to 8192 [ 1583.177923][T15027] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 1583.543420][T15027] Remounting filesystem read-only [ 1585.334445][T15045] loop2: detected capacity change from 0 to 256 [ 1585.407914][T15045] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 1585.488901][T15047] loop4: detected capacity change from 0 to 256 [ 1591.238804][T15076] loop2: detected capacity change from 0 to 8192 [ 1594.258804][T15094] loop4: detected capacity change from 0 to 32768 [ 1594.274388][T15094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2584 (15094) [ 1594.302208][T15094] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1594.315353][T15094] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1594.326710][T15094] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1594.335327][T15094] BTRFS info (device loop4): turning on flush-on-commit [ 1594.353257][T15094] BTRFS info (device loop4): force clearing of disk cache [ 1594.368046][T15094] BTRFS info (device loop4): turning on sync discard [ 1594.381387][T15094] BTRFS info (device loop4): turning off barriers [ 1594.392353][T15094] BTRFS info (device loop4): use no compression [ 1594.403213][T15094] BTRFS info (device loop4): disabling free space tree [ 1594.416889][T15094] BTRFS info (device loop4): enabling ssd optimizations [ 1594.426418][T15094] BTRFS info (device loop4): using spread ssd allocation scheme [ 1594.516310][T15094] BTRFS info (device loop4): rebuilding free space tree [ 1595.099141][T15094] BTRFS info (device loop4): disabling free space tree [ 1595.212499][T15094] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1595.297559][T15094] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1597.230808][ T9314] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1606.821085][T15166] loop4: detected capacity change from 0 to 8 [ 1607.152290][T15159] loop2: detected capacity change from 0 to 8192 [ 1607.409676][T15166] SQUASHFS error: Failed to read block 0x8f: -5 [ 1607.591360][ T28] audit: type=1800 audit(1791061706.622:161): pid=15166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2604" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1608.844209][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1611.011482][ T5787] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1611.221255][ T5787] usb 2-1: Using ep0 maxpacket: 32 [ 1612.231251][ T5787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.725433][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.402581][ T5787] usb 2-1: config 0 has no interfaces? [ 1613.420717][ T5787] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1613.428730][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.436309][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1613.457500][ T5787] usb 2-1: Product: syz [ 1613.461936][ T5787] usb 2-1: Manufacturer: syz [ 1613.466670][ T5787] usb 2-1: SerialNumber: syz [ 1613.480795][ T5787] usb 2-1: config 0 descriptor?? [ 1613.749133][ T5787] usb 2-1: USB disconnect, device number 53 [ 1614.141575][ T789] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1615.063554][ T789] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1615.079542][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.095806][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1615.139929][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1615.183566][ T789] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1615.204486][ T789] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1615.224820][ T789] usb 3-1: Product: syz [ 1615.245234][ T789] usb 3-1: Manufacturer: syz [ 1615.277668][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 1615.291340][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 1615.296712][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 1615.302412][ T789] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 1615.310306][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2617'. [ 1615.487513][ T789] usb 3-1: USB disconnect, device number 44 [ 1620.831621][ T1213] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1621.218922][ T1213] usb 2-1: Using ep0 maxpacket: 32 [ 1623.913096][T15226] loop4: detected capacity change from 0 to 8192 [ 1623.991444][ T1213] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1623.999116][ T1213] usb 2-1: can't read configurations, error -71 [ 1624.461348][ T1213] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1624.967279][ T1213] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1624.990139][ T1213] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.011101][ T1213] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1625.028933][ T1213] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1625.139264][T15251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2628'. [ 1625.220610][ T1213] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1625.241262][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1625.250397][ T1213] usb 2-1: Product: syz [ 1625.273957][ T1213] usb 2-1: Manufacturer: syz [ 1625.297018][ T1213] cdc_wdm 2-1:1.0: skipping garbage [ 1625.311700][ T1213] cdc_wdm 2-1:1.0: skipping garbage [ 1625.317135][ T1213] cdc_wdm 2-1:1.0: skipping garbage [ 1625.329650][ T1213] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1625.533488][ T23] usb 2-1: USB disconnect, device number 55 [ 1625.741550][ T1213] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1628.382376][ T1213] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1628.527487][ T1213] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1628.623155][ T1213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1628.668251][ T1213] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1628.730486][ T1213] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1628.796175][ T1213] usb 5-1: string descriptor 0 read error: -71 [ 1628.805888][ T1213] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1628.843520][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1628.887007][ T1213] usb 5-1: can't set config #1, error -71 [ 1628.903175][ T1213] usb 5-1: USB disconnect, device number 12 [ 1630.245363][ T9316] Bluetooth: hci1: command 0x0406 tx timeout [ 1631.457841][T15270] loop4: detected capacity change from 0 to 8192 [ 1632.859091][T15289] hub 8-0:1.0: USB hub found [ 1632.864148][T15289] hub 8-0:1.0: 1 port detected [ 1632.894274][T15290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2640'. [ 1636.344319][T15298] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 1636.961450][ T23] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1637.213124][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1639.631288][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1639.652050][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1639.671789][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1639.701233][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1639.743022][ T23] usb 4-1: string descriptor 0 read error: -71 [ 1639.749447][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1639.770792][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1639.808769][ T23] usb 4-1: can't set config #1, error -71 [ 1639.833374][ T23] usb 4-1: USB disconnect, device number 32 [ 1640.204196][T15322] loop3: detected capacity change from 0 to 8192 [ 1640.237131][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 1646.948279][ T5787] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1647.250107][ T5787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1647.302128][ T5787] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1647.353583][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1647.386228][T15362] loop4: detected capacity change from 0 to 1024 [ 1647.393489][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1647.439754][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1647.468449][ T5787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1647.481410][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1647.489842][ T5787] usb 4-1: Product: syz [ 1647.494342][ T5787] usb 4-1: Manufacturer: syz [ 1647.623165][ T5787] cdc_wdm 4-1:1.0: skipping garbage [ 1647.628886][ T5787] cdc_wdm 4-1:1.0: skipping garbage [ 1647.675482][ T5787] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1647.706380][ T5787] cdc_wdm 4-1:1.0: Unknown control protocol [ 1647.879433][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.886442][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.893157][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.899826][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.906647][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.913319][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.921215][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.927889][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.934503][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.941145][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.947752][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.954404][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.961076][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.967730][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.974775][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.981431][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1647.989286][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1647.995947][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1648.003003][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1648.009697][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1648.016537][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1648.025478][ T5787] usb 4-1: USB disconnect, device number 33 [ 1648.152927][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'. [ 1648.245475][T15368] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 1655.639900][T15399] loop1: detected capacity change from 0 to 1024 [ 1655.647858][T15399] EXT4-fs: quotafile must be on filesystem root [ 1657.352849][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 1662.063402][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 1662.091403][ T5787] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1662.294772][ T5787] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1662.329151][ T5787] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1662.373592][ T5787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1662.416014][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1662.459861][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1662.510323][ T5787] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1662.535901][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1662.569598][ T5787] usb 3-1: Product: syz [ 1662.592004][ T5787] usb 3-1: Manufacturer: syz [ 1662.651945][ T5787] cdc_wdm 3-1:1.0: skipping garbage [ 1662.673939][ T5787] cdc_wdm 3-1:1.0: skipping garbage [ 1662.709176][ T5787] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1662.738254][ T5787] cdc_wdm 3-1:1.0: Unknown control protocol [ 1662.866496][ T5787] usb 3-1: USB disconnect, device number 45 [ 1664.284326][T15450] loop2: detected capacity change from 0 to 1024 [ 1664.735571][T15455] loop3: detected capacity change from 0 to 8 [ 1667.076857][T15468] hub 8-0:1.0: USB hub found [ 1667.082176][T15468] hub 8-0:1.0: 1 port detected [ 1667.849290][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2694'. [ 1668.474988][T15486] loop4: detected capacity change from 0 to 256 [ 1669.021246][T15488] CIFS: Attempting to mount //127.0.0.1/share [ 1670.400102][T15488] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1670.408954][T15488] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1671.255084][T15497] loop1: detected capacity change from 0 to 131072 [ 1671.770951][T15497] F2FS-fs (loop1): Test dummy encryption mode enabled [ 1671.801443][T15497] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1671.849526][T15497] F2FS-fs (loop1): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 1671.859116][T15497] F2FS-fs (loop1): Failed to read root inode [ 1672.181368][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1672.363354][ T23] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1672.375917][ T23] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1672.387066][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1672.400303][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1672.416329][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1672.430732][ T23] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1672.449179][ T23] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1672.467444][ T23] usb 4-1: Product: syz [ 1672.472796][ T23] usb 4-1: Manufacturer: syz [ 1672.494343][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 1672.499636][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 1672.511836][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1672.517996][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 1672.771496][ C1] wdm_int_callback: 2 callbacks suppressed [ 1672.771518][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1672.772755][T14960] usb 4-1: USB disconnect, device number 34 [ 1672.777389][ C1] wdm_int_callback: 2 callbacks suppressed [ 1672.777407][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1672.801927][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1673.686014][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 1674.029817][T15522] CIFS: Attempting to mount //127.0.0.1/share [ 1674.084610][T15524] loop4: detected capacity change from 0 to 512 [ 1674.167440][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.175851][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.277078][T15527] loop4: detected capacity change from 0 to 256 [ 1674.320653][T15527] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 1676.464135][T15522] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1676.471746][T15522] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1678.096223][T15547] loop1: detected capacity change from 0 to 256 [ 1678.176647][T15547] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 1679.074571][T15557] CIFS: Attempting to mount //127.0.0.1/share [ 1679.241445][T14960] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1680.150360][T15557] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1680.173910][T14960] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1680.182819][T14960] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1680.194628][T14960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1680.222551][T14960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1680.246034][T14960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1680.259610][T14960] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1680.272040][T14960] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1680.280098][T14960] usb 4-1: Product: syz [ 1680.286670][T14960] usb 4-1: Manufacturer: syz [ 1680.307661][T14960] cdc_wdm 4-1:1.0: skipping garbage [ 1680.327776][T14960] cdc_wdm 4-1:1.0: skipping garbage [ 1680.356461][T14960] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1680.371772][T14960] cdc_wdm 4-1:1.0: Unknown control protocol [ 1680.655265][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1680.658838][ T5787] usb 4-1: USB disconnect, device number 35 [ 1680.661942][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1680.661962][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1681.608467][T15577] loop1: detected capacity change from 0 to 1024 [ 1681.929554][T15579] loop2: detected capacity change from 0 to 256 [ 1682.000135][T15579] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 1682.346571][T15587] CIFS: Attempting to mount //127.0.0.1/share [ 1683.304828][T15587] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1684.728828][T15610] hub 8-0:1.0: USB hub found [ 1684.752608][T15610] hub 8-0:1.0: 1 port detected [ 1684.891272][T11459] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1685.444419][T11459] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1687.962662][T11459] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1688.736180][T11459] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1688.745346][T11459] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1688.756497][T11459] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1688.823651][T11459] usb 3-1: string descriptor 0 read error: -71 [ 1688.830007][T11459] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1688.851513][T11459] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1688.883394][T11459] usb 3-1: can't set config #1, error -71 [ 1688.901436][T11459] usb 3-1: USB disconnect, device number 46 [ 1689.063823][T15624] loop2: detected capacity change from 0 to 1024 [ 1689.092748][T15624] EXT4-fs: quotafile must be on filesystem root [ 1691.040786][T15633] CIFS: Attempting to mount //127.0.0.1/share [ 1691.744762][T15633] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1691.770810][T15633] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1694.145169][ T9679] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1697.126036][T15658] loop1: detected capacity change from 0 to 256 [ 1698.382448][T15666] hub 8-0:1.0: USB hub found [ 1698.387448][T15666] hub 8-0:1.0: 1 port detected [ 1699.914377][T15674] CIFS: Attempting to mount //127.0.0.1/share [ 1700.675473][T15674] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1700.683149][T15674] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1701.009129][T15681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1705.413437][T15703] loop1: detected capacity change from 0 to 1024 [ 1705.472896][T15703] EXT4-fs: quotafile must be on filesystem root [ 1705.561563][T14960] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1705.777449][T14960] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1705.811329][T14960] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1707.416142][T14960] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1707.504748][T14960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1707.738420][T15710] hub 8-0:1.0: USB hub found [ 1707.743370][T15710] hub 8-0:1.0: 1 port detected [ 1707.948049][T14960] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1707.976810][T14960] usb 4-1: string descriptor 0 read error: -71 [ 1707.992436][T14960] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1708.023063][T14960] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1708.084972][T14960] usb 4-1: can't set config #1, error -71 [ 1708.187629][T14960] usb 4-1: USB disconnect, device number 36 [ 1708.450881][T15719] CIFS: Attempting to mount //127.0.0.1/share [ 1710.223979][T15719] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1711.787956][T15721] loop2: detected capacity change from 0 to 32768 [ 1712.108997][T15734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (15734) [ 1715.168009][T15745] hub 8-0:1.0: USB hub found [ 1715.173156][T15745] hub 8-0:1.0: 1 port detected [ 1715.595320][T15751] loop2: detected capacity change from 0 to 1024 [ 1715.613622][T15751] EXT4-fs: quotafile must be on filesystem root [ 1716.012318][T15757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2773'. [ 1716.821368][T15759] CIFS: Attempting to mount //127.0.0.1/share [ 1716.994820][T15759] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1717.036618][T15759] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1719.340979][T15783] hub 8-0:1.0: USB hub found [ 1719.346131][T15783] hub 8-0:1.0: 1 port detected [ 1720.852422][T15786] loop3: detected capacity change from 0 to 1024 [ 1720.860135][T15786] EXT4-fs: quotafile must be on filesystem root [ 1720.982177][T15791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2792'. [ 1722.012752][T15797] CIFS: Attempting to mount //127.0.0.1/share [ 1722.139376][T15813] loop4: detected capacity change from 0 to 1024 [ 1722.152304][T15813] EXT4-fs: quotafile must be on filesystem root [ 1722.361336][T15797] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1724.249333][T15797] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1725.704219][T15831] loop1: detected capacity change from 0 to 1024 [ 1725.712602][T15831] EXT4-fs: quotafile must be on filesystem root [ 1725.762097][T15784] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1730.704007][T15852] CIFS: Attempting to mount //127.0.0.1/share [ 1730.859989][T15852] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1730.867793][T15852] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1730.931211][ T789] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1731.141486][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 1731.182627][ T789] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1731.214132][ T789] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1731.251278][ T789] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1731.283648][ T789] usb 2-1: Product: syz [ 1731.287858][ T789] usb 2-1: Manufacturer: syz [ 1731.302690][ T789] usb 2-1: SerialNumber: syz [ 1731.334816][ T789] usb 2-1: config 0 descriptor?? [ 1731.349630][T15854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1731.816407][T15867] loop4: detected capacity change from 0 to 1024 [ 1731.879538][T15867] EXT4-fs: quotafile must be on filesystem root [ 1733.725385][T14960] usb 2-1: USB disconnect, device number 56 [ 1734.941192][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1735.330858][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1735.406573][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.434460][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1735.467746][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.500540][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1735.512643][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1735.526774][ T8] usb 5-1: Product: syz [ 1735.544965][ T8] usb 5-1: Manufacturer: syz [ 1735.579818][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1735.589849][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1735.606707][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.615943][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.628462][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1735.652599][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 1737.953137][T15888] CIFS: Attempting to mount //127.0.0.1/share [ 1738.430677][T15891] loop1: detected capacity change from 0 to 40427 [ 1738.466860][T15891] F2FS-fs (loop1): invalid crc value [ 1738.497058][T15891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1738.506523][T15888] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1738.554865][T15891] F2FS-fs (loop1): Start checkpoint disabled! [ 1738.585372][T15891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1738.756811][T15891] syz.1.2826: attempt to access beyond end of device [ 1738.756811][T15891] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1739.131356][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.131356][T15895] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1739.148875][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.148875][T15895] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1739.165641][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.165641][T15895] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1739.179918][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.179918][T15895] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1739.194249][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.194249][T15895] loop1: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 1739.209718][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.209718][T15895] loop1: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 1739.226433][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.226433][T15895] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 1739.240720][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.240720][T15895] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 1739.255495][T15895] syz.1.2826: attempt to access beyond end of device [ 1739.255495][T15895] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1740.276863][ T8] usb 5-1: USB disconnect, device number 13 [ 1740.411301][ T9680] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1740.419036][ T9680] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1742.831295][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1743.274284][ T8] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1743.301191][ T8] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.341352][ T8] usb 4-1: config 220 has no interface number 2 [ 1743.366053][ T8] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1743.430575][ T8] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1743.461397][ T8] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1743.481411][ T8] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1743.520202][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1743.600950][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.631467][ T8] usb 4-1: Product: syz [ 1743.635713][ T8] usb 4-1: Manufacturer: syz [ 1743.640448][ T8] usb 4-1: SerialNumber: syz [ 1744.021902][ T8] usb 4-1: selecting invalid altsetting 0 [ 1744.039278][ T8] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1744.069073][ T8] usb 4-1: No valid video chain found. [ 1744.104228][ T8] usb 4-1: selecting invalid altsetting 0 [ 1744.132841][ T8] usbtest: probe of 4-1:220.1 failed with error -22 [ 1744.182920][ T8] usb 4-1: USB disconnect, device number 37 [ 1744.251435][ T5787] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1746.081415][ T5787] usb 5-1: Using ep0 maxpacket: 32 [ 1746.141600][ T5787] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1746.221647][ T5787] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1746.270418][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1746.310540][ T5787] usb 5-1: Product: syz [ 1746.331283][ T5787] usb 5-1: Manufacturer: syz [ 1746.335960][ T5787] usb 5-1: SerialNumber: syz [ 1746.419643][ T5787] usb 5-1: config 0 descriptor?? [ 1746.462174][T15911] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1748.145586][ T5787] usb 5-1: USB disconnect, device number 14 [ 1748.971810][T15928] CIFS: Attempting to mount //127.0.0.1/share [ 1749.345966][T15928] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1751.721610][ T789] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1752.568911][ T789] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1753.200069][ T789] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.942818][ T789] usb 3-1: config 220 has no interface number 2 [ 1753.949213][ T789] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1754.084557][ T789] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1754.105769][ T789] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1754.141157][ T789] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1754.202877][ T789] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1754.234594][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.266943][ T789] usb 3-1: Product: syz [ 1754.331185][ T789] usb 3-1: Manufacturer: syz [ 1754.341246][ T789] usb 3-1: SerialNumber: syz [ 1754.450659][ T789] usb 3-1: can't set config #220, error -71 [ 1754.479576][ T789] usb 3-1: USB disconnect, device number 48 [ 1755.266444][T15958] loop1: detected capacity change from 0 to 256 [ 1755.831444][T14960] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1756.011710][T14960] usb 4-1: Using ep0 maxpacket: 32 [ 1756.033380][T14960] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1756.072986][T14960] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1756.121304][T14960] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1756.160505][T14960] usb 4-1: Product: syz [ 1756.190992][T14960] usb 4-1: Manufacturer: syz [ 1756.204792][T14960] usb 4-1: SerialNumber: syz [ 1756.227077][T14960] usb 4-1: config 0 descriptor?? [ 1756.250717][T15962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1757.132509][T15980] CIFS: Attempting to mount //127.0.0.1/share [ 1757.583352][T15967] loop1: detected capacity change from 0 to 32768 [ 1757.606696][T15967] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2846 (15967) [ 1757.645178][T15967] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1757.691680][T15967] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1757.710845][T15967] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1757.735658][T15980] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1757.754466][T15980] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1757.755414][T15967] BTRFS info (device loop1): turning on flush-on-commit [ 1757.789295][T15967] BTRFS info (device loop1): force clearing of disk cache [ 1757.821370][T15967] BTRFS info (device loop1): turning on sync discard [ 1757.838890][T15967] BTRFS info (device loop1): turning off barriers [ 1757.877504][T15967] BTRFS info (device loop1): use no compression [ 1757.985512][T15967] BTRFS info (device loop1): disabling free space tree [ 1758.101843][T15967] BTRFS info (device loop1): enabling ssd optimizations [ 1758.253776][T15967] BTRFS info (device loop1): using spread ssd allocation scheme [ 1758.301302][T14960] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1759.451887][T14960] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1759.476087][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1759.774540][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1759.849468][T14960] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.430135][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1760.430858][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1760.455446][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1760.466265][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1760.478335][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1760.488894][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1760.499653][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1760.510866][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1760.537377][ T8] usb 4-1: USB disconnect, device number 38 [ 1760.560488][T15967] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1760.571245][T14960] usb 3-1: config 220 has no interface number 2 [ 1760.629191][T15967] BTRFS error (device loop1): open_ctree failed: -12 [ 1760.634432][T14960] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1760.685753][T14960] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1760.731165][T14960] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1760.738186][T14960] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1761.151236][T14960] usb 3-1: string descriptor 0 read error: -71 [ 1761.471342][T14960] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1761.480482][T14960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.504164][T14960] usb 3-1: can't set config #220, error -71 [ 1761.512634][T14960] usb 3-1: USB disconnect, device number 49 [ 1761.789270][T16015] hub 8-0:1.0: USB hub found [ 1761.819955][T16015] hub 8-0:1.0: 1 port detected [ 1762.025975][T16017] ip_tables: iptables: counters copy to user failed while replacing table [ 1762.517078][T16026] loop3: detected capacity change from 0 to 1024 [ 1762.614421][T16026] EXT4-fs: quotafile must be on filesystem root [ 1764.590891][T16029] CIFS: Attempting to mount //127.0.0.1/share [ 1764.781245][T16029] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1765.601854][ T9679] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1766.010540][ T9679] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1767.661283][ T9679] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.704722][ T9679] usb 3-1: config 220 has no interface number 2 [ 1767.753967][ T9679] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1767.823362][ T9679] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1767.830190][ T9679] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1767.861433][ T9679] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1767.905225][ T9679] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1767.942170][ T9679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.971289][ T9679] usb 3-1: Product: syz [ 1767.986613][ T9679] usb 3-1: Manufacturer: syz [ 1768.014643][ T9679] usb 3-1: SerialNumber: syz [ 1768.158040][ T9679] usb 3-1: selecting invalid altsetting 0 [ 1768.181660][ T9679] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1768.188048][ T9679] usb 3-1: No valid video chain found. [ 1768.263584][ T9679] usb 3-1: selecting invalid altsetting 0 [ 1768.269364][ T9679] usbtest: probe of 3-1:220.1 failed with error -22 [ 1768.351833][ T9679] usb 3-1: USB disconnect, device number 50 [ 1770.848262][T16065] loop1: detected capacity change from 0 to 1024 [ 1770.923649][T16065] EXT4-fs: quotafile must be on filesystem root [ 1770.963827][T16069] loop2: detected capacity change from 0 to 1024 [ 1770.971983][T16069] EXT4-fs: quotafile must be on filesystem root [ 1771.219190][T15883] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1773.481319][T16084] CIFS: Attempting to mount //127.0.0.1/share [ 1775.022098][T16084] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1775.049488][T16084] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1775.131218][ T1213] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1775.374059][ T1213] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1775.391186][ T1213] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.426374][ T1213] usb 4-1: config 220 has no interface number 2 [ 1775.441235][ T1213] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1775.682668][ T1213] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1775.689586][ T1213] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1775.697088][ T1213] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1775.712731][ T1213] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1775.721992][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.730201][ T1213] usb 4-1: Product: syz [ 1775.734958][ T1213] usb 4-1: Manufacturer: syz [ 1775.741243][ T1213] usb 4-1: SerialNumber: syz [ 1776.817131][ T1213] usb 4-1: selecting invalid altsetting 0 [ 1776.823735][ T1213] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1776.830155][ T1213] usb 4-1: No valid video chain found. [ 1776.843088][ T1213] usb 4-1: selecting invalid altsetting 0 [ 1776.848935][ T1213] usbtest: probe of 4-1:220.1 failed with error -22 [ 1776.860145][ T1213] usb 4-1: USB disconnect, device number 39 [ 1777.476563][T16111] loop1: detected capacity change from 0 to 1024 [ 1777.513818][T16111] EXT4-fs: quotafile must be on filesystem root [ 1778.633180][T16115] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1778.681964][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1778.933686][T16115] bond0: (slave bond_slave_0): Releasing backup interface [ 1778.969226][T16118] bridge0: port 3(veth0) entered blocking state [ 1778.990086][T16118] bridge0: port 3(veth0) entered disabled state [ 1779.006345][T16118] veth0: entered allmulticast mode [ 1779.034289][T16118] veth0: entered promiscuous mode [ 1779.042247][T16118] bridge0: port 3(veth0) entered blocking state [ 1779.049188][T16118] bridge0: port 3(veth0) entered forwarding state [ 1780.431415][ T789] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1780.744693][ T789] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1780.848198][ T789] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1780.993467][ T789] usb 2-1: config 220 has no interface number 2 [ 1781.110854][ T789] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1781.277166][ T789] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1781.386072][ T789] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1781.489832][ T789] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1781.616659][ T789] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1781.752999][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.862898][ T789] usb 2-1: Product: syz [ 1781.915635][ T789] usb 2-1: Manufacturer: syz [ 1781.979269][ T789] usb 2-1: SerialNumber: syz [ 1783.470257][ T789] usb 2-1: selecting invalid altsetting 0 [ 1783.491743][ T789] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1783.541200][ T789] usb 2-1: No valid video chain found. [ 1783.586380][ T789] usb 2-1: selecting invalid altsetting 0 [ 1783.619130][ T789] usbtest: probe of 2-1:220.1 failed with error -22 [ 1783.665830][ T789] usb 2-1: USB disconnect, device number 57 [ 1784.564820][T16137] loop2: detected capacity change from 0 to 32768 [ 1784.599890][T16137] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2892 (16137) [ 1784.634015][T16137] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1784.653090][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 1784.676366][T16137] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1784.705799][T16137] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1784.757614][T16137] BTRFS