last executing test programs: 2m33.54215822s ago: executing program 1 (id=975): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) 2m32.882186666s ago: executing program 1 (id=978): ftruncate(0xffffffffffffffff, 0xc17a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x330, 0x330, 0xffffffff, 0x0, 0x128, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 'batadv_slave_1\x00', 'ip6_vti0\x00', {}, {}, 0x3a, 0x98, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@remote, @ipv6=@mcast2, @icmp_id=0x64, @gre_key=0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @local, [0x0, 0xff0001fe, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 'team_slave_1\x00', 'ip6erspan0\x00', {}, {}, 0x87, 0x9, 0x2, 0x28}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xa, @ipv4=@remote, @ipv6=@loopback, @icmp_id=0x64, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1c, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@remote, @gre_key=0x36b9, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32d33cd83c2d"], 0x0) 2m30.391617264s ago: executing program 1 (id=987): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) 2m30.076918646s ago: executing program 1 (id=988): syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x5, 0x1d3, &(0x7f0000005a00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m28.886567124s ago: executing program 1 (id=992): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r0, 0x409, 0xb) 2m27.746560288s ago: executing program 1 (id=995): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffdffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) 2m27.376452375s ago: executing program 32 (id=995): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffdffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) 10.852586259s ago: executing program 0 (id=1353): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close(0xffffffffffffffff) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe4f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="59b6890a81fa539a0008050001000700"/28], 0x1c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x37, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 7.313553531s ago: executing program 4 (id=1361): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r2, 0x0, @inherit={0x70, &(0x7f0000000180)={0x1, 0x5, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}, [0x9, 0x3, 0x7ff, 0x309, 0x9]}}, @name="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"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000006c0)={0x0, "2c1a2c3c689e1c386c681447aeaf524e"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000016c0)={{r1}, r2, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid=r3}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x10001}, &(0x7f00000003c0)=0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000440)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003740)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB=' \x00', @ANYRES32=r8, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES64=r7], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r8) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xb8, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c194) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]}) pipe(&(0x7f0000000000)) 7.297214283s ago: executing program 0 (id=1362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',t=', @ANYRESHEX=0x0, @ANYRESOCT], 0x4, 0x337, &(0x7f0000000540)="$eJzs3U1r1EAYB/D/ZN9tqbGtVDxWC55KWw+KCIr05hfwIMXabqE0VrAVrChWzyLeBMGjN8+iX0Ev4hfQUw/Fk16KSCMzmWRntzPZTV82u/T/g+7rPJlnkkwysxIDIjq2bsz+eH9xS/6JEoACgCuAB6AKFAGcxlj14er68npQX0xbUEFFyD+BKFLsKbOwWreFyjgVofnyXRGD5md0NMIwDH+2LfW7K7lQfkTU9/fwgIruner7atcz25fNDgpUupNKDzG2sNjBDh5hKM90iIgof/r87+mzxKAev3seMKHH4f10/o+ZM4im8c0O8ORk9/PpGcn534veh0KuH7VGRGO+p6Zwch168SzRtizrPhE2VncZ0Z7VtAFEu1mlysWrLS0H9clNtYAXuKYZxUbV4yLihiiubMvR07hlbpoire3pBlQbSrINJUf+I5lr/LyNN/bq5r52kJP4Ir6JOeHjLRaT8V8xFHLlqPXjAzUzIMp/yr1E1Uo/KtXUykbvO6UqORtvgU8fGq2sudZrFQWZi41cimgdv/txnq/L7igMNx8UdOum3a1TUSPWqJnk/V9r1GhrVG2pFNQnF+4HqT+lHBrrjE68ErfEOH7hI2aN8b8nS0/A3TOberlQJfWekdqeoirp2I5NVAe+l6lnEvAvjGQMe4m7uIyhtY3HK/NBUH+Q/4u4q/RIPtGOqHdH+Yl8NsqgKl+UABxapbthGFq/KuIQqijHqbpyLqmmXnqXNFkdZvVPKQerHZvROjS+uu4u3Dhsyk/iI0LGSlX4syRKni2yhP/Rta9t2HdIYWRYPtodMq5qPgjOJBuugEpHPaW2j0pvPl2ZD/ZzLKJ+Y/SXsdvbV/NOh7pPjrtENP8z5itT6qgjH/yU2UjbUYexxGnHDGhYPZ7obAaXLNY5ThyIXwT1mbQ517kLwPmWGj3ENT5vXayv80Qv/qtkxZZWLS1CzOI77vD3fyIiIiIiIiIiIiIiIiIiIiIiIiKifpP1agT35QS7+jok+5UYDVvH8D/eICIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6GOP+v0BB3TGmnPv9fwsd3P9XtL3FJxG18T8AAP//uTRlfg==") bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tracing}, 0x40) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) io_uring_setup(0x4760, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) fcntl$setstatus(r6, 0x4, 0x2000) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) r7 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000000)={r7}, 0x1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800888, &(0x7f0000000540)=ANY=[], 0xff, 0x222, &(0x7f0000000780)="$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") 7.222633941s ago: executing program 2 (id=1363): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x8, 0x3, 0x117}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000002c0)={0x0, 0x0, 0x3}, 0x1) 6.346425618s ago: executing program 2 (id=1365): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 5.570285115s ago: executing program 0 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') rmdir(&(0x7f0000000200)='./bus\x00') 5.549774917s ago: executing program 4 (id=1367): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791095000000000063000003000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 5.440620278s ago: executing program 0 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x268}, 0x1, 0x0, 0x0, 0xd5}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_emit_ethernet(0x15a, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaabb81002a00080040e201480068000049b090780a0101007e356142e0000002072711ac1414bbac1414bbac141440ac1414bbffffffffac1414347f000001ac1414bbe000000194040100000000010000000000000000000000000200004e2000004e21000000010000033fe85500000000000000000080000000c70000000000000fff000004e600000002000000f0000000ae00000000000000010000000900000000000042a70000d05e0000000800000002000000bb000000020000000100000005000000f00000000a0000000b00000006000000830000000600000b5c00004010000000010000000700000004000000050060000000000008000070f40000000900000080000000000000008100000005000000060000508b000000040000000300000040000000020000ffff00000d9f000000300000000000000006000000d2000003ff000002a70000000400004010"], 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 5.31803135s ago: executing program 4 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf25440000000c009900020000003800000048025a80200001800500040002000000140005000700ffff020007000008070009000f00b4000380050006000000000005000600010000000500040002000000140003000000030003000800000008000200e307140003000500060007000200ff0105000600400005000700000000001400050005000700040027b10700f0b60700030005000600020000004a000200562f072800170118f11a1419111015283c21501207190255520c0f394408544c501e16331f2e1d04013e330c1430083c0e3132180321092a10000e4017301941353f0b0942480000740000800500060002000000140005000001fe000300ac0dff070180ff7fbd00140003003a000f00060007000600feff008002001400050000000d005800ff07d400ff0700000100050004000100000022000100140c0503030c1b041b48163060120930480160600200001224051802360900000c00028005000400020000004800008042000200163c512a1746052b4147264805381a150f53492e3e2a524c3e0501521a110d1e17305219422a0b2e48411c1d0154265334451200413e070a20163109013c00000c00008005000400010000002000038014000500060000012333f7ff150001000800c2d705000400000000007c0002800500060002000000080002004d3654513e0002001b24462e173e20111d0a2f0e534b3251084a2312282d4a39274308123b4520454b4c50323d03003749283728223156331154231615451f5751450000270002001d4c134740562f0e563f4017002232482e10010414413249420854504940061f4f172500"], 0x268}, 0x1, 0x0, 0x0, 0xd5}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_emit_ethernet(0x15a, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 5.270764225s ago: executing program 3 (id=1371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={0x0, 0x268}, 0x1, 0x0, 0x0, 0xd5}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_emit_ethernet(0x15a, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 4.301732172s ago: executing program 0 (id=1372): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close(0xffffffffffffffff) syz_usb_connect(0x1, 0x3d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe4f}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="59b6890a81fa539a0008050001000700"/28], 0x1c}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x37, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) 4.044839697s ago: executing program 4 (id=1373): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r8, 0x9d0, 0x4000000006, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0), 0x2, 0xa}}, 0x20) 3.41911335s ago: executing program 3 (id=1374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x4, 0x1, 0xbd, 0x7fff, 0x2a, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8, 0x7800, 0x8636, 0xffff}}) 2.549615476s ago: executing program 3 (id=1375): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r2, 0x0, @inherit={0x70, &(0x7f0000000180)={0x1, 0x5, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}, [0x9, 0x3, 0x7ff, 0x309, 0x9]}}, @name="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"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000006c0)={0x0, "2c1a2c3c689e1c386c681447aeaf524e"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000016c0)={{r1}, r2, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid=r3}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x10001}, &(0x7f00000003c0)=0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000440)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003740)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB=' \x00', @ANYRES32=r8, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES64=r7], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r8) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xb8, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c194) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]}) pipe(&(0x7f0000000000)) 2.404802841s ago: executing program 4 (id=1376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',t=', @ANYRESHEX=0x0, @ANYRESOCT], 0x4, 0x337, &(0x7f0000000540)="$eJzs3U1r1EAYB/D/ZN9tqbGtVDxWC55KWw+KCIr05hfwIMXabqE0VrAVrChWzyLeBMGjN8+iX0Ev4hfQUw/Fk16KSCMzmWRntzPZTV82u/T/g+7rPJlnkkwysxIDIjq2bsz+eH9xS/6JEoACgCuAB6AKFAGcxlj14er68npQX0xbUEFFyD+BKFLsKbOwWreFyjgVofnyXRGD5md0NMIwDH+2LfW7K7lQfkTU9/fwgIruner7atcz25fNDgpUupNKDzG2sNjBDh5hKM90iIgof/r87+mzxKAev3seMKHH4f10/o+ZM4im8c0O8ORk9/PpGcn534veh0KuH7VGRGO+p6Zwch168SzRtizrPhE2VncZ0Z7VtAFEu1mlysWrLS0H9clNtYAXuKYZxUbV4yLihiiubMvR07hlbpoire3pBlQbSrINJUf+I5lr/LyNN/bq5r52kJP4Ir6JOeHjLRaT8V8xFHLlqPXjAzUzIMp/yr1E1Uo/KtXUykbvO6UqORtvgU8fGq2sudZrFQWZi41cimgdv/txnq/L7igMNx8UdOum3a1TUSPWqJnk/V9r1GhrVG2pFNQnF+4HqT+lHBrrjE68ErfEOH7hI2aN8b8nS0/A3TOberlQJfWekdqeoirp2I5NVAe+l6lnEvAvjGQMe4m7uIyhtY3HK/NBUH+Q/4u4q/RIPtGOqHdH+Yl8NsqgKl+UABxapbthGFq/KuIQqijHqbpyLqmmXnqXNFkdZvVPKQerHZvROjS+uu4u3Dhsyk/iI0LGSlX4syRKni2yhP/Rta9t2HdIYWRYPtodMq5qPgjOJBuugEpHPaW2j0pvPl2ZD/ZzLKJ+Y/SXsdvbV/NOh7pPjrtENP8z5itT6qgjH/yU2UjbUYexxGnHDGhYPZ7obAaXLNY5ThyIXwT1mbQ517kLwPmWGj3ENT5vXayv80Qv/qtkxZZWLS1CzOI77vD3fyIiIiIiIiIiIiIiIiIiIiIiIiKifpP1agT35QS7+jok+5UYDVvH8D/eICIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6GOP+v0BB3TGmnPv9fwsd3P9XtL3FJxG18T8AAP//uTRlfg==") bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tracing}, 0x40) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) io_uring_setup(0x4760, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) fcntl$setstatus(r6, 0x4, 0x2000) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) r7 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000000)={r7}, 0x1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800888, &(0x7f0000000540)=ANY=[], 0xff, 0x222, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZAQpYGEQYLjAwMrEwMDDIM0LEPjJB6KlQ+iaUZoPKX4HSvlDxdpi8eVVEFAMDY6bSPTOmA+IpiowCDDwiX089YEhm4I9lsJznveZSUOaUq0Jvl+4HqfcKrdzEwKaewr9ozoYJTjN5wcYyRkb9RTKH+YDMLA6QQQwMDJP/RNx7wCLJIIJklijHP7FTLctXmXXeZ5jRMS2NgZET6jPdmXYGvN1MUDOLK6uyE3NyUouKzzCgmj+ZkZ1JkRGk7szfq8EPGO0YumMZGBnkNvirLf72R6pyI8juqoiaqd1NN5euj2PYpv/3ionU+4kZYf8fHBLUssjL/zBPRun75oY5H2rqnpg4djYqz+Vvvfz33fuY2uIENabH4l2FbPwJblo1n5yd3Cwfz02vbt9SrLggK81l4rGpF/8mHF/LwDD5whNb/Zozh+IVYzil3Crnxtx1ixfkWqZ+vu4NA8PBqM8TGRiXM+5nYmCYGcbGgOyv8gZoZDAwMzAwqDAwMPAzsDCkZeakGngwMDIwQzmGLFBVMNVMDBxgCb3k/JyUdgZGBkaYtuUMLAxMMG2PGVjhHCNkjrFFA6qBEMtBwANKL4fSj6G0PFqyYWkARVU/lKfRwMDAxlCRWFJSZMjGwABlwcWM4GJGAg0McE9AbJ3LhOqW40wMo2AUjIJRMApGwSgYBaNgFIyCUTCSASAAAP//dr6ymA==") 2.170940704s ago: executing program 2 (id=1377): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 2.022217459s ago: executing program 2 (id=1378): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791095000000000063000003000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x20050800) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x30}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fff, @remote, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 1.315307519s ago: executing program 3 (id=1379): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x1000, &(0x7f0000001540)=""/4096}) 1.226578958s ago: executing program 4 (id=1380): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 1.093488732s ago: executing program 3 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0xd5}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_emit_ethernet(0x15a, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id']) 