info (device loop2): turning on flush-on-commit [ 1786.431704][T16137] BTRFS info (device loop2): force clearing of disk cache [ 1786.438934][T16137] BTRFS info (device loop2): turning on sync discard [ 1786.491215][T16137] BTRFS info (device loop2): turning off barriers [ 1786.516003][T16137] BTRFS info (device loop2): use no compression [ 1786.549799][T16137] BTRFS info (device loop2): disabling free space tree [ 1786.557300][T16137] BTRFS info (device loop2): enabling ssd optimizations [ 1786.581258][T16137] BTRFS info (device loop2): using spread ssd allocation scheme [ 1786.611710][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1786.612551][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1786.689040][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1786.772685][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1786.826813][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1786.861921][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1786.966595][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1787.008282][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1787.029398][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1787.065551][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1787.078225][T16137] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1787.116741][T16137] BTRFS error (device loop2): open_ctree failed: -12 [ 1787.870234][T15883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (15883) [ 1788.683392][T16173] tipc: Started in network mode [ 1788.700233][T16173] tipc: Node identity 1000001, cluster identity 4369 [ 1788.711527][T16173] tipc: Node number set to 16777217 [ 1789.019290][T16175] tipc: New replicast peer: 127.0.0.1 [ 1789.042946][T16175] tipc: Enabled bearer , priority 10 [ 1789.186103][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 1789.198775][T16187] loop4: detected capacity change from 0 to 1024 [ 1789.210901][T16187] EXT4-fs: quotafile must be on filesystem root [ 1793.300912][T16202] loop3: detected capacity change from 0 to 32768 [ 1793.409345][T16202] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1793.426416][T16202] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1793.456423][T16202] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1793.489941][T16202] BTRFS info (device loop3): turning on flush-on-commit [ 1793.519357][T16202] BTRFS info (device loop3): force clearing of disk cache [ 1793.541138][T16202] BTRFS info (device loop3): turning on sync discard [ 1793.547924][T16202] BTRFS info (device loop3): turning off barriers [ 1793.587484][T16202] BTRFS info (device loop3): use no compression [ 1793.608221][T16202] BTRFS info (device loop3): disabling free space tree [ 1793.619590][T16202] BTRFS info (device loop3): enabling ssd optimizations [ 1793.627231][T16202] BTRFS info (device loop3): using spread ssd allocation scheme [ 1793.822857][T16202] BTRFS info (device loop3): rebuilding free space tree [ 1793.866389][T16202] BTRFS info (device loop3): disabling free space tree [ 1793.910514][T16202] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1793.980696][T16202] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1794.304136][T14257] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1795.729149][T15883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (15883) [ 1796.773463][T16234] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2913'. [ 1796.826185][T16234] netlink: 'syz.1.2913': attribute type 16 has an invalid length. [ 1796.852944][T16234] netlink: 'syz.1.2913': attribute type 17 has an invalid length. [ 1797.000607][T16234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1797.064833][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.071790][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.585313][T16267] loop1: detected capacity change from 0 to 256 [ 1802.306839][T16284] CIFS: Attempting to mount //127.0.0.1/share [ 1803.043292][T16284] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1803.050849][T16284] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1803.704049][T16296] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2934'. [ 1806.212747][T16310] CIFS: Attempting to mount //127.0.0.1/share [ 1806.579397][T16318] hub 8-0:1.0: USB hub found [ 1806.584740][T16318] hub 8-0:1.0: 1 port detected [ 1806.952261][T16310] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1811.180382][T16335] loop3: detected capacity change from 0 to 1024 [ 1811.232492][T16335] EXT4-fs: quotafile must be on filesystem root [ 1811.327967][T16336] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1812.792419][T16349] CIFS: Attempting to mount //127.0.0.1/share [ 1813.668409][T16349] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1813.711570][T16359] x_tables: duplicate entry at hook 3 [ 1815.345963][T16361] tipc: Started in network mode [ 1815.361494][T16361] tipc: Node identity 1000001, cluster identity 4369 [ 1815.368278][T16361] tipc: Node number set to 16777217 [ 1815.664107][T16374] loop4: detected capacity change from 0 to 1024 [ 1815.722043][T16374] EXT4-fs: quotafile must be on filesystem root [ 1818.212427][T16392] CIFS: Attempting to mount //127.0.0.1/share [ 1819.619659][T16392] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1819.627202][T16392] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1826.621373][T16419] loop1: detected capacity change from 0 to 8192 [ 1828.135299][T16430] ip_tables: iptables: counters copy to user failed while replacing table [ 1828.501619][T16432] CIFS: Attempting to mount //127.0.0.1/share [ 1829.727210][T16432] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1830.151181][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1830.494256][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1830.509763][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1830.866982][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1830.911124][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1830.932500][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1830.973042][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1831.003950][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1831.041311][ T8] usb 4-1: Product: syz [ 1831.055791][ T8] usb 4-1: Manufacturer: syz [ 1831.096401][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 1831.106392][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 1831.128431][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1831.143440][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 1834.254984][T14361] usb 4-1: USB disconnect, device number 40 [ 1834.522250][T16458] Bluetooth: MGMT ver 1.22 [ 1835.436592][T16466] CIFS: Attempting to mount //127.0.0.1/share [ 1836.803547][T16466] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1838.191610][T14361] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1838.513989][T14361] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1838.640630][T14361] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1838.848586][T14361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1838.987856][T14361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1839.114207][T14361] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1839.255585][T14361] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1839.394061][T14361] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1839.483599][T14361] usb 2-1: Product: syz [ 1839.525059][T14361] usb 2-1: Manufacturer: syz [ 1839.744513][T14361] cdc_wdm 2-1:1.0: skipping garbage [ 1839.829898][T14361] cdc_wdm 2-1:1.0: skipping garbage [ 1839.968550][T14361] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1840.058211][T14361] cdc_wdm 2-1:1.0: Unknown control protocol [ 1840.290528][T14361] usb 2-1: USB disconnect, device number 58 [ 1841.232171][T16496] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2993'. [ 1841.335173][T16500] loop3: detected capacity change from 0 to 256 [ 1841.362196][T16495] loop4: detected capacity change from 0 to 8192 [ 1845.381322][ T9679] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1845.543789][T16527] loop4: detected capacity change from 0 to 8192 [ 1845.575911][ T9679] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1845.591632][ T9679] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1845.627549][ T9679] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1845.638347][ T9679] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1845.676631][ T9679] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1845.728053][ T9679] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1845.742332][ T9679] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1845.775315][ T9679] usb 3-1: Product: syz [ 1845.811168][ T9679] usb 3-1: Manufacturer: syz [ 1845.844513][ T9679] cdc_wdm 3-1:1.0: skipping garbage [ 1845.849826][ T9679] cdc_wdm 3-1:1.0: skipping garbage [ 1845.872722][ T9679] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1845.879204][ T9679] cdc_wdm 3-1:1.0: Unknown control protocol [ 1848.498343][ T8] usb 3-1: USB disconnect, device number 51 [ 1848.577751][T16550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3009'. [ 1849.982285][T14361] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1850.114749][T16561] loop3: detected capacity change from 0 to 8192 [ 1850.458914][T14361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.505615][T14361] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1850.537000][T14361] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1850.551146][T14361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.580104][T14361] usb 5-1: Product: syz [ 1850.587030][T14361] usb 5-1: Manufacturer: syz [ 1850.596231][T14361] usb 5-1: SerialNumber: syz [ 1850.608238][T14361] usb 5-1: config 0 descriptor?? [ 1850.836124][ T9679] usb 5-1: USB disconnect, device number 15 [ 1854.320770][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3022'. [ 1855.077208][T16592] loop1: detected capacity change from 0 to 8192 [ 1859.561696][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1859.568235][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.830696][T16629] loop1: detected capacity change from 0 to 8192 [ 1862.444877][ T1197] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1862.818990][ T1197] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 1862.947346][ T1197] usb 4-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 1863.075174][ T1197] usb 4-1: config 0 has no interface number 0 [ 1863.174382][ T1197] usb 4-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1863.399750][ T1197] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1863.523254][ T1197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.629244][ T1197] usb 4-1: Product: syz [ 1863.708657][ T1197] usb 4-1: Manufacturer: syz [ 1863.794738][ T1197] usb 4-1: SerialNumber: syz [ 1863.992356][ T1197] usb 4-1: config 0 descriptor?? [ 1864.577364][ T1197] vmk80xx 4-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 1864.886758][ T1197] usb 4-1: USB disconnect, device number 41 [ 1865.330872][T16648] tmpfs: Unknown parameter 'keyring' [ 1867.625183][T16669] loop1: detected capacity change from 0 to 8192 [ 1871.257085][T16689] tmpfs: Unknown parameter 'keyring' [ 1871.313630][ T9679] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1872.213990][ T9679] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 1872.227969][ T9679] usb 3-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 1872.261414][ T9679] usb 3-1: config 0 has no interface number 0 [ 1872.291619][ T9679] usb 3-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1872.360456][ T9679] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1872.388061][ T9679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.411097][ T9679] usb 3-1: Product: syz [ 1872.415365][ T9679] usb 3-1: Manufacturer: syz [ 1872.420024][ T9679] usb 3-1: SerialNumber: syz [ 1872.472467][ T9679] usb 3-1: config 0 descriptor?? [ 1872.532187][ T9679] vmk80xx 3-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 1872.764184][ T9679] usb 3-1: USB disconnect, device number 52 [ 1873.238301][T16702] loop4: detected capacity change from 0 to 8192 [ 1878.670147][T16725] warning: `syz.4.3070' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1879.581323][ T1197] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1879.775816][ T1197] usb 5-1: device descriptor read/64, error -71 [ 1881.319389][T16747] loop1: detected capacity change from 0 to 8192 [ 1881.442261][ T1197] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1881.651149][ T1197] usb 5-1: device descriptor read/64, error -71 [ 1881.792035][ T1197] usb usb5-port1: attempt power cycle [ 1882.365230][ T1197] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1884.193052][ T1197] usb 5-1: device descriptor read/8, error -71 [ 1887.091320][ T1197] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1887.306969][ T1197] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1887.331153][ T1197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.343065][T16795] loop2: detected capacity change from 0 to 8192 [ 1887.360824][ T1197] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1887.427993][ T1197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.498260][ T1197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.039672][ T1197] usb 5-1: string descriptor 0 read error: -71 [ 1890.047405][ T1197] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1890.079224][ T1197] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1891.601707][ T1197] usb 5-1: can't set config #1, error -71 [ 1891.652872][ T1197] usb 5-1: USB disconnect, device number 20 [ 1891.829765][ T789] IPVS: starting estimator thread 0... [ 1892.034330][T16822] IPVS: using max 16 ests per chain, 38400 per kthread [ 1892.465642][T16835] loop3: detected capacity change from 0 to 8192 [ 1892.521371][ T1197] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1893.376078][ T1197] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1893.532157][ T1197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.543370][ T1197] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1893.553586][ T1197] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.567235][ T1197] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1893.582722][ T1197] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1893.619597][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1893.641647][ T1197] usb 3-1: Product: syz [ 1893.645920][ T1197] usb 3-1: Manufacturer: syz [ 1895.930784][ T1197] cdc_wdm 3-1:1.0: skipping garbage [ 1895.944333][ T1197] cdc_wdm 3-1:1.0: skipping garbage [ 1895.952017][ T1197] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1895.958125][ T1197] cdc_wdm 3-1:1.0: Unknown control protocol [ 1896.566438][T14361] usb 3-1: USB disconnect, device number 53 [ 1898.134954][T16857] tmpfs: Unknown parameter 'keyring' [ 1900.931550][ T789] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1901.136928][ T789] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1901.151088][ T789] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.184645][ T789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1901.205573][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1901.231121][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1901.255951][ T789] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1901.271483][ T789] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1901.289835][ T789] usb 4-1: Product: syz [ 1901.295148][ T789] usb 4-1: Manufacturer: syz [ 1901.318590][ T789] cdc_wdm 4-1:1.0: skipping garbage [ 1901.332614][ T789] cdc_wdm 4-1:1.0: skipping garbage [ 1901.344571][ T789] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1901.360809][ T789] cdc_wdm 4-1:1.0: Unknown control protocol [ 1901.666927][T16870] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 1901.712311][ T5787] usb 4-1: USB disconnect, device number 42 [ 1901.988509][T16877] loop1: detected capacity change from 0 to 8192 [ 1906.715638][T16910] loop2: detected capacity change from 0 to 8192 [ 1906.791238][ T789] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1907.043213][ T789] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1907.248559][ T789] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1907.259921][ T789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1907.269334][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1907.280373][ T789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1907.311234][ T789] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1907.320465][ T789] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1907.454266][ T789] usb 5-1: Product: syz [ 1907.486286][ T789] usb 5-1: Manufacturer: syz [ 1907.590887][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 1907.627167][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 1907.675714][ T789] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1908.001158][T16898] Bluetooth: hci1: command 0x0406 tx timeout [ 1908.796881][T16919] tmpfs: Unknown parameter 'keyring' [ 1909.090250][ T789] usb 5-1: USB disconnect, device number 21 [ 1911.883080][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'. [ 1913.626815][T16954] tmpfs: Unknown parameter 'keyring' [ 1914.073867][ T5787] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1914.317823][ T5787] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1914.381943][ T5787] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1914.479997][ T5787] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1914.569623][ T5787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1914.682278][ T5787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1914.698947][T16968] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3152'. [ 1914.843680][ T5787] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1914.927482][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1915.015565][ T5787] usb 5-1: Product: syz [ 1915.068615][ T5787] usb 5-1: Manufacturer: syz [ 1915.287629][ T5787] cdc_wdm 5-1:1.0: skipping garbage [ 1915.344264][ T5787] cdc_wdm 5-1:1.0: skipping garbage [ 1915.415471][ T5787] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1915.692768][ T5787] usb 5-1: USB disconnect, device number 22 [ 1918.449548][T16977] hub 8-0:1.0: USB hub found [ 1918.454789][T16977] hub 8-0:1.0: 1 port detected [ 1919.312137][T16983] tmpfs: Unknown parameter 'keyring' [ 1920.105679][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.115011][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.927857][T16984] loop1: detected capacity change from 0 to 8192 [ 1925.021324][ T5787] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1925.232988][ T5787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1925.275669][ T5787] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1925.345106][ T5787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1925.414468][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1925.494976][ T5787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1925.555616][ T5787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1925.600245][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1925.640212][ T5787] usb 4-1: Product: syz [ 1925.661085][T17009] tipc: Enabling of bearer rejected, failed to enable media [ 1925.670198][ T5787] usb 4-1: Manufacturer: syz [ 1925.761438][ T5787] cdc_wdm 4-1:1.0: skipping garbage [ 1925.818190][ T5787] cdc_wdm 4-1:1.0: skipping garbage [ 1925.845323][ T5787] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1926.014652][ T5787] usb 4-1: USB disconnect, device number 43 [ 1929.148118][T17033] CIFS: Attempting to mount //127.0.0.1/share [ 1929.299901][T17038] tmpfs: Unknown parameter 'keyring' [ 1929.997321][T17033] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1930.004851][T17033] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1935.641387][ T5787] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1935.833324][ T5787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1935.842392][ T5787] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1935.863450][ T5787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1935.901236][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1935.941173][ T5787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1935.982448][ T5787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1936.011330][ T5787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1936.019428][ T5787] usb 2-1: Product: syz [ 1936.104257][ T5787] usb 2-1: Manufacturer: syz [ 1936.143413][ T5787] cdc_wdm 2-1:1.0: skipping garbage [ 1936.148736][ T5787] cdc_wdm 2-1:1.0: skipping garbage [ 1936.195031][ T5787] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1936.359121][ T5787] usb 2-1: USB disconnect, device number 59 [ 1940.169139][T17076] CIFS: Attempting to mount //127.0.0.1/share [ 1940.542391][T17080] tmpfs: Unknown parameter 'keyring' [ 1941.287231][T17076] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1941.294761][T17076] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1941.534358][T17084] loop1: detected capacity change from 0 to 1024 [ 1941.579414][T17084] EXT4-fs: quotafile must be on filesystem root [ 1941.657554][T17085] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1947.649320][T17099] loop2: detected capacity change from 0 to 32768 [ 1947.794256][T17099] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 1948.181691][T17108] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 1948.580457][T17117] CIFS: Attempting to mount //127.0.0.1/share [ 1949.323295][T17117] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1949.348292][T14960] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1949.376612][T17117] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1949.553424][T14960] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1949.592867][T14960] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1949.612311][T14960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1949.631299][T14960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1949.642732][T14960] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1949.667581][T14960] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1949.677451][T14960] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1949.691131][T14960] usb 2-1: Product: syz [ 1949.695381][T14960] usb 2-1: Manufacturer: syz [ 1951.759765][T14960] usb 2-1: can't set config #1, error -71 [ 1951.794959][T14960] usb 2-1: USB disconnect, device number 60 [ 1953.547981][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3195'. [ 1956.140713][T17151] CIFS: Attempting to mount //127.0.0.1/share [ 1956.931749][T17151] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1957.061358][T17154] loop1: detected capacity change from 0 to 1024 [ 1957.068996][T17154] EXT4-fs: quotafile must be on filesystem root [ 1957.082343][T17145] loop4: detected capacity change from 0 to 32768 [ 1957.102980][T17145] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12 [ 1957.198658][T17155] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1960.152938][ T789] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1960.393587][ T789] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1960.414404][ T789] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1960.442284][ T789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1960.461168][ T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1960.481162][ T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1960.506404][ T789] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1960.530274][ T789] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1960.548996][ T789] usb 2-1: Product: syz [ 1960.555997][ T789] usb 2-1: Manufacturer: syz [ 1960.577015][ T789] cdc_wdm 2-1:1.0: skipping garbage [ 1960.590922][ T789] cdc_wdm 2-1:1.0: skipping garbage [ 1960.601425][ T789] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 1960.956299][ T789] usb 2-1: USB disconnect, device number 61 [ 1962.427837][T17186] tmpfs: Unknown parameter 'mp' [ 1963.402836][T17197] CIFS: Attempting to mount //127.0.0.1/share [ 1964.131759][T17197] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1968.481368][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1968.545032][T17229] tmpfs: Unknown parameter 'mp' [ 1968.710224][ T8] usb 5-1: device descriptor read/64, error -71 [ 1969.318981][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1969.581091][ T8] usb 5-1: device descriptor read/64, error -71 [ 1969.652955][T17235] CIFS: Attempting to mount //127.0.0.1/share [ 1969.701352][ T8] usb usb5-port1: attempt power cycle [ 1970.303299][T17235] CIFS: VFS: error -4 create cifsd thread [ 1970.348050][T17235] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1970.535982][T17240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 1972.751510][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1973.956923][ T8] usb 5-1: device not accepting address 25, error -71 [ 1974.282218][T17271] CIFS: Attempting to mount //127.0.0.1/share [ 1975.145164][T17271] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1975.153889][T17271] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1975.211803][T17274] tmpfs: Unknown parameter 'mp' [ 1978.281242][ T8] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1979.591087][ T8] usb 2-1: device descriptor read/64, error -71 [ 1979.692309][T17303] CIFS: Attempting to mount //127.0.0.1/share [ 1979.868785][T17303] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1979.876081][ T8] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1980.091485][ T8] usb 2-1: device descriptor read/64, error -71 [ 1980.131615][T17307] tmpfs: Bad value for 'mpol' [ 1981.035271][ T8] usb usb2-port1: attempt power cycle [ 1981.529172][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.553097][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.749655][T17312] loop1: detected capacity change from 0 to 32768 [ 1984.764833][T17312] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 1986.063966][T17309] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 1986.339919][T17336] CIFS: Attempting to mount //127.0.0.1/share [ 1987.649228][T17336] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1987.811754][T14361] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1987.953161][T17347] loop3: detected capacity change from 0 to 1024 [ 1987.975920][T17347] EXT4-fs: quotafile must be on filesystem root [ 1987.982419][T14361] usb 2-1: device descriptor read/64, error -71 [ 1988.021808][T17349] tipc: Started in network mode [ 1988.037016][T17349] tipc: Node identity 1000001, cluster identity 4369 [ 1988.055200][T17349] tipc: Node number set to 16777217 [ 1988.372955][T14361] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1988.711319][T14361] usb 2-1: device descriptor read/64, error -71 [ 1989.001860][T14361] usb usb2-port1: attempt power cycle [ 1989.531718][T14361] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1990.641792][T14361] usb 2-1: device descriptor read/8, error -71 [ 1990.727735][T17365] tmpfs: Bad value for 'mpol' [ 1992.580892][T17378] CIFS: Attempting to mount //127.0.0.1/share [ 1993.402359][T17378] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1993.409815][T17378] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1995.331303][T14361] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1995.681419][T14361] usb 5-1: device descriptor read/64, error -71 [ 1995.746202][T17405] tmpfs: Bad value for 'mpol' [ 1995.972110][T14361] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1996.611274][T14361] usb 5-1: device descriptor read/64, error -71 [ 1996.752274][T14361] usb usb5-port1: attempt power cycle [ 1996.856129][T17411] loop1: detected capacity change from 0 to 8192 [ 1997.171094][T14361] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1997.201967][T14361] usb 5-1: device descriptor read/8, error -71 [ 1997.527054][T17409] loop3: detected capacity change from 0 to 32768 [ 1997.577302][T17409] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1997.606241][T17409] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1997.617335][T14361] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1997.626698][T17409] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1997.635088][T17409] BTRFS info (device loop3): turning on flush-on-commit [ 1997.642606][T17409] BTRFS info (device loop3): force clearing of disk cache [ 1997.649805][T17409] BTRFS info (device loop3): turning on sync discard [ 1997.657089][T17409] BTRFS info (device loop3): turning off barriers [ 1997.664325][T14361] usb 5-1: device descriptor read/8, error -71 [ 1997.670744][T17409] BTRFS info (device loop3): use no compression [ 1997.678501][T17409] BTRFS info (device loop3): disabling free space tree [ 1997.686296][T17409] BTRFS info (device loop3): enabling ssd optimizations [ 1997.696900][T17409] BTRFS info (device loop3): using spread ssd allocation scheme [ 1997.781956][T14361] usb usb5-port1: unable to enumerate USB device [ 1997.872814][T17433] CIFS: Attempting to mount //127.0.0.1/share [ 1998.277194][T17409] BTRFS info (device loop3): rebuilding free space tree [ 1998.675157][T17409] BTRFS info (device loop3): disabling free space tree [ 1998.717185][T17409] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1999.866336][T17433] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1999.874566][T17409] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1999.901493][T17433] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2000.111461][T14257] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2000.489173][T17453] tmpfs: Bad value for 'mpol' [ 2004.097614][T17468] CIFS: Attempting to mount //127.0.0.1/share [ 2005.088833][T17468] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2005.096524][T17468] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2005.689001][T17489] tmpfs: Bad value for 'mpol' [ 2006.823691][T17482] loop1: detected capacity change from 0 to 32768 [ 2006.840621][T17482] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3292 (17482) [ 2006.894833][T17482] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2006.933836][T17482] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2006.970366][T17482] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2007.128661][T17482] BTRFS info (device loop1): turning on flush-on-commit [ 2007.144073][T17482] BTRFS info (device loop1): force clearing of disk cache [ 2007.155511][T17482] BTRFS info (device loop1): turning on sync discard [ 2008.173559][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2008.190742][T17482] BTRFS info (device loop1): turning off barriers [ 2008.211323][T17482] BTRFS info (device loop1): use no compression [ 2008.217690][T17482] BTRFS info (device loop1): disabling free space tree [ 2008.252547][T17482] BTRFS info (device loop1): enabling ssd optimizations [ 2008.271077][T17482] BTRFS info (device loop1): using spread ssd allocation scheme [ 2008.279278][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 2008.331528][ T8] usb 5-1: device descriptor read/64, error -71 [ 2008.356794][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 2008.357619][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 2008.405296][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 2008.463926][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 2008.485945][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 2008.515838][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 2008.526201][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 2008.565275][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 2008.593383][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 2008.594114][T17515] syz_tun: entered allmulticast mode [ 2008.610295][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 2008.641525][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2008.666794][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 2008.667569][T17482] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2008.708698][T17511] syz_tun: left allmulticast mode [ 2008.715565][T17482] BTRFS error (device loop1): open_ctree failed: -12 [ 2008.821638][ T8] usb 5-1: device descriptor read/64, error -71 [ 2008.956380][ T8] usb usb5-port1: attempt power cycle [ 2009.148540][T17528] CIFS: Attempting to mount //127.0.0.1/share [ 2009.901114][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2009.919882][T17528] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2009.946912][ T8] usb 5-1: device descriptor read/8, error -71 [ 2009.967374][T17528] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2011.198902][T17543] tmpfs: Bad value for 'mpol' [ 2011.445272][T17544] hub 8-0:1.0: USB hub found [ 2011.533429][T17544] hub 8-0:1.0: 1 port detected [ 2012.037865][T17548] loop3: detected capacity change from 0 to 1024 [ 2012.063829][T17548] EXT4-fs: quotafile must be on filesystem root [ 2012.164773][T17497] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2014.961237][T14361] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2015.027778][T17558] loop3: detected capacity change from 0 to 32768 [ 2015.065291][T17558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3310 (17558) [ 2015.113151][T17558] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2015.122525][T14361] usb 3-1: device descriptor read/64, error -71 [ 2015.161900][T17558] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 2015.170731][T17558] BTRFS info (device loop3): setting nodatacow, compression disabled [ 2015.198906][T17558] BTRFS info (device loop3): turning on flush-on-commit [ 2015.214617][T17558] BTRFS info (device loop3): force clearing of disk cache [ 2015.234954][T17558] BTRFS info (device loop3): turning on sync discard [ 2015.308130][T17558] BTRFS info (device loop3): turning off barriers [ 2015.338799][T17565] CIFS: Attempting to mount //127.0.0.1/share [ 2015.362011][T17558] BTRFS info (device loop3): use no compression [ 2015.391419][T14361] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2015.443646][T17558] BTRFS info (device loop3): disabling free space tree [ 2015.523850][T17558] BTRFS info (device loop3): enabling ssd optimizations [ 2015.615939][T17558] BTRFS info (device loop3): using spread ssd allocation scheme [ 2015.641505][T14361] usb 3-1: device descriptor read/64, error -71 [ 2015.812853][T14361] usb usb3-port1: attempt power cycle [ 2016.133470][T17558] BTRFS info (device loop3): rebuilding free space tree [ 2016.179047][T17565] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2016.202257][T17565] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2016.225045][T17558] BTRFS info (device loop3): disabling free space tree [ 2016.235071][T17558] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2016.247025][T17558] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2016.281315][T14361] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2016.372003][T14361] usb 3-1: device descriptor read/8, error -71 [ 2016.651163][T14361] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2016.711459][T14361] usb 3-1: device descriptor read/8, error -71 [ 2016.936897][T14361] usb usb3-port1: unable to enumerate USB device [ 2017.747744][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'. [ 2019.086185][T14257] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2020.458008][T17602] tmpfs: Bad value for 'mpol' [ 2021.083323][T17607] CIFS: Attempting to mount //127.0.0.1/share [ 2021.935997][T17607] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2021.968604][T17607] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2022.072717][T17609] loop3: detected capacity change from 0 to 1024 [ 2022.092893][T17609] EXT4-fs: quotafile must be on filesystem root [ 2022.165152][T17497] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2022.381088][ T8] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2023.388714][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2023.410043][ T8] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2023.461171][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2023.506786][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2023.521300][T17624] hub 8-0:1.0: USB hub found [ 2023.542516][T17624] hub 8-0:1.0: 1 port detected [ 2023.574660][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2023.615068][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2023.653974][ T8] usb 2-1: Product: syz [ 2023.674582][ T8] usb 2-1: Manufacturer: syz [ 2023.799483][ T8] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2024.033374][ T8] usb 2-1: USB disconnect, device number 69 [ 2024.311174][T17628] loop3: detected capacity change from 0 to 32768 [ 2024.341994][T17628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3327 (17628) [ 2024.387676][T17628] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2024.414886][T17628] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 2024.432742][T17628] BTRFS info (device loop3): setting nodatacow, compression disabled [ 