1.092560242s ago: executing program 2 (id=1382): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r9, 0x9d0, 0x4000000006, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0), 0x2, 0xa}}, 0x20) 902.45102ms ago: executing program 0 (id=1383): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4440, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000a40)="e3", 0x1, 0xe7c) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) 945.58µs ago: executing program 2 (id=1384): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "fd918f"}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sync_file_range(r9, 0x9d0, 0x4000000006, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0), 0x2, 0xa}}, 0x20) 0s ago: executing program 3 (id=1385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',t=', @ANYRESHEX=0x0, @ANYRESOCT], 0x4, 0x337, &(0x7f0000000540)="$eJzs3U1r1EAYB/D/ZN9tqbGtVDxWC55KWw+KCIr05hfwIMXabqE0VrAVrChWzyLeBMGjN8+iX0Ev4hfQUw/Fk16KSCMzmWRntzPZTV82u/T/g+7rPJlnkkwysxIDIjq2bsz+eH9xS/6JEoACgCuAB6AKFAGcxlj14er68npQX0xbUEFFyD+BKFLsKbOwWreFyjgVofnyXRGD5md0NMIwDH+2LfW7K7lQfkTU9/fwgIruner7atcz25fNDgpUupNKDzG2sNjBDh5hKM90iIgof/r87+mzxKAev3seMKHH4f10/o+ZM4im8c0O8ORk9/PpGcn534veh0KuH7VGRGO+p6Zwch168SzRtizrPhE2VncZ0Z7VtAFEu1mlysWrLS0H9clNtYAXuKYZxUbV4yLihiiubMvR07hlbpoire3pBlQbSrINJUf+I5lr/LyNN/bq5r52kJP4Ir6JOeHjLRaT8V8xFHLlqPXjAzUzIMp/yr1E1Uo/KtXUykbvO6UqORtvgU8fGq2sudZrFQWZi41cimgdv/txnq/L7igMNx8UdOum3a1TUSPWqJnk/V9r1GhrVG2pFNQnF+4HqT+lHBrrjE68ErfEOH7hI2aN8b8nS0/A3TOberlQJfWekdqeoirp2I5NVAe+l6lnEvAvjGQMe4m7uIyhtY3HK/NBUH+Q/4u4q/RIPtGOqHdH+Yl8NsqgKl+UABxapbthGFq/KuIQqijHqbpyLqmmXnqXNFkdZvVPKQerHZvROjS+uu4u3Dhsyk/iI0LGSlX4syRKni2yhP/Rta9t2HdIYWRYPtodMq5qPgjOJBuugEpHPaW2j0pvPl2ZD/ZzLKJ+Y/SXsdvbV/NOh7pPjrtENP8z5itT6qgjH/yU2UjbUYexxGnHDGhYPZ7obAaXLNY5ThyIXwT1mbQ517kLwPmWGj3ENT5vXayv80Qv/qtkxZZWLS1CzOI77vD3fyIiIiIiIiIiIiIiIiIiIiIiIiKifpP1agT35QS7+jok+5UYDVvH8D/eICIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6GOP+v0BB3TGmnPv9fwsd3P9XtL3FJxG18T8AAP//uTRlfg==") bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tracing}, 0x40) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) io_uring_setup(0x4760, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) fcntl$setstatus(r6, 0x4, 0x2000) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) r7 = io_uring_setup(0x7fd0, &(0x7f00000004c0)={0x0, 0x3ed8, 0x2, 0x1, 0x20f}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000000)={r7}, 0x1) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800888, &(0x7f0000000540)=ANY=[], 0xff, 0x222, &(0x7f0000000780)="$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") kernel console output (not intermixed with test programs): op1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 365.496850][ T9287] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 365.551345][ T9287] BTRFS info (device loop1): using free space tree [ 365.614230][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 365.813800][ T9287] BTRFS info (device loop1): enabling ssd optimizations [ 365.841368][ T9287] BTRFS info (device loop1): auto enabling async discard [ 365.941331][ T9] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 366.141759][ T5784] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 366.155125][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 366.170195][ T9] usb 4-1: config 0 has no interface number 0 [ 366.184727][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 366.198818][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 366.266839][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 366.278165][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 366.305915][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.350673][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 366.368137][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.413299][ T9] usb 4-1: config 0 descriptor?? [ 366.439290][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 366.453936][ T5885] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (5885) [ 366.659146][ T9310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.684724][ T9310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.301901][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 368.510383][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 368.658435][ T9362] loop1: detected capacity change from 0 to 512 [ 368.726810][ T9362] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 368.753572][ T9362] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.879909][ T9362] FAT-fs (loop1): FAT read failed (blocknr 128) [ 370.038717][ T27] usb 4-1: USB disconnect, device number 22 [ 370.913778][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 371.697466][ T9409] netlink: 52 bytes leftover after parsing attributes in process `syz.1.885'. [ 371.866783][ T9415] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 373.230317][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 373.534739][ T9430] xt_hashlimit: max too large, truncated to 1048576 [ 373.630235][ T5891] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 373.887498][ T8] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 373.936361][ T9439] loop0: detected capacity change from 0 to 64 [ 373.944675][ T9439] hfs: creator requires a 4 character value [ 373.950880][ T9439] hfs: unable to parse mount options [ 374.527838][ T5891] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.546943][ T5891] usb 4-1: config 0 has no interface number 0 [ 374.553498][ T5891] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 374.567816][ T8] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 375.379883][ T5891] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 375.390940][ T8] usb 3-1: config 0 has no interface number 0 [ 375.397154][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 375.415085][ T9441] loop0: detected capacity change from 0 to 8 [ 375.427451][ T9441] Page size > filesystem block size (0). This is currently not supported! [ 375.437206][ T5891] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 375.450343][ T8] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 375.461284][ T5891] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.474595][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 375.485834][ T5891] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 375.495202][ T8] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.508680][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.518204][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 375.532387][ T5891] usb 4-1: config 0 descriptor?? [ 375.541306][ T9420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 375.600464][ T9420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 375.675708][ T5891] ldusb 4-1:0.55: Interrupt in endpoint not found [ 375.685625][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.701478][ T8] usb 3-1: config 0 descriptor?? [ 375.734995][ T9447] loop1: detected capacity change from 0 to 64 [ 375.743140][ T9447] hfs: creator requires a 4 character value [ 375.749112][ T9447] hfs: unable to parse mount options [ 375.819355][ T8] usb 3-1: can't set config #0, error -71 [ 375.841519][ T5891] usb 4-1: USB disconnect, device number 23 [ 375.862468][ T9449] netlink: 52 bytes leftover after parsing attributes in process `syz.0.898'. [ 375.878393][ T8] usb 3-1: USB disconnect, device number 20 [ 375.995977][ T9450] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 376.069424][ T9447] loop1: detected capacity change from 0 to 8 [ 376.078940][ T9447] Page size > filesystem block size (0). This is currently not supported! [ 376.346199][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 376.379140][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 376.969256][ T9458] loop3: detected capacity change from 0 to 32768 [ 376.987144][ T9458] XFS: noikeep mount option is deprecated. [ 377.137650][ T9478] netlink: 168 bytes leftover after parsing attributes in process `syz.0.909'. [ 377.147938][ T9478] tipc: Started in network mode [ 377.153373][ T9478] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 377.159361][ T9458] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 377.162352][ T9478] tipc: Enabling of bearer rejected, failed to enable media [ 377.814750][ T9458] XFS (loop3): Ending clean mount [ 377.828837][ T9458] XFS (loop3): Quotacheck needed: Please wait. [ 377.860635][ T27] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 377.898640][ T9458] XFS (loop3): Quotacheck: Done. [ 378.144460][ T9492] loop1: detected capacity change from 0 to 64 [ 378.154241][ T9492] hfs: creator requires a 4 character value [ 378.160348][ T9492] hfs: unable to parse mount options [ 378.167971][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.297456][ T9494] netlink: 52 bytes leftover after parsing attributes in process `syz.0.914'. [ 378.369089][ T9495] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 378.386945][ T27] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 378.402297][ T9492] loop1: detected capacity change from 0 to 8 [ 378.410345][ T9492] Page size > filesystem block size (0). This is currently not supported! [ 378.524684][ T27] usb 3-1: config 0 has no interface number 0 [ 378.532125][ T27] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 378.544437][ T27] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 378.555162][ T27] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 378.567298][ T27] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 378.580737][ T27] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 378.589844][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.616511][ T27] usb 3-1: config 0 descriptor?? [ 378.622963][ T9473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.632104][ T9473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.644336][ T27] ldusb 3-1:0.55: Interrupt in endpoint not found [ 379.557171][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.565339][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.970175][ T27] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 380.160511][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 380.196937][ T27] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 380.225473][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.244271][ T27] usb 1-1: Product: syz [ 380.248908][ T27] usb 1-1: Manufacturer: syz [ 380.257067][ T27] usb 1-1: SerialNumber: syz [ 380.303233][ T27] usb 1-1: config 0 descriptor?? [ 380.542348][ T27] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 380.686591][ T5788] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 380.783194][ T9528] netlink: 'syz.1.924': attribute type 11 has an invalid length. [ 380.799583][ T9528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.924'. [ 380.947924][ T27] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 380.965678][ T27] usb 1-1: USB disconnect, device number 21 [ 381.304746][ T9543] loop1: detected capacity change from 0 to 64 [ 381.313190][ T9543] hfs: creator requires a 4 character value [ 381.319160][ T9543] hfs: unable to parse mount options [ 381.364221][ T5885] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.548004][ T5891] usb 3-1: USB disconnect, device number 21 [ 381.580355][ T8] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 381.657196][ T9545] loop1: detected capacity change from 0 to 8 [ 381.667802][ T9545] Page size > filesystem block size (0). This is currently not supported! [ 381.703243][ T5789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.803166][ T8] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 381.822050][ T8] usb 4-1: config 0 has no interface number 0 [ 381.837375][ T8] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 381.858607][ T8] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 381.874357][ T8] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 381.885331][ T8] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.898867][ T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 381.908323][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.922263][ T8] usb 4-1: config 0 descriptor?? [ 381.938112][ T9544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.946481][ T9544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 381.959983][ T8] ldusb 4-1:0.55: Interrupt in endpoint not found [ 381.984729][ T9555] loop0: detected capacity change from 0 to 64 [ 381.992416][ T9555] hfs: creator requires a 4 character value [ 381.998582][ T9555] hfs: unable to parse mount options [ 382.760342][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 382.945503][ T9565] loop2: detected capacity change from 0 to 1024 [ 382.990285][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 383.068349][ T9565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.171727][ T9565] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.2.934: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 383.219010][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.249863][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 383.279950][ T9565] EXT4-fs (loop2): Remounting filesystem read-only [ 383.292444][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 383.325491][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.338309][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.384694][ T9] usb 2-1: config 0 descriptor?? [ 383.425827][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 383.441081][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 383.462461][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 383.482484][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 383.489668][ T9] usb 2-1: media controller created [ 383.512451][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.532570][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 383.539193][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 383.586121][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 383.637591][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 383.670737][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 383.699742][ T9] usb 2-1: USB disconnect, device number 19 [ 383.791347][ T788] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 383.802902][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 384.001863][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.012445][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.022259][ T788] usb 3-1: config 1 has no interface number 0 [ 384.028641][ T788] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.042063][ T788] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 384.051700][ T788] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.067926][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.077648][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.100165][ T788] usb 3-1: Product: syz [ 384.104396][ T788] usb 3-1: Manufacturer: syz [ 384.109024][ T788] usb 3-1: SerialNumber: syz [ 384.200156][ T27] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 384.382365][ T27] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 384.391512][ T27] usb 1-1: config 0 has no interface number 0 [ 384.397758][ T27] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 384.415170][ T27] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 384.426535][ T27] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 384.438730][ T27] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.455971][ T27] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 384.465936][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.467989][ T9587] Bluetooth: MGMT ver 1.22 [ 384.479778][ T27] usb 1-1: config 0 descriptor?? [ 384.498365][ T9584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.511349][ T9584] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 384.524053][ T27] ldusb 1-1:0.55: Interrupt in endpoint not found [ 384.736628][ T788] cdc_ncm 3-1:1.1: bind() failure [ 384.759069][ T788] usb 3-1: USB disconnect, device number 22 [ 384.830388][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 385.315627][ T9599] loop1: detected capacity change from 0 to 512 [ 385.337566][ T9599] EXT4-fs: Ignoring removed nobh option [ 385.452548][ T9599] EXT4-fs error (device loop1): ext4_do_update_inode:5236: inode #3: comm syz.1.944: corrupted inode contents [ 385.481773][ T9599] EXT4-fs error (device loop1): ext4_dirty_inode:6112: inode #3: comm syz.1.944: mark_inode_dirty error [ 385.524891][ T9599] EXT4-fs error (device loop1): ext4_do_update_inode:5236: inode #3: comm syz.1.944: corrupted inode contents [ 385.543119][ T9599] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.944: mark_inode_dirty error [ 385.561724][ T9599] Quota error (device loop1): write_blk: dquota write failed [ 385.571468][ T9599] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 385.582358][ T9599] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.944: Failed to acquire dquot type 0 [ 385.598231][ T9599] EXT4-fs error (device loop1): ext4_do_update_inode:5236: inode #16: comm syz.1.944: corrupted inode contents [ 385.685026][ T9599] EXT4-fs error (device loop1): ext4_dirty_inode:6112: inode #16: comm syz.1.944: mark_inode_dirty error [ 385.721286][ T9599] EXT4-fs error (device loop1): ext4_do_update_inode:5236: inode #16: comm syz.1.944: corrupted inode contents [ 385.900987][ T9599] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.944: mark_inode_dirty error [ 386.018532][ T9599] EXT4-fs error (device loop1): ext4_do_update_inode:5236: inode #16: comm syz.1.944: corrupted inode contents [ 386.140019][ T9599] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 386.194370][ T788] usb 4-1: USB disconnect, device number 24 [ 386.264352][ T9599] EXT4-fs error (device loop1): ext4_do_update_inode:5236: inode #16: comm syz.1.944: corrupted inode contents [ 386.463491][ T9599] EXT4-fs error (device loop1): ext4_truncate:4294: inode #16: comm syz.1.944: mark_inode_dirty error [ 386.481942][ T9599] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 386.516450][ T9599] EXT4-fs (loop1): 1 truncate cleaned up [ 386.527153][ T9599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.542045][ T9599] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.639234][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.850390][ T23] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 386.937163][ T9] usb 1-1: USB disconnect, device number 22 [ 387.040251][ T788] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 387.044091][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.057413][ T23] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 387.067499][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.080269][ T23] usb 3-1: config 0 descriptor?? [ 387.104235][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 387.114304][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.124578][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 387.134946][ T5891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 387.136968][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.153424][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 387.163353][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.174918][ T9619] dummy0: entered promiscuous mode [ 387.183004][ T9619] dummy0: left promiscuous mode [ 387.249294][ T788] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.262276][ T788] usb 4-1: config 0 has no interface number 0 [ 387.268617][ T788] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 387.285533][ T788] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 387.296878][ T788] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.307821][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.328540][ T788] usb 4-1: config 0 descriptor?? [ 387.337196][ T9611] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 387.355284][ T5891] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 387.384220][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.399544][ T788] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 387.421504][ T5891] usb 2-1: Product: syz [ 387.426235][ T5891] usb 2-1: Manufacturer: syz [ 387.436138][ T5891] usb 2-1: SerialNumber: syz [ 387.455536][ T5891] usb 2-1: config 0 descriptor?? [ 387.468770][ T5891] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 387.492687][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.508529][ T23] ortek 0003:1223:3F07.0005: unbalanced collection at end of report description [ 387.519269][ T5891] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 387.526984][ T23] ortek: probe of 0003:1223:3F07.0005 failed with error -22 [ 387.529948][ T5891] usb 2-1: media controller created [ 387.591863][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 387.613672][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.624086][ T788] usb 4-1: USB disconnect, device number 25 [ 387.674619][ T9617] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 387.707380][ T23] usb 3-1: USB disconnect, device number 23 [ 387.781383][ T5891] DVB: Unable to find symbol mt352_attach() [ 387.829781][ T5891] DVB: Unable to find symbol nxt6000_attach() [ 387.840103][ T5891] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 387.863040][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 387.878650][ T5891] dvb-usb: schedule remote query interval to 1000 msecs. [ 387.886436][ T5891] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 387.897255][ T5891] dvb-usb: bulk message failed: -22 (7/0) [ 387.903557][ T5891] dvb-usb: bulk message failed: -22 (7/0) [ 387.914382][ T5891] usb 2-1: USB disconnect, device number 20 [ 387.943732][ T9621] loop0: detected capacity change from 0 to 32768 [ 387.979638][ T5891] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 388.022784][ T9621] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 388.125214][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 388.530315][ T5891] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 388.670334][ T788] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 388.811097][ T5891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.849750][ T5891] usb 4-1: config 0 has no interface number 0 [ 388.888837][ T788] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 388.912034][ T5891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 388.945739][ T788] usb 1-1: config 0 has no interface number 0 [ 388.974716][ T5891] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 388.989761][ T788] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.038688][ T5891] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.063549][ T788] usb 1-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.098207][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.118505][ T788] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 389.172928][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.207997][ T5891] usb 4-1: config 0 descriptor?? [ 389.215718][ T9627] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 389.224727][ T788] usb 1-1: config 0 descriptor?? [ 389.281004][ T5891] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 389.376222][ T9640] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 389.510216][ T5891] usb 4-1: USB disconnect, device number 26 [ 389.607087][ T9647] loop2: detected capacity change from 0 to 64 [ 389.614835][ T9647] hfs: creator requires a 4 character value [ 389.620953][ T9647] hfs: unable to parse mount options [ 389.766322][ T788] logitech-djreceiver 0003:046D:C534.0006: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input28 [ 389.904295][ T5871] usb 1-1: USB disconnect, device number 23 [ 390.015313][ T9650] loop2: detected capacity change from 0 to 8 [ 390.057790][ T9650] Page size > filesystem block size (0). This is currently not supported! [ 390.874296][ T28] audit: type=1326 audit(1761037956.234:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3564f8efc9 code=0x7ffc0000 [ 390.926568][ T28] audit: type=1326 audit(1761037956.264:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f3564f8efc9 code=0x7ffc0000 [ 390.926625][ T28] audit: type=1326 audit(1761037956.264:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9655 comm="syz.0.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3564f8efc9 code=0x7ffc0000 [ 391.514593][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 392.055302][ T9672] loop1: detected capacity change from 0 to 64 [ 392.063017][ T9672] hfs: creator requires a 4 character value [ 392.068976][ T9672] hfs: unable to parse mount options [ 392.101894][ T5885] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 392.376993][ T9683] loop0: detected capacity change from 0 to 64 [ 392.388895][ T9683] hfs: creator requires a 4 character value [ 392.396247][ T9683] hfs: unable to parse mount options [ 392.407010][ T9681] loop1: detected capacity change from 0 to 8 [ 392.414816][ T9681] Page size > filesystem block size (0). This is currently not supported! [ 392.472371][ T5800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 392.490274][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 392.692355][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.720143][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.729978][ T27] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 392.750206][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.771640][ T27] usb 3-1: config 0 descriptor?? [ 392.936747][ T9686] loop0: detected capacity change from 0 to 8 [ 393.017332][ T9686] Page size > filesystem block size (0). This is currently not supported! [ 393.153139][ T5885] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.244163][ T27] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 393.286304][ T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0007/input/input12 [ 393.496776][ T27] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 393.531405][ T27] usb 3-1: USB disconnect, device number 24 [ 393.619445][ T9696] fido_id[9696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 393.710458][ T788] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 393.912000][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.938932][ T788] usb 4-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 393.970244][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.991638][ T788] usb 4-1: config 0 descriptor?? [ 394.233563][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 394.287016][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 394.534436][ T9710] loop2: detected capacity change from 0 to 64 [ 394.542385][ T9710] hfs: creator requires a 4 character value [ 394.548429][ T9710] hfs: unable to parse mount options [ 395.111263][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 395.240176][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 395.273938][ T5891] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 395.314585][ T5891] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 395.329056][ T9711] loop2: detected capacity change from 0 to 8 [ 395.330677][ T788] wacom 0003:056A:032B.0008: hidraw0: USB HID v0.04 Device [HID 056a:032b] on usb-dummy_hcd.3-1/input0 [ 395.350347][ T5891] usb 2-1: config 0 has no interface number 0 [ 395.363237][ T9711] Page size > filesystem block size (0). This is currently not supported! [ 395.374454][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 395.396228][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.405081][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.437058][ T5891] usb 2-1: Product: syz [ 395.449012][ T5891] usb 2-1: Manufacturer: syz [ 395.459278][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.476249][ T5891] usb 2-1: SerialNumber: syz [ 395.490939][ T5891] usb 2-1: config 0 descriptor?? [ 395.508286][ T5891] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 395.519239][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.550218][ T5891] usb 2-1: No valid video chain found. [ 395.580386][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.607742][ T5891] usb 4-1: USB disconnect, device number 27 [ 395.665092][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.744579][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.767747][ T788] usb 2-1: USB disconnect, device number 21 [ 395.783952][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.826157][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.846979][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 395.866711][ T9714] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 396.264691][ T9722] loop0: detected capacity change from 0 to 4096 [ 396.284758][ T9724] loop3: detected capacity change from 0 to 64 [ 396.294298][ T9722] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 396.309297][ T9724] hfs: creator requires a 4 character value [ 396.315749][ T9722] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 396.326405][ T9724] hfs: unable to parse mount options [ 396.333089][ T9722] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 396.349275][ T9722] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 396.443570][ T9722] ntfs: volume version 3.1. [ 396.478542][ T9722] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 396.511922][ T9722] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 396.535764][ T9722] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 396.819692][ T9730] loop1: detected capacity change from 0 to 64 [ 396.935707][ T9730] syz.1.988: attempt to access beyond end of device [ 396.935707][ T9730] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 396.959460][ T9730] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 397.092235][ T9730] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 397.217751][ T9730] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 397.393821][ T9730] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 397.870352][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 397.922594][ T9724] loop3: detected capacity change from 0 to 8 [ 397.973801][ T9724] Page size > filesystem block size (0). This is currently not supported! [ 398.995018][ T9728] loop2: detected capacity change from 0 to 32768 [ 399.139357][ T2933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.151458][ T2933] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.275361][ T27] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 399.280509][ T788] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 399.308746][ T2933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.332733][ T2933] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.468755][ T2933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.494210][ T27] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 399.494647][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.510125][ T2933] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.533922][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.545085][ T788] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.547023][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.591893][ T788] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.598592][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.623657][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.634908][ T788] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 399.665800][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.679718][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.679736][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.707573][ T2933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.718887][ T2933] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.725585][ T788] usb 4-1: config 0 descriptor?? [ 399.738948][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.748398][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.758369][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.782430][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.791066][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.822973][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.854641][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.881695][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.910454][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 399.939464][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 399.970698][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 399.979766][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.043944][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 400.065764][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.081563][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.117821][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 400.145502][ T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.162445][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 400.200506][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 400.216520][ T27] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 400.231165][ T788] kye 0003:0458:5019.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 400.252767][ T27] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 400.271278][ T27] usb 1-1: Product: syz [ 400.276081][ T788] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 400.281285][ T27] usb 1-1: Manufacturer: syz [ 400.290689][ T788] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 400.299689][ T27] usb 1-1: SerialNumber: syz [ 400.319237][ T27] usb 1-1: config 0 descriptor?? [ 400.325451][ T788] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 400.332538][ T788] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 400.340339][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 400.355539][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 400.364603][ T788] kye 0003:0458:5019.0009: unknown main item tag 0x0 [ 400.369939][ T27] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 400.371811][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 400.392176][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 400.409249][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 400.418803][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 400.427446][ T788] kye 0003:0458:5019.0009: hidraw0: USB HID v0.09 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 400.440780][ T788] kye 0003:0458:5019.0009: tablet-enabling feature report not found [ 400.450828][ T788] kye 0003:0458:5019.0009: tablet enabling failed [ 400.532722][ T788] usb 4-1: USB disconnect, device number 28 [ 400.616973][ T9763] fido_id[9763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 400.775205][ T5891] usb 1-1: USB disconnect, device number 24 [ 400.793839][ T5891] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 401.956271][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 402.280180][ T27] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 402.511981][ T5796] Bluetooth: hci1: command tx timeout [ 402.557878][ T27] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 402.674595][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.777786][ T27] usb 1-1: Product: syz [ 402.856788][ T27] usb 1-1: Manufacturer: syz [ 402.862505][ T27] usb 1-1: SerialNumber: syz [ 402.903142][ T27] usb 1-1: config 0 descriptor?? [ 403.258562][ T27] usb 1-1: USB disconnect, device number 25 [ 403.272308][ T2933] dvmrp17 (unregistering): left allmulticast mode [ 403.290460][ T5891] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 403.326672][ T9759] chnl_net:caif_netlink_parms(): no params data found [ 403.370208][ T788] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 403.482728][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.499227][ T5891] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 403.508675][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.540955][ T5891] usb 3-1: config 0 descriptor?? [ 403.580290][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 403.605142][ T788] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 403.618820][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.652557][ T788] usb 4-1: Product: syz [ 403.656908][ T788] usb 4-1: Manufacturer: syz [ 403.691653][ T788] usb 4-1: SerialNumber: syz [ 403.723182][ T788] usb 4-1: config 0 descriptor?? [ 403.796055][ T788] gspca_main: se401-2.14.0 probing 047d:5003 [ 403.812482][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.834037][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.847437][ T9759] bridge_slave_0: entered allmulticast mode [ 403.859498][ T9759] bridge_slave_0: entered promiscuous mode [ 403.892041][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.899348][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.940559][ T9759] bridge_slave_1: entered allmulticast mode [ 403.960222][ T9759] bridge_slave_1: entered promiscuous mode [ 403.974552][ T5891] kye 0003:0458:5016.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 404.022255][ T5891] kye 0003:0458:5016.000A: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 404.033649][ T5891] kye 0003:0458:5016.000A: tablet-enabling feature report not found [ 404.043431][ T5891] kye 0003:0458:5016.000A: tablet enabling failed [ 404.130373][ T2933] hsr_slave_0: left promiscuous mode [ 404.179951][ T2933] hsr_slave_1: left promiscuous mode [ 404.196824][ T9] usb 3-1: USB disconnect, device number 25 [ 404.212774][ T788] gspca_se401: Wrong descriptor type [ 404.229350][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.242777][ T9817] fido_id[9817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 404.255144][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.286765][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.306031][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.324615][ T2933] dummy0: left allmulticast mode [ 404.329916][ T2933] dummy0: left promiscuous mode [ 404.342521][ T2933] bridge0: port 3(dummy0) entered disabled state [ 404.355551][ T2933] bridge_slave_1: left allmulticast mode [ 404.361731][ T2933] bridge_slave_1: left promiscuous mode [ 404.367540][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.378967][ T2933] bridge_slave_0: left allmulticast mode [ 404.387190][ T2933] bridge_slave_0: left promiscuous mode [ 404.394333][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.420937][ T5891] usb 4-1: USB disconnect, device number 29 [ 404.446147][ T2933] veth1_macvtap: left promiscuous mode [ 404.453222][ T2933] veth0_macvtap: left promiscuous mode [ 404.459022][ T2933] veth1_vlan: left promiscuous mode [ 404.466541][ T2933] veth0_vlan: left promiscuous mode [ 404.590306][ T5796] Bluetooth: hci1: command tx timeout [ 405.104437][ T5825] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 405.290155][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 405.311469][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 405.313487][ T5825] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 405.334497][ T5825] usb 3-1: config 0 has no interface number 0 [ 405.344190][ T5825] usb 3-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10 [ 405.355188][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.363434][ T5825] usb 3-1: Product: syz [ 405.367664][ T5825] usb 3-1: Manufacturer: syz [ 405.372463][ T5825] usb 3-1: SerialNumber: syz [ 405.392017][ T5825] usb 3-1: config 0 descriptor?? [ 405.407913][ T5825] usb-storage 3-1:0.107: USB Mass Storage device detected [ 405.408456][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 405.440728][ T5825] usb-storage 3-1:0.107: Quirks match for vid 04b8 pid 0602: 1 [ 405.491797][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 405.501191][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 405.527572][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 405.549810][ T9] usb 4-1: config 0 has no interface number 0 [ 405.559122][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 405.573504][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 405.583497][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.592056][ T9] usb 4-1: Product: syz [ 405.596396][ T9] usb 4-1: Manufacturer: syz [ 405.601623][ T9] usb 4-1: SerialNumber: syz [ 405.610554][ T9] usb 4-1: config 0 descriptor?? [ 405.623420][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.656768][ T5825] usb 3-1: USB disconnect, device number 26 [ 405.713855][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.275821][ T9] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 406.292808][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 406.308679][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 406.318105][ T9] f81534: probe of 4-1:0.12 failed with error -71 [ 406.338683][ T9] usb 4-1: USB disconnect, device number 30 [ 406.703327][ T5796] Bluetooth: hci1: command tx timeout [ 407.271570][ T9834] loop3: detected capacity change from 0 to 1024 [ 407.365787][ T9834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.387128][ T9834] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.281962][ T2933] bond0 (unregistering): Released all slaves [ 408.309491][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.490883][ T9846] loop2: detected capacity change from 0 to 4096 [ 408.664452][ T9759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.722095][ T9759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.750268][ T5796] Bluetooth: hci1: command tx timeout [ 408.978979][ T9759] team0: Port device team_slave_0 added [ 408.993433][ T9759] team0: Port device team_slave_1 added [ 409.167191][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.210288][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.277329][ T9759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.310905][ T9864] Bluetooth: MGMT ver 1.22 [ 409.327167][ T9759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.369948][ T9759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.462555][ T9759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.967239][ T9877] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1021'. [ 410.177937][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 410.448876][ T9759] hsr_slave_0: entered promiscuous mode [ 410.475097][ T9759] hsr_slave_1: entered promiscuous mode [ 410.619564][ T2933] IPVS: stop unused estimator thread 0... [ 410.750720][ T9] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 410.942379][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 410.961939][ T8] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 410.984501][ T9] usb 4-1: config 0 has no interface number 0 [ 410.993217][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 411.004522][ T9] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 411.027369][ T9759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.052015][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 411.212128][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 411.324219][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.456887][ T9759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.476476][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 411.506371][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 411.561376][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.572241][ T8] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 411.597135][ T9759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.615324][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.625891][ T9] usb 4-1: config 0 descriptor?? [ 411.644811][ T9759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.651849][ T9885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.659247][ T9885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 411.675454][ T8] usb 1-1: config 0 descriptor?? [ 411.694994][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 411.708641][ T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 411.736546][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 411.764473][ T8] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 411.786535][ T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 411.804548][ T8] usb 1-1: media controller created [ 411.860892][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.929230][ T9893] dvb-usb: bulk message failed: -22 (2/0) [ 411.973913][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 411.979857][ T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 412.024429][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 412.059820][ T8] dvb-usb: schedule remote query interval to 150 msecs. [ 412.095719][ T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 412.162409][ T27] hid-generic 0000:0000:0000.000B: item fetching failed at offset 0/1 [ 412.183221][ T8] usb 1-1: USB disconnect, device number 26 [ 412.199794][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.199801][ T27] hid-generic: probe of 0000:0000:0000.000B failed with error -22 [ 412.249724][ T9759] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.287434][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 412.335016][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.342415][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.369664][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.376989][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.760945][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 412.980986][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 413.007935][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.034088][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.057947][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.075935][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.100129][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.115777][ T9759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.144389][ T27] usb 3-1: config 0 descriptor?? [ 413.331615][ T5825] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 413.550878][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 413.575275][ T5825] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 413.598695][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.611837][ T27] microsoft 0003:045E:07DA.000C: item 0 4 0 11 parsing failed [ 413.627978][ T5825] usb 1-1: Product: syz [ 413.633879][ T27] microsoft 0003:045E:07DA.000C: parse failed [ 413.651541][ T5825] usb 1-1: Manufacturer: syz [ 413.656430][ T27] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 413.666685][ T5825] usb 1-1: SerialNumber: syz [ 413.691030][ T5825] r8152-cfgselector 1-1: config 0 descriptor?? [ 413.875809][ T27] usb 3-1: USB disconnect, device number 27 [ 413.932522][ T9759] veth0_vlan: entered promiscuous mode [ 413.974517][ T9759] veth1_vlan: entered promiscuous mode [ 414.098092][ T9759] veth0_macvtap: entered promiscuous mode [ 414.134355][ T9759] veth1_macvtap: entered promiscuous mode [ 414.145177][ T5825] r8152-cfgselector 1-1: Unknown version 0x0000 [ 414.172364][ T5825] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 414.198117][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.237748][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.265265][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.300640][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.315574][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.343587][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.373477][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.402500][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.413376][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.423564][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.450282][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.475108][ T9759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.503274][ T9759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.534912][ T9759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.559718][ T9759] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.568825][ T9759] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.591429][ T9759] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.604724][ T9759] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.825134][ T5892] usb 4-1: USB disconnect, device number 31 [ 414.836126][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.869826][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.870540][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 414.936902][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.957519][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.100585][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 415.138531][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 415.167915][ T8] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.180276][ T5825] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 415.183124][ T8] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.206669][ T8] usb 3-1: Product: syz [ 415.400199][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 415.416413][ T8] usb 3-1: Manufacturer: syz [ 415.421908][ T8] usb 3-1: SerialNumber: syz [ 415.441741][ T8] usb 3-1: config 0 descriptor?? [ 415.447673][ T9963] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 415.454309][ T5825] usb 1-1: config 5 has an invalid interface number: 165 but max is 1 [ 415.461494][ T8] hub 3-1:0.0: bad descriptor, ignoring hub [ 415.469068][ T8] hub: probe of 3-1:0.0 failed with error -5 [ 415.475406][ T5825] usb 1-1: config 5 has an invalid interface number: 40 but max is 1 [ 415.475434][ T5825] usb 1-1: config 5 has no interface number 0 [ 415.475452][ T5825] usb 1-1: config 5 has no interface number 1 [ 415.475509][ T5825] usb 1-1: config 5 interface 165 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 415.475534][ T5825] usb 1-1: config 5 interface 165 altsetting 3 bulk endpoint 0x4 has invalid maxpacket 1023 [ 415.475559][ T5825] usb 1-1: config 5 interface 165 altsetting 3 endpoint 0xA has invalid maxpacket 1032, setting to 64 [ 415.475588][ T5825] usb 1-1: config 5 interface 165 altsetting 3 bulk endpoint 0xE has invalid maxpacket 32 [ 415.475613][ T5825] usb 1-1: config 5 interface 165 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 415.475636][ T5825] usb 1-1: config 5 interface 165 altsetting 3 endpoint 0x7 has invalid maxpacket 991, setting to 64 [ 415.475674][ T5825] usb 1-1: config 5 interface 165 has no altsetting 0 [ 415.971281][ T9979] tipc: Started in network mode [ 416.050218][ T9979] tipc: Node identity , cluster identity 4711 [ 416.107272][ T9979] tipc: Failed to set node id, please configure manually [ 416.128233][ T9979] tipc: Enabling of bearer rejected, failed to enable media [ 416.197530][ T5825] usb 1-1: config 5 interface 40 has no altsetting 0 [ 416.220486][ T23] usb 3-1: USB disconnect, device number 28 [ 416.285813][ T5825] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01e6, bcdDevice=7c.9b [ 416.306006][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.328736][ T5825] usb 1-1: Product: syz [ 416.344938][ T5825] usb 1-1: Manufacturer: syz [ 416.349723][ T5825] usb 1-1: SerialNumber: syz [ 416.436608][ T9966] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.468133][ T9966] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.733266][ T5796] Bluetooth: hci0: unknown advertising packet type: 0x93 [ 416.733349][ T5796] Bluetooth: hci0: unknown advertising packet type: 0x0c [ 416.742813][ T5796] Bluetooth: hci0: unknown advertising packet type: 0xc3 [ 416.790417][ T5825] ftdi_sio 1-1:5.165: FTDI USB Serial Device converter detected [ 416.828743][ T9998] loop3: detected capacity change from 0 to 256 [ 416.872070][ T5825] ftdi_sio ttyUSB0: unknown device type: 0x7c9b [ 416.926143][ T5825] ftdi_sio 1-1:5.40: FTDI USB Serial Device converter detected [ 416.984306][ T5825] ftdi_sio ttyUSB1: unknown device type: 0x7c9b [ 417.198364][ T5825] usb 1-1: USB disconnect, device number 28 [ 417.765959][ T5825] ftdi_sio 1-1:5.165: device disconnected [ 417.828423][ T5825] ftdi_sio 1-1:5.40: device disconnected [ 418.073081][T10014] loop3: detected capacity change from 0 to 64 [ 418.080756][T10014] hfs: creator requires a 4 character value [ 418.087239][T10014] hfs: unable to parse mount options [ 418.405325][T10019] loop3: detected capacity change from 0 to 8 [ 418.420546][T10019] Page size > filesystem block size (0). This is currently not supported! [ 418.462002][ T5885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.500347][ T5853] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 418.542274][ T9996] loop4: detected capacity change from 0 to 32768 [ 418.587931][ T9996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1039 (9996) [ 418.650988][ T9996] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 418.685880][ T9996] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 418.718301][ T9996] BTRFS info (device loop4): using free space tree [ 418.736167][ T5853] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 418.763929][ T5853] usb 3-1: config 0 has no interface number 0 [ 418.788906][ T5853] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 418.802094][ T5853] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 418.813963][ T5853] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 418.825267][ T5853] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.840189][ T5853] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.849966][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.862804][ T5853] usb 3-1: config 0 descriptor?? [ 418.876663][T10010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 418.994665][T10010] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 419.077243][ T5853] ldusb 3-1:0.55: Interrupt in endpoint not found [ 419.104608][ T9996] BTRFS info (device loop4): enabling ssd optimizations [ 419.133821][ T9996] BTRFS info (device loop4): auto enabling async discard [ 420.353494][ T9759] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 420.406488][T10055] loop3: detected capacity change from 0 to 256 [ 420.490372][T10017] loop0: detected capacity change from 0 to 40427 [ 420.519412][T10017] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 420.558856][T10017] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 420.584974][T10017] F2FS-fs (loop0): invalid crc value [ 420.643042][T10017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 420.919783][T10017] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 420.947978][T10017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 421.284299][ T5853] usb 3-1: USB disconnect, device number 29 [ 421.523014][T10074] loop4: detected capacity change from 0 to 64 [ 421.586647][T10074] hfs: creator requires a 4 character value [ 421.611637][T10074] hfs: unable to parse mount options [ 421.984631][T10082] loop0: detected capacity change from 0 to 64 [ 421.992315][T10082] hfs: creator requires a 4 character value [ 421.998276][T10082] hfs: unable to parse mount options [ 422.638321][T10089] loop0: detected capacity change from 0 to 8 [ 423.080248][T10089] Page size > filesystem block size (0). This is currently not supported! [ 423.221007][ T5796] Bluetooth: hci2: unexpected event for opcode 0x080b [ 424.171735][T10114] loop4: detected capacity change from 0 to 8 [ 424.181287][T10114] Page size > filesystem block size (0). This is currently not supported! [ 425.120513][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 425.447481][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.577748][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.628750][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 