2024.452475][T17628] BTRFS info (device loop3): turning on flush-on-commit [ 2024.472249][T17628] BTRFS info (device loop3): force clearing of disk cache [ 2024.491025][T17628] BTRFS info (device loop3): turning on sync discard [ 2024.499019][T17628] BTRFS info (device loop3): turning off barriers [ 2024.521010][T17628] BTRFS info (device loop3): use no compression [ 2024.534758][T17628] BTRFS info (device loop3): disabling free space tree [ 2024.561609][T17628] BTRFS info (device loop3): enabling ssd optimizations [ 2024.591058][T17628] BTRFS info (device loop3): using spread ssd allocation scheme [ 2024.837076][T17628] BTRFS info (device loop3): rebuilding free space tree [ 2024.896613][T17628] BTRFS info (device loop3): disabling free space tree [ 2024.915470][T17628] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2024.947259][T17628] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2026.213987][T14257] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2027.718211][T17676] CIFS: Attempting to mount //127.0.0.1/share [ 2027.900093][T17676] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2028.349131][T17690] tmpfs: Bad value for 'mpol' [ 2028.428125][ T8] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2028.675279][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2028.737249][ T8] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2028.832371][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2028.901384][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2029.253718][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2029.321905][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2029.376593][ T8] usb 4-1: Product: syz [ 2029.404764][ T8] usb 4-1: Manufacturer: syz [ 2030.086625][ T8] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 2030.255907][ T8] usb 4-1: USB disconnect, device number 44 [ 2030.300558][T17702] hub 8-0:1.0: USB hub found [ 2030.320021][T17702] hub 8-0:1.0: 1 port detected [ 2032.582673][T17713] CIFS: Attempting to mount //127.0.0.1/share [ 2033.292640][T17713] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2033.817191][T17727] tmpfs: Bad value for 'mpol' [ 2038.450237][T14361] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2038.656231][T14361] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2038.666736][T17752] CIFS: Attempting to mount //127.0.0.1/share [ 2038.697573][T14361] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2038.777687][T14361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2038.848195][T14361] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2038.980567][T14361] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2039.062806][T14361] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2039.133814][T14361] usb 2-1: Product: syz [ 2039.183078][T14361] usb 2-1: Manufacturer: syz [ 2039.372611][T14361] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 2039.422967][T17752] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2039.542725][ T789] usb 2-1: USB disconnect, device number 70 [ 2039.746320][T17768] hub 8-0:1.0: USB hub found [ 2039.758398][T17768] hub 8-0:1.0: 1 port detected [ 2042.807036][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.814007][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.042943][T17783] ip_tables: iptables: counters copy to user failed while replacing table [ 2043.368680][T17788] CIFS: Attempting to mount //127.0.0.1/share [ 2044.116376][T17788] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2044.127570][T17788] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2044.229483][T17790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2044.315072][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3370'. [ 2044.339290][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 2044.396778][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2044.445954][T17790] bond1: (slave bond0): making interface the new active one [ 2044.466924][T17790] bond1: (slave bond0): Enslaving as an active interface with an up link [ 2044.562060][T14960] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2044.574929][T17802] hub 8-0:1.0: USB hub found [ 2044.579891][T17802] hub 8-0:1.0: 1 port detected [ 2044.767768][T17793] bond1 (unregistering): (slave bond0): Releasing active interface [ 2044.783676][T14960] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2044.795489][T14960] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 2044.800164][T17793] bond1 (unregistering): Released all slaves [ 2044.802977][T14960] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2044.803041][T14960] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2044.810214][T14960] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2044.842767][T14960] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2044.851061][T14960] usb 5-1: Product: syz [ 2044.855571][T14960] usb 5-1: Manufacturer: syz [ 2044.872937][T14960] cdc_wdm 5-1:1.0: skipping garbage [ 2044.878505][T14960] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 2045.554028][T14361] usb 5-1: USB disconnect, device number 35 [ 2046.477374][T17823] hub 8-0:1.0: USB hub found [ 2046.483603][T17823] hub 8-0:1.0: 1 port detected [ 2046.932100][T17824] CIFS: Attempting to mount //127.0.0.1/share [ 2047.312078][T17824] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2048.811168][ T789] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2048.862573][T17858] CIFS: Attempting to mount //127.0.0.1/share [ 2049.009000][ T789] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2049.062897][ T789] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 2049.129230][ T789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2049.783999][ T789] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2049.808630][ T789] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2049.818169][ T789] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2049.848626][T17858] CIFS: VFS: cifs_mount failed w/return code = -112 [ 2049.860670][ T789] usb 5-1: Product: syz [ 2049.877820][ T789] usb 5-1: Manufacturer: syz [ 2049.997485][ T789] cdc_wdm 5-1:1.0: skipping garbage [ 2050.004850][ T789] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 2050.311492][T17869] hub 8-0:1.0: USB hub found [ 2050.316478][T17869] hub 8-0:1.0: 1 port detected [ 2050.400444][ T789] usb 5-1: USB disconnect, device number 36 [ 2051.070225][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 2052.419705][T17900] hub 8-0:1.0: USB hub found [ 2052.425006][T17900] hub 8-0:1.0: 1 port detected [ 2052.455227][T17901] CIFS: Attempting to mount //127.0.0.1/share [ 2053.181983][T17901] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2053.364219][T17901] CIFS: VFS: cifs_mount failed w/return code = -4 [ 2054.171199][T14361] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2054.425701][T14361] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2054.493381][T14361] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 2054.606945][T14361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2054.821444][T17915] hub 8-0:1.0: USB hub found [ 2054.851549][T17915] hub 8-0:1.0: 1 port detected [ 2054.856810][T14361] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2054.889183][T14361] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2054.901393][T14361] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2054.925521][T14361] usb 5-1: Product: syz [ 2054.936531][T14361] usb 5-1: Manufacturer: syz [ 2054.960357][T14361] cdc_wdm 5-1:1.0: skipping garbage [ 2054.966716][T14361] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 2055.172868][T14361] usb 5-1: USB disconnect, device number 37 [ 2056.415049][T17934] hub 8-0:1.0: USB hub found [ 2056.521236][T17940] CIFS: Attempting to mount //127.0.0.1/share [ 2056.586333][T17934] hub 8-0:1.0: 1 port detected [ 2057.421462][T17940] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2059.536003][T17963] tipc: Enabled bearer , priority 10 [ 2064.212401][ T9316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2064.224385][ T9316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2064.233536][ T9316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2064.242963][ T9316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2064.250745][ T9316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2064.258418][ T9316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2065.120087][T17998] hub 8-0:1.0: USB hub found [ 2065.141679][T17998] hub 8-0:1.0: 1 port detected [ 2066.521367][ T9316] Bluetooth: hci0: command tx timeout [ 2066.753703][T17985] chnl_net:caif_netlink_parms(): no params data found [ 2068.591064][ T9316] Bluetooth: hci0: command tx timeout [ 2068.654057][T17985] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.662183][T17985] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.669547][T17985] bridge_slave_0: entered allmulticast mode [ 2068.678082][T17985] bridge_slave_0: entered promiscuous mode [ 2068.687791][T17985] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.695514][T17985] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.703918][T17985] bridge_slave_1: entered allmulticast mode [ 2068.722084][T17985] bridge_slave_1: entered promiscuous mode [ 2068.830162][T17985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2068.875060][T17985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2069.008335][T17985] team0: Port device team_slave_0 added [ 2069.044903][T17985] team0: Port device team_slave_1 added [ 2069.191736][T17985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2069.198774][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2069.281089][T17985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2069.306642][T17985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2069.351200][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2069.441912][T17985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2069.689932][T17985] hsr_slave_0: entered promiscuous mode [ 2069.781670][T17985] hsr_slave_1: entered promiscuous mode [ 2069.851059][T17985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2069.858728][T17985] Cannot create hsr debugfs directory [ 2070.641794][ T9316] Bluetooth: hci0: command tx timeout [ 2070.660526][T17985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2071.154669][T17985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2071.458188][T17985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2071.799556][T17985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.791281][ T9316] Bluetooth: hci0: command tx timeout [ 2073.679812][T17985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2073.719017][T17985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2073.758452][T17985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2073.827688][T17985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2075.743805][T17985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2075.777858][T17985] 8021q: adding VLAN 0 to HW filter on device team0 [ 2075.820586][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.827774][T14929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2075.868053][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.875313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.626544][T17985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2077.677952][T18070] block nbd0: not configured, cannot reconfigure [ 2078.828433][T17985] veth0_vlan: entered promiscuous mode [ 2078.940294][T17985] veth1_vlan: entered promiscuous mode [ 2079.159349][T17985] veth0_macvtap: entered promiscuous mode [ 2079.205579][T17985] veth1_macvtap: entered promiscuous mode [ 2079.245181][T18082] veth0: entered promiscuous mode [ 2079.300794][T18081] veth0: left promiscuous mode [ 2079.335443][T17985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.382215][T17985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.413990][T17985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.462189][T17985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.514690][T17985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2079.555362][T18086] hub 8-0:1.0: USB hub found [ 2079.570079][T17985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.646681][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2079.655978][T18086] hub 8-0:1.0: 1 port detected [ 