425.673540][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.715341][ T9] usb 1-1: config 0 descriptor?? [ 425.884393][T10140] loop3: detected capacity change from 0 to 64 [ 425.893083][T10140] hfs: creator requires a 4 character value [ 425.899092][T10140] hfs: unable to parse mount options [ 425.934083][ T5885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.225433][ T9] playstation 0003:054C:0BA0.000D: unknown main item tag 0x0 [ 426.341999][T10145] loop3: detected capacity change from 0 to 8 [ 426.386612][T10145] Page size > filesystem block size (0). This is currently not supported! [ 427.012060][ T9] playstation 0003:054C:0BA0.000D: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 427.102936][ T9] playstation 0003:054C:0BA0.000D: Failed to retrieve feature with reportID 18: -71 [ 427.123609][ T9] playstation 0003:054C:0BA0.000D: Failed to retrieve DualShock4 pairing info: -71 [ 427.149575][ T9] playstation 0003:054C:0BA0.000D: Failed to get MAC address from DualShock4 [ 427.158817][ T9] playstation 0003:054C:0BA0.000D: Failed to create dualshock4. [ 427.202272][ T9] playstation: probe of 0003:054C:0BA0.000D failed with error -71 [ 427.230367][ T5796] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 427.245525][ T5796] Bluetooth: hci2: Injecting HCI hardware error event [ 427.255754][ T5796] Bluetooth: hci2: hardware error 0x00 [ 427.260588][ T9] usb 1-1: USB disconnect, device number 29 [ 427.449369][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1074'. [ 427.860160][ T5825] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 427.963357][T10176] loop2: detected capacity change from 0 to 64 [ 427.973540][T10176] hfs: creator requires a 4 character value [ 427.979541][T10176] hfs: unable to parse mount options [ 427.986026][ T5853] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 428.004849][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 428.233290][T10178] loop4: detected capacity change from 0 to 1764 [ 428.262535][ T5825] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 428.270916][ T5825] usb 4-1: config 0 has no interface number 0 [ 428.330424][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 428.420238][T10181] loop2: detected capacity change from 0 to 8 [ 428.445786][ T5825] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 428.488724][T10181] Page size > filesystem block size (0). This is currently not supported! [ 428.681834][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.743727][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.928624][ T5825] usb 4-1: Product: syz [ 428.959347][ T5853] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 428.994920][ T5825] usb 4-1: Manufacturer: syz [ 428.999608][ T5825] usb 4-1: SerialNumber: syz [ 429.015663][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.083071][ T5825] usb 4-1: config 0 descriptor?? [ 429.094569][ T5853] usb 1-1: config 0 descriptor?? [ 429.184958][ T5825] mvusb_mdio: probe of 4-1:0.112 failed with error -5 [ 429.236106][T10187] loop2: detected capacity change from 0 to 64 [ 429.247442][T10187] hfs: creator requires a 4 character value [ 429.256847][T10187] hfs: unable to parse mount options [ 429.390275][ T5796] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 429.508599][ T9] usb 4-1: USB disconnect, device number 32 [ 429.575978][ T5853] konepure 0003:1E7D:2DBE.000E: hidraw0: USB HID v12.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.0-1/input0 [ 429.622912][T10193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1083'. [ 429.781467][ T9] usb 1-1: USB disconnect, device number 30 [ 430.585506][T10206] loop2: detected capacity change from 0 to 8 [ 430.632550][T10206] Page size > filesystem block size (0). This is currently not supported! [ 431.571788][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1087'. [ 431.833185][T10229] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1092'. [ 432.940596][T10245] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1096'. [ 433.848172][T10253] net_ratelimit: 244 callbacks suppressed [ 433.848190][T10253] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 433.979011][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1096'. [ 435.080120][T10269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1100'. [ 435.504371][T10289] loop2: detected capacity change from 0 to 64 [ 435.511959][T10289] hfs: creator requires a 4 character value [ 435.517938][T10289] hfs: unable to parse mount options [ 435.650259][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.553758][T10302] loop0: detected capacity change from 0 to 64 [ 436.561457][T10302] hfs: creator requires a 4 character value [ 436.567687][T10302] hfs: unable to parse mount options [ 436.616163][ T5921] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 436.627034][T10307] loop3: detected capacity change from 0 to 1024 [ 436.922455][T10308] loop0: detected capacity change from 0 to 8 [ 436.940658][T10308] Page size > filesystem block size (0). This is currently not supported! [ 436.960171][ T28] audit: type=1800 audit(1761038002.314:15): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1108" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 437.205663][T10313] loop2: detected capacity change from 0 to 8 [ 437.293724][T10313] Page size > filesystem block size (0). This is currently not supported! [ 437.544760][ T5788] Bluetooth: hci1: command tx timeout [ 439.911069][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1113'. [ 440.996819][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.652195][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.216679][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1124'. [ 442.400250][ T8] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 443.261608][ T8] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 443.269892][ T8] usb 3-1: config 0 has no interface number 0 [ 443.329285][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 443.418259][T10399] loop0: detected capacity change from 0 to 512 [ 443.466933][T10399] EXT4-fs (loop0): Test dummy encryption mode enabled [ 443.519953][T10403] tipc: Started in network mode [ 443.549786][T10399] EXT4-fs error (device loop0): __ext4_iget:5059: inode #11: block 1: comm syz.0.1126: invalid block [ 443.560762][ T8] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 443.572578][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 443.583752][T10403] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 443.584616][ T8] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.594869][T10403] tipc: Enabled bearer , priority 15 [ 443.612085][T10399] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1126: couldn't read orphan inode 11 (err -117) [ 443.895414][T10399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.362798][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 444.372140][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.412253][ T8] usb 3-1: config 0 descriptor?? [ 444.419872][T10377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.450468][T10377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.484555][ T8] ldusb 3-1:0.55: Interrupt in endpoint not found [ 444.507077][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.069698][ T5871] tipc: Node number set to 8432298 [ 446.241658][T10434] loop3: detected capacity change from 0 to 64 [ 446.249344][T10434] hfs: creator requires a 4 character value [ 446.255425][T10434] hfs: unable to parse mount options [ 446.303423][ T5885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.853293][T10442] loop0: detected capacity change from 0 to 256 [ 446.960218][ T5788] Bluetooth: hci1: link tx timeout [ 446.969676][ T5788] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.022263][ T5788] Bluetooth: hci1: link tx timeout [ 447.027572][ T5788] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.077806][T10442] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 447.181593][T10442] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 447.210274][ T5825] usb 3-1: USB disconnect, device number 30 [ 447.227859][T10444] loop3: detected capacity change from 0 to 8 [ 447.237813][T10444] Page size > filesystem block size (0). This is currently not supported! [ 447.425554][T10452] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1134'. [ 449.347403][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 450.778436][T10493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1144'. [ 457.340274][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 457.348195][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 457.582980][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 457.590534][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 457.611000][ T5891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 457.617722][ T5891] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 457.647516][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 457.664738][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 457.680106][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.706850][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.801757][ T5891] usb 5-1: config 0 descriptor?? [ 457.811544][ T9] usb 1-1: config 0 descriptor?? [ 458.712737][ T5891] hid (null): nested delimiters [ 458.717872][ T5891] hid (null): bogus close delimiter [ 459.401580][T10608] loop2: detected capacity change from 0 to 64 [ 459.409181][T10608] hfs: creator requires a 4 character value [ 459.415287][T10608] hfs: unable to parse mount options [ 459.452372][ T9] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 459.459951][ T9] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 459.478086][ T5891] usb 5-1: USB disconnect, device number 2 [ 459.485187][ T9] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 459.508588][ T9] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 459.531920][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 459.584101][ T9] corsair-psu 0003:1B1C:1C0D.000F: unknown main item tag 0x0 [ 459.669684][ T9] corsair-psu 0003:1B1C:1C0D.000F: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.0-1/input0 [ 460.306931][ T5853] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 460.321486][T10615] loop2: detected capacity change from 0 to 8 [ 460.333908][T10615] Page size > filesystem block size (0). This is currently not supported! [ 460.769036][ T5853] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 460.809012][ T5853] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 460.839367][ T9] corsair-psu 0003:1B1C:1C0D.000F: unable to initialize device (-71) [ 460.877587][ T9] corsair-psu: probe of 0003:1B1C:1C0D.000F failed with error -71 [ 460.941090][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.145018][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.224627][ T5853] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.314106][ T5853] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 461.362489][ T9] usb 1-1: USB disconnect, device number 31 [ 461.381415][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.484863][ T5853] usb 4-1: config 0 descriptor?? [ 462.515113][ T9] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 462.551725][ T5853] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0011/input/input18 [ 462.609572][T10645] loop4: detected capacity change from 0 to 512 [ 462.619166][T10645] EXT4-fs: Ignoring removed oldalloc option [ 462.716087][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 462.748321][ T5853] uclogic 0003:28BD:0909.0011: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 462.753507][T10645] EXT4-fs (loop4): 1 truncate cleaned up [ 462.766001][ T9] usb 1-1: config 0 has no interface number 0 [ 462.775273][T10645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.788420][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 462.799430][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 462.810280][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 462.828147][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 462.847910][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 462.857444][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.868712][ T9] usb 1-1: config 0 descriptor?? [ 462.884616][T10627] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.893363][T10627] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 462.908676][ T9] ldusb 1-1:0.55: Interrupt in endpoint not found [ 462.941703][ T5853] usb 4-1: USB disconnect, device number 33 [ 463.417196][T10657] fido_id[10657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 464.060561][ T5825] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 464.273743][ T9759] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.392444][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.412720][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 464.428874][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 464.454024][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 464.475049][ T5825] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 464.490850][ T5825] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 464.499188][ T5825] usb 3-1: Manufacturer: syz [ 464.507315][ T5825] usb 3-1: config 0 descriptor?? [ 464.610428][T10678] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1177'. [ 464.960647][T10684] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 465.032897][T10664] loop2: detected capacity change from 0 to 2048 [ 465.203480][T10664] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 465.369794][T10625] usb 1-1: USB disconnect, device number 32 [ 465.457121][T10688] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 465.457512][T10664] syz.2.1174: attempt to access beyond end of device [ 465.457512][T10664] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 465.697477][T10691] loop0: detected capacity change from 0 