2079.720645][T17985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.794964][T17985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.868897][T17985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.920817][T17985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2079.931232][T17985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2079.981604][T17985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.034628][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2080.096513][T17985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.141766][T17985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2080.180067][T17985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.685532][T17985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.150540][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.176626][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.266401][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2082.283070][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2082.552164][T18104] CIFS: Attempting to mount //127.0.0.1/share [ 2083.321545][T18104] CIFS: VFS: cifs_mount failed w/return code = -512 [ 2085.871508][T18126] syz_tun: entered allmulticast mode [ 2085.961133][T18122] syz_tun: left allmulticast mode [ 2086.571902][T18162] CIFS: Attempting to mount //127.0.0.1/share [ 2088.497398][T18162] ================================================================== [ 2088.505520][T18162] BUG: KASAN: slab-use-after-free in cifs_free_hash+0xcc/0x100 [ 2088.513170][T18162] Write of size 8 at addr ffff8880770b8468 by task syz.3.3473/18162 [ 2088.521154][T18162] [ 2088.523557][T18162] CPU: 1 PID: 18162 Comm: syz.3.3473 Not tainted syzkaller #0 [ 2088.531023][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2088.541105][T18162] Call Trace: [ 2088.544395][T18162] [ 2088.547345][T18162] dump_stack_lvl+0x18c/0x250 [ 2088.552060][T18162] ? __lock_acquire+0x7eb0/0x7eb0 [ 2088.557139][T18162] ? show_regs_print_info+0x20/0x20 [ 2088.562501][T18162] ? load_image+0x420/0x420 [ 2088.567066][T18162] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 2088.572569][T18162] ? __virt_addr_valid+0x10c/0x380 [ 2088.577725][T18162] ? __virt_addr_valid+0x10c/0x380 [ 2088.582869][T18162] ? __virt_addr_valid+0x10c/0x380 [ 2088.588011][T18162] ? __virt_addr_valid+0x10c/0x380 [ 2088.593155][T18162] print_report+0xa8/0x210 [ 2088.597645][T18162] ? cifs_free_hash+0xcc/0x100 [ 2088.602451][T18162] kasan_report+0x117/0x150 [ 2088.607217][T18162] ? slab_free_freelist_hook+0x130/0x1a0 [ 2088.612919][T18162] ? cifs_free_hash+0xcc/0x100 [ 2088.617723][T18162] cifs_free_hash+0xcc/0x100 [ 2088.622342][T18162] cifs_crypto_secmech_release+0x32/0x110 [ 2088.628093][T18162] cifs_put_tcp_session+0x20b/0x320 [ 2088.633405][T18162] cifs_mount_put_conns+0xb4/0x280 [ 2088.638583][T18162] cifs_mount+0xdc/0x650 [ 2088.642855][T18162] ? __rwlock_init+0x150/0x150 [ 2088.647652][T18162] ? cifs_is_path_remote+0x6f0/0x6f0 [ 2088.652999][T18162] ? do_raw_spin_unlock+0x121/0x230 [ 2088.658241][T18162] ? smb3_update_mnt_flags+0x52f/0xc10 [ 2088.663734][T18162] ? cifs_setup_cifs_sb+0x52f/0x840 [ 2088.668960][T18162] cifs_smb3_do_mount+0x2e5/0x710 [ 2088.674006][T18162] ? cifs_sb_deactive+0x80/0x80 [ 2088.678883][T18162] smb3_get_tree+0x5a5/0xa90 [ 2088.683495][T18162] vfs_get_tree+0x8c/0x280 [ 2088.687941][T18162] do_new_mount+0x24a/0xa40 [ 2088.692471][T18162] __se_sys_mount+0x2e7/0x3d0 [ 2088.697191][T18162] ? __x64_sys_mount+0xc0/0xc0 [ 2088.702005][T18162] ? lockdep_hardirqs_on+0x98/0x150 [ 2088.707362][T18162] ? __x64_sys_mount+0x20/0xc0 [ 2088.712168][T18162] do_syscall_64+0x55/0xb0 [ 2088.716650][T18162] ? clear_bhb_loop+0x40/0x90 [ 2088.721355][T18162] ? clear_bhb_loop+0x40/0x90 [ 2088.726065][T18162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2088.731993][T18162] RIP: 0033:0x7fbbc519e159 [ 2088.736444][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2088.756117][T18162] RSP: 002b:00007fbbc6095028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2088.764571][T18162] RAX: ffffffffffffffda RBX: 00007fbbc5426180 RCX: 00007fbbc519e159 [ 2088.772567][T18162] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 2088.780571][T18162] RBP: 00007fbbc523506b R08: 0000000000000000 R09: 0000000000000000 [ 2088.788565][T18162] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 2088.796561][T18162] R13: 00007fbbc5426218 R14: 00007fbbc5426180 R15: 00007fff61a6b158 [ 2088.804564][T18162] [ 2088.807599][T18162] [ 2088.809938][T18162] Allocated by task 18162: [ 2088.814369][T18162] kasan_set_track+0x4e/0x70 [ 2088.818997][T18162] __kasan_kmalloc+0x8f/0xa0 [ 2088.823614][T18162] cifs_get_tcp_session+0xb5/0x1a00 [ 2088.828836][T18162] cifs_mount_get_session+0xae/0x440 [ 2088.834152][T18162] dfs_mount_share+0x1e9/0x7b0 [ 2088.838935][T18162] cifs_mount+0xbc/0x650 [ 2088.843210][T18162] cifs_smb3_do_mount+0x2e5/0x710 [ 2088.848256][T18162] smb3_get_tree+0x5a5/0xa90 [ 2088.852870][T18162] vfs_get_tree+0x8c/0x280 [ 2088.857313][T18162] do_new_mount+0x24a/0xa40 [ 2088.861839][T18162] __se_sys_mount+0x2e7/0x3d0 [ 2088.866546][T18162] do_syscall_64+0x55/0xb0 [ 2088.870994][T18162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2088.876923][T18162] [ 2088.879298][T18162] Freed by task 18163: [ 2088.883380][T18162] kasan_set_track+0x4e/0x70 [ 2088.888087][T18162] kasan_save_free_info+0x28/0x40 [ 2088.893137][T18162] ____kasan_slab_free+0x126/0x1f0 [ 2088.898273][T18162] slab_free_freelist_hook+0x130/0x1a0 [ 2088.903765][T18162] __kmem_cache_free+0xba/0x1f0 [ 2088.908658][T18162] clean_demultiplex_info+0xb6f/0xd70 [ 2088.914063][T18162] cifs_demultiplex_thread+0x274e/0x2a70 [ 2088.919730][T18162] kthread+0x2fa/0x390 [ 2088.923822][T18162] ret_from_fork+0x48/0x80 [ 2088.928263][T18162] ret_from_fork_asm+0x11/0x20 [ 2088.933121][T18162] [ 2088.935463][T18162] The buggy address belongs to the object at ffff8880770b8000 [ 2088.935463][T18162] which belongs to the cache kmalloc-4k of size 4096 [ 2088.949652][T18162] The buggy address is located 1128 bytes inside of [ 2088.949652][T18162] freed 4096-byte region [ffff8880770b8000, ffff8880770b9000) [ 2088.963664][T18162] [ 2088.966016][T18162] The buggy address belongs to the physical page: [ 2088.972527][T18162] page:ffffea0001dc2e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x770b8 [ 2088.982714][T18162] head:ffffea0001dc2e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2088.991669][T18162] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2089.000106][T18162] page_type: 0xffffffff() [ 2089.004477][T18162] raw: 00fff00000000840 ffff888017c42140 0000000000000000 dead000000000001 [ 2089.013086][T18162] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 2089.021701][T18162] page dumped because: kasan: bad access detected [ 2089.028175][T18162] page_owner tracks the page as allocated [ 2089.033928][T18162] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 33, tgid 33 (kworker/u4:2), ts 186561645996, free_ts 186419229144 [ 2089.055934][T18162] post_alloc_hook+0x1c1/0x200 [ 2089.060731][T18162] get_page_from_freelist+0x2181/0x22a0 [ 2089.066301][T18162] __alloc_pages+0x1f0/0x460 [ 2089.070911][T18162] alloc_slab_page+0x5d/0x180 [ 2089.075615][T18162] new_slab+0x87/0x2d0 [ 2089.079707][T18162] ___slab_alloc+0xc5c/0x12f0 [ 2089.084415][T18162] __kmem_cache_alloc_node+0x11f/0x250 [ 2089.089916][T18162] __kmalloc_node_track_caller+0xa4/0x230 [ 2089.095675][T18162] kmalloc_reserve+0x116/0x240 [ 2089.100583][T18162] __alloc_skb+0x138/0x2c0 [ 2089.105034][T18162] nsim_dev_trap_report_work+0x253/0xa90 [ 2089.110731][T18162] process_scheduled_works+0xa60/0x1600 [ 2089.116308][T18162] worker_thread+0xa5e/0xfe0 [ 2089.120931][T18162] kthread+0x2fa/0x390 [ 2089.125055][T18162] ret_from_fork+0x48/0x80 [ 2089.129498][T18162] ret_from_fork_asm+0x11/0x20 [ 2089.134297][T18162] page last free stack trace: [ 2089.138985][T18162] free_unref_page_prepare+0x7d7/0x8f0 [ 2089.144473][T18162] free_unref_page+0x32/0x2e0 [ 2089.149179][T18162] __unfreeze_partials+0x1cf/0x210 [ 2089.154357][T18162] put_cpu_partial+0x17c/0x250 [ 2089.159166][T18162] __slab_free+0x319/0x400 [ 2089.163624][T18162] qlist_free_all+0x75/0xd0 [ 2089.168157][T18162] kasan_quarantine_reduce+0x143/0x160 [ 2089.173645][T18162] __kasan_slab_alloc+0x22/0x80 [ 2089.178527][T18162] slab_post_alloc_hook+0x6a/0x4d0 [ 2089.183688][T18162] kmem_cache_alloc+0x17e/0x2c0 [ 2089.188574][T18162] ptlock_alloc+0x20/0x70 [ 2089.192929][T18162] pte_alloc_one+0xcc/0x540 [ 2089.197459][T18162] __pte_alloc+0x22/0x2a0 [ 2089.201820][T18162] handle_mm_fault+0x3dc6/0x4a50 [ 2089.206779][T18162] do_user_addr_fault+0xad2/0x12d0 [ 2089.211910][T18162] exc_page_fault+0x64/0x100 [ 2089.216548][T18162] [ 2089.218893][T18162] Memory state around the buggy address: [ 2089.224571][T18162] ffff8880770b8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.232656][T18162] ffff8880770b8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.240807][T18162] >ffff8880770b8400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.248921][T18162] ^ [ 2089.256402][T18162] ffff8880770b8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.264480][T18162] ffff8880770b8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2089.272583][T18162] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2089.346786][T18162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2089.354061][T18162] CPU: 0 PID: 18162 Comm: syz.3.3473 Not tainted syzkaller #0 [ 2089.361562][T18162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2089.371669][T18162] Call Trace: [ 2089.375002][T18162] [ 2089.377971][T18162] dump_stack_lvl+0x18c/0x250 [ 2089.382752][T18162] ? show_regs_print_info+0x20/0x20 [ 2089.388004][T18162] ? load_image+0x420/0x420 [ 2089.392601][T18162] panic+0x2ca/0x720 [ 2089.396557][T18162] ? bpf_jit_dump+0xd0/0xd0 [ 2089.401109][T18162] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 2089.407151][T18162] ? _raw_spin_unlock+0x40/0x40 [ 2089.412056][T18162] ? print_memory_metadata+0x314/0x400 [ 2089.417572][T18162] ? cifs_free_hash+0xcc/0x100 [ 2089.422382][T18162] check_panic_on_warn+0x84/0xa0 [ 2089.427392][T18162] ? cifs_free_hash+0xcc/0x100 [ 2089.432190][T18162] end_report+0x6f/0x130 [ 2089.436463][T18162] kasan_report+0x128/0x150 [ 2089.441013][T18162] ? slab_free_freelist_hook+0x130/0x1a0 [ 2089.446705][T18162] ? cifs_free_hash+0xcc/0x100 [ 2089.451505][T18162] cifs_free_hash+0xcc/0x100 [ 2089.456129][T18162] cifs_crypto_secmech_release+0x32/0x110 [ 2089.461884][T18162] cifs_put_tcp_session+0x20b/0x320 [ 2089.467117][T18162] cifs_mount_put_conns+0xb4/0x280 [ 2089.472259][T18162] cifs_mount+0xdc/0x650 [ 2089.476530][T18162] ? __rwlock_init+0x150/0x150 [ 2089.481328][T18162] ? cifs_is_path_remote+0x6f0/0x6f0 [ 2089.486644][T18162] ? do_raw_spin_unlock+0x121/0x230 [ 2089.491876][T18162] ? smb3_update_mnt_flags+0x52f/0xc10 [ 2089.497362][T18162] ? cifs_setup_cifs_sb+0x52f/0x840 [ 2089.502601][T18162] cifs_smb3_do_mount+0x2e5/0x710 [ 2089.507680][T18162] ? cifs_sb_deactive+0x80/0x80 [ 2089.512563][T18162] smb3_get_tree+0x5a5/0xa90 [ 2089.517183][T18162] vfs_get_tree+0x8c/0x280 [ 2089.521632][T18162] do_new_mount+0x24a/0xa40 [ 2089.526214][T18162] __se_sys_mount+0x2e7/0x3d0 [ 2089.530938][T18162] ? __x64_sys_mount+0xc0/0xc0 [ 2089.535740][T18162] ? lockdep_hardirqs_on+0x98/0x150 [ 2089.540970][T18162] ? __x64_sys_mount+0x20/0xc0 [ 2089.545772][T18162] do_syscall_64+0x55/0xb0 [ 2089.550224][T18162] ? clear_bhb_loop+0x40/0x90 [ 2089.554920][T18162] ? clear_bhb_loop+0x40/0x90 [ 2089.559648][T18162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2089.565578][T18162] RIP: 0033:0x7fbbc519e159 [ 2089.570018][T18162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2089.589652][T18162] RSP: 002b:00007fbbc6095028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2089.598093][T18162] RAX: ffffffffffffffda RBX: 00007fbbc5426180 RCX: 00007fbbc519e159 [ 2089.606090][T18162] RDX: 0000200000000400 RSI: 0000200000000300 RDI: 0000200000000200 [ 2089.614090][T18162] RBP: 00007fbbc523506b R08: 0000000000000000 R09: 0000000000000000 [ 2089.622084][T18162] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 2089.630079][T18162] R13: 00007fbbc5426218 R14: 00007fbbc5426180 R15: 00007fff61a6b158 [ 2089.638099][T18162] [ 2089.641729][T18162] Kernel Offset: disabled [ 2089.646067][T18162] Rebooting in 86400 seconds..