to 64 [ 465.706403][T10691] hfs: creator requires a 4 character value [ 465.713079][T10691] hfs: unable to parse mount options [ 466.829679][T10697] loop0: detected capacity change from 0 to 8 [ 466.900176][T10697] Page size > filesystem block size (0). This is currently not supported! [ 467.710540][ T5825] rc_core: IR keymap rc-hauppauge not found [ 467.736789][ T5825] Registered IR keymap rc-empty [ 467.781697][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 467.852855][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 467.902966][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 467.921114][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 467.953610][ T788] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 467.963210][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.010487][ T5891] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 468.023358][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.113622][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.156348][ T788] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 468.161565][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.178817][ T788] usb 4-1: config 0 has no interface number 0 [ 468.210160][ T788] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 468.225853][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.228481][ T5891] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 468.253547][ T788] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 468.272683][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.274736][ T5891] usb 1-1: config 0 has no interface number 0 [ 468.310194][ T788] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 468.320648][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.321130][ T5891] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 468.354200][ T788] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.370631][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.377272][ T5891] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 468.377305][ T5891] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 468.377329][ T5891] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 468.377377][ T5891] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 468.421471][ T788] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 468.431508][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.442820][ T788] usb 4-1: config 0 descriptor?? [ 468.445205][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 468.466367][T10709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 468.476436][T10709] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 468.487996][ T788] ldusb 4-1:0.55: Interrupt in endpoint not found [ 468.548394][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 468.575959][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.603307][ T5825] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.193172][ T5825] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 469.215569][ T5825] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.343160][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 469.430728][ T787] usb 5-1: config 0 has no interfaces? [ 469.551778][ T5825] usb 3-1: USB disconnect, device number 31 [ 469.601329][ T787] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 469.782621][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.879687][ T787] usb 5-1: Product: syz [ 469.929976][ T787] usb 5-1: Manufacturer: syz [ 469.935379][ T5891] usb 1-1: config 0 descriptor?? [ 469.942735][T10714] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 469.981939][T10714] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 470.007028][ T787] usb 5-1: SerialNumber: syz [ 470.045941][ T5891] ldusb 1-1:0.55: Interrupt in endpoint not found [ 470.179646][ T787] usb 5-1: config 0 descriptor?? [ 470.654178][T10749] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1189'. [ 470.729284][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 470.738881][T10729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1187'. [ 470.892003][T10753] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 471.478869][ T8] usb 5-1: USB disconnect, device number 3 [ 472.599415][ T8] usb 4-1: USB disconnect, device number 34 [ 472.672045][ T787] usb 1-1: USB disconnect, device number 33 [ 472.871964][T10778] loop0: detected capacity change from 0 to 64 [ 472.879619][T10778] hfs: creator requires a 4 character value [ 472.885855][T10778] hfs: unable to parse mount options [ 473.728353][T10786] loop0: detected capacity change from 0 to 8 [ 473.994821][T10786] Page size > filesystem block size (0). This is currently not supported! [ 474.356773][ T787] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 474.610200][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 474.656292][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.730071][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.789876][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 474.826024][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.864997][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.884890][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.790275][ T787] usb 3-1: GET_CAPABILITIES returned 0 [ 475.796376][ T787] usbtmc 3-1:16.0: can't read capabilities [ 475.817040][ T787] usb 3-1: USB disconnect, device number 32 [ 476.027558][T10812] loop0: detected capacity change from 0 to 1024 [ 476.640655][T10812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 476.830775][T10812] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.033848][T10812] EXT4-fs error (device loop0): ext4_free_blocks:6676: comm syz.0.1197: Freeing blocks not in datazone - block = 0, count = 16 [ 477.097323][ T2933] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 477.125305][ T2933] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 477.144571][ T2933] EXT4-fs (loop0): This should not happen!! Data will be lost [ 477.144571][ T2933] [ 477.155835][ T2933] EXT4-fs (loop0): Total free blocks count 0 [ 477.162563][ T2933] EXT4-fs (loop0): Free/Dirty block details [ 477.168694][ T2933] EXT4-fs (loop0): free_blocks=4293918736 [ 477.175215][ T2933] EXT4-fs (loop0): dirty_blocks=16 [ 477.181178][ T2933] EXT4-fs (loop0): Block reservation details [ 477.191557][ T2933] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 477.204779][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 477.300406][ T788] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 477.305876][ T787] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 477.366284][T10842] loop0: detected capacity change from 0 to 764 [ 477.400667][T10842] rock: directory entry would overflow storage [ 477.416231][T10842] rock: sig=0x5245, size=8, remaining=5 [ 477.501977][ T788] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 477.520754][ T788] usb 3-1: config 0 has no interface number 0 [ 477.530725][ T788] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 477.532469][ T787] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 477.554235][ T788] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 477.565486][ T788] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 477.571113][ T787] usb 5-1: config 0 has no interface number 0 [ 477.578777][ T788] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.596718][ T788] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 477.601349][ T787] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 477.606663][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.632349][ T788] usb 3-1: config 0 descriptor?? [ 477.645450][T10832] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 477.646205][ T787] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 477.654671][T10832] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 477.682212][ T788] ldusb 3-1:0.55: Interrupt in endpoint not found [ 477.684981][ T787] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 477.700332][ T5891] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 477.719889][ T787] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.733592][ T787] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 477.757681][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.783468][ T787] usb 5-1: config 0 descriptor?? [ 477.789528][T10829] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.800400][T10829] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.819018][ T787] ldusb 5-1:0.55: Interrupt in endpoint not found [ 477.892468][ T5891] usb 1-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 478.130978][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.143511][ T5891] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.152996][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.171103][ T5891] usb 1-1: SerialNumber: syz [ 478.940921][ T787] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 478.948270][ T5891] usb 1-1: 0:2 : does not exist [ 478.988469][ T5891] usb 1-1: USB disconnect, device number 34 [ 479.039980][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.070943][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 479.147902][ T787] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 479.156540][ T787] usb 4-1: config 0 has no interface number 0 [ 479.166405][ T787] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 479.179126][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.189009][ T787] usb 4-1: Product: syz [ 479.197706][ T787] usb 4-1: Manufacturer: syz [ 479.204394][ T787] usb 4-1: SerialNumber: syz [ 479.216960][ T787] usb 4-1: config 0 descriptor?? [ 479.550143][T10874] loop0: detected capacity change from 0 to 64 [ 479.558217][T10874] hfs: creator requires a 4 character value [ 479.564450][T10874] hfs: unable to parse mount options [ 479.795719][ T787] usb 4-1: Firmware: major: 177, minor: 79, hardware type: HULUSB (4) [ 479.993042][T10877] loop0: detected capacity change from 0 to 8 [ 480.001172][ T787] usb 4-1: failed to fetch extended address, random address set [ 480.118392][ T23] usb 5-1: USB disconnect, device number 4 [ 480.134692][ T788] usb 3-1: USB disconnect, device number 33 [ 480.183549][T10877] Page size > filesystem block size (0). This is currently not supported! [ 480.300943][ T787] usb 4-1: USB disconnect, device number 35 [ 480.610575][ T788] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 480.792973][ T788] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 480.806614][ T788] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 480.818588][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.834361][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 480.845950][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 480.864046][ T788] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.873581][ T788] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.882176][ T788] usb 3-1: Product: syz [ 480.886645][ T788] usb 3-1: Manufacturer: syz [ 480.901877][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 480.909477][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 480.919697][ T788] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 480.926099][ T788] cdc_wdm 3-1:1.0: Unknown control protocol [ 481.160763][ T787] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 481.195242][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 481.195291][ T5891] usb 3-1: USB disconnect, device number 34 [ 481.202232][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 481.202260][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 481.362812][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 481.376483][ T787] usb 4-1: not running at top speed; connect to a high speed hub [ 481.386602][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.397343][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.419034][ T787] usb 4-1: string descriptor 0 read error: -22 [ 481.427161][ T787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.439918][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.492134][ T787] usb 4-1: 0:2 : does not exist [ 481.934177][ T5891] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 482.050289][ T788] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 482.123911][ T5891] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 482.132387][ T5891] usb 5-1: config 0 has no interface number 0 [ 482.138654][ T5891] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 482.150545][ T5891] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 482.161282][ T5891] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 482.172012][ T5891] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.185534][ T5891] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 482.195256][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.207279][ T5891] usb 5-1: config 0 descriptor?? [ 482.214454][T10906] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.224042][T10906] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.235726][ T5891] ldusb 5-1:0.55: Interrupt in endpoint not found [ 482.242558][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 482.250470][ T788] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 482.258809][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.271053][ T788] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.289525][ T787] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 482.292859][ T788] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 482.310147][ T5892] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 482.321592][ T788] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 482.322959][ T787] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 482.337224][ T788] usb 1-1: Product: syz [ 482.344132][ T788] usb 1-1: Manufacturer: syz [ 482.353784][ T788] usb 1-1: SerialNumber: syz [ 482.372987][ T788] usb 1-1: config 0 descriptor?? [ 482.382586][ T787] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 482.408249][ T787] usb 4-1: USB disconnect, device number 36 [ 482.594604][ T5871] usb 1-1: USB disconnect, device number 35 [ 482.650211][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 482.658450][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 482.667971][ T5892] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 482.677173][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.443235][ T5892] usb 3-1: Product: syz [ 483.447510][ T5892] usb 3-1: Manufacturer: syz [ 483.452767][ T5892] usb 3-1: SerialNumber: syz [ 483.463281][ T5892] usb 3-1: config 0 descriptor?? [ 483.595225][T10918] loop3: detected capacity change from 0 to 64 [ 483.603775][T10918] hfs: creator requires a 4 character value [ 483.609751][T10918] hfs: unable to parse mount options [ 483.651860][ T5800] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 483.969435][ T5892] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 484.073030][T10921] loop3: detected capacity change from 0 to 8 [ 484.084236][T10921] Page size > filesystem block size (0). This is currently not supported! [ 484.388538][ T5892] usb 3-1: USB disconnect, device number 35 [ 484.769369][ T787] usb 5-1: USB disconnect, device number 5 [ 485.560188][ T787] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 485.785082][ T787] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 485.800944][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.819722][ T787] usb 3-1: Product: syz [ 485.827542][ T787] usb 3-1: Manufacturer: syz [ 485.845463][ T787] usb 3-1: SerialNumber: syz [ 485.863032][ T787] usb 3-1: config 0 descriptor?? [ 485.890823][ T788] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 486.107732][ T787] usb 3-1: USB disconnect, device number 36 [ 486.110648][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 486.135399][ T788] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 486.160441][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.194410][ T788] usb 4-1: config 0 descriptor?? [ 486.327427][ T788] rndis_host: probe of 4-1:0.0 failed with error -22 [ 486.787795][ T23] usb 4-1: USB disconnect, device number 37 [ 487.952632][ T788] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 488.186498][ T788] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 488.202741][ T788] usb 1-1: config 0 has no interface number 0 [ 488.219259][ T788] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 488.236100][ T788] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 488.255199][ T788] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 488.266652][ T788] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.280783][ T788] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 488.289896][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.311293][ T788] usb 1-1: config 0 descriptor?? [ 488.320109][ T787] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 488.330441][T10975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 488.337857][T10975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 488.356739][ T788] ldusb 1-1:0.55: Interrupt in endpoint not found [ 488.510273][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 488.518094][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 488.528278][ T787] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 488.537582][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.545768][ T787] usb 4-1: Product: syz [ 488.549971][ T787] usb 4-1: Manufacturer: syz [ 488.555294][ T787] usb 4-1: SerialNumber: syz [ 488.562944][ T787] usb 4-1: config 0 descriptor?? [ 488.740370][ T5871] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 488.961150][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 489.023201][ T787] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 489.101612][ T5871] usb 5-1: config 0 has no interfaces? [ 489.177887][ T5871] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 489.288541][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.388793][ T5871] usb 5-1: Product: syz [ 489.443807][ T5871] usb 5-1: Manufacturer: syz [ 489.478431][ T787] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 489.494812][ T5871] usb 5-1: SerialNumber: syz [ 489.505571][ T787] gs_usb: probe of 4-1:0.0 failed with error -71 [ 489.514382][ T5871] usb 5-1: config 0 descriptor?? [ 489.529678][ T787] usb 4-1: USB disconnect, device number 38 [ 489.727141][ T5871] usb 5-1: USB disconnect, device number 6 [ 489.860170][ T788] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 490.050234][ T788] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 490.068935][ T788] usb 3-1: config 0 has no interface number 0 [ 490.085229][ T788] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 490.096637][ T788] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 490.108064][ T788] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 490.119894][ T788] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 490.133951][ T788] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 490.194435][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.209728][ T788] usb 3-1: config 0 descriptor?? [ 490.219272][T11001] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 490.303466][T11001] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 490.900651][ T5892] usb 1-1: USB disconnect, device number 36 [ 490.993415][ T788] ldusb 3-1:0.55: Interrupt in endpoint not found [ 493.223866][ T5892] usb 3-1: USB disconnect, device number 37 [ 493.261038][ T23] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 493.472954][T11037] loop4: detected capacity change from 0 to 64 [ 493.480596][T11037] hfs: creator requires a 4 character value [ 493.486620][T11037] hfs: unable to parse mount options [ 493.523586][ T5885] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 493.533614][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 493.724569][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.735709][ T23] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 493.753092][T11037] loop4: detected capacity change from 0 to 8 [ 493.760219][ T788] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 493.760758][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.776556][T11037] Page size > filesystem block size (0). This is currently not supported! [ 493.870292][ T5892] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 493.962471][ T788] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 493.975485][ T788] usb 4-1: config 0 has no interface number 0 [ 493.982131][ T788] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 493.998141][ T788] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 494.009929][ T788] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 494.027529][ T788] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.050882][ T788] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 494.064194][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.074344][ T5892] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 494.094087][ T788] usb 4-1: config 0 descriptor?? [ 494.103424][ T5892] usb 3-1: config 0 has no interface number 0 [ 494.114289][ T5892] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 494.125869][T11040] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.142015][T11040] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 494.149334][ T5892] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 494.173200][ T788] ldusb 4-1:0.55: Interrupt in endpoint not found [ 494.186611][ T5892] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 494.219111][ T5892] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.237631][ T5892] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 494.248241][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.280942][ T5892] usb 3-1: config 0 descriptor?? [ 494.286946][T11041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 494.303965][T11041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 494.323324][ T5892] ldusb 3-1:0.55: Interrupt in endpoint not found [ 495.657289][ T23] usb 1-1: config 0 descriptor?? [ 495.755130][ T23] usb 1-1: can't set config #0, error -71 [ 495.779964][ T23] usb 1-1: USB disconnect, device number 37 [ 496.702380][ T5892] usb 3-1: USB disconnect, device number 38 [ 497.016858][ T787] usb 4-1: USB disconnect, device number 39 [ 498.619480][ T787] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 498.821922][T11091] loop0: detected capacity change from 0 to 64 [ 498.830235][T11091] hfs: creator requires a 4 character value [ 498.836274][T11091] hfs: unable to parse mount options [ 499.172410][T11091] loop0: detected capacity change from 0 to 8 [ 499.180648][T11091] Page size > filesystem block size (0). This is currently not supported! [ 499.255328][ T5885] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.894076][ T787] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 499.910857][ T787] usb 4-1: config 0 has no interface number 0 [ 499.917053][ T787] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 499.940111][ T787] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 499.950902][ T787] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 499.961908][ T787] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.975110][ T787] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 499.984271][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.994982][ T787] usb 4-1: config 0 descriptor?? [ 500.001194][T11070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.031953][T11070] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.064896][ T787] ldusb 4-1:0.55: Interrupt in endpoint not found [ 500.689028][ T787] usb 4-1: USB disconnect, device number 40 [ 500.761031][T11095] loop2: detected capacity change from 0 to 32768 [ 500.803057][T11095] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 500.839881][T11117] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1262'. [ 500.955033][T11095] XFS (loop2): Ending clean mount [ 500.955868][T11120] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 500.984885][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1262'. [ 501.017198][T11095] XFS (loop2): Quotacheck needed: Please wait. [ 501.141249][T11095] XFS (loop2): Quotacheck: Done. [ 501.689589][ T5792] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 502.532658][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.554683][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.433769][T11138] loop0: detected capacity change from 0 to 1024 [ 503.943073][T11154] loop2: detected capacity change from 0 to 64 [ 503.950790][T11154] hfs: creator requires a 4 character value [ 503.956757][T11154] hfs: unable to parse mount options [ 504.093429][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 504.270608][T11154] loop2: detected capacity change from 0 to 8 [ 504.279214][T11163] vivid-006: disconnect [ 504.286101][T11154] Page size > filesystem block size (0). This is currently not supported! [ 504.304116][T11161] loop0: detected capacity change from 0 to 64 [ 504.311759][T11161] hfs: creator requires a 4 character value [ 504.317720][T11161] hfs: unable to parse mount options [ 505.039230][T11156] vivid-006: reconnect [ 505.420693][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 505.937709][T11180] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1274'. [ 506.456427][T11183] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 506.595668][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'. [ 507.832589][ T5892] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 508.082290][ T5892] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 508.110164][ T5892] usb 5-1: config 0 has no interface number 0 [ 508.152238][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 508.167437][ T5892] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 508.179867][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 508.637130][ T5892] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.651070][ T5892] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 508.660774][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.805832][ T5892] usb 5-1: config 0 descriptor?? [ 509.015626][T11193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.047806][T11193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 509.087348][ T5892] ldusb 5-1:0.55: Interrupt in endpoint not found [ 509.143265][T11209] loop2: detected capacity change from 0 to 64 [ 509.150882][T11209] hfs: creator requires a 4 character value [ 509.156899][T11209] hfs: unable to parse mount options [ 510.129309][T11218] loop2: detected capacity change from 0 to 8 [ 510.277748][T11218] Page size > filesystem block size (0). This is currently not supported! [ 510.575642][ T5796] Bluetooth: hci1: link tx timeout [ 510.581029][ T5796] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 511.761781][ T5891] usb 5-1: USB disconnect, device number 7 [ 512.652532][T11248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1289'. [ 512.670802][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 512.829318][T11250] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:1f:00:85 [ 513.002786][T11250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1289'. [ 515.070235][ T27] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 515.284656][ T27] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 515.303546][ T27] usb 5-1: config 0 has no interface number 0 [ 515.326045][ T27] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 515.354284][ T27] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 515.398196][ T27] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 515.447011][ T27] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 515.505904][ T27] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 515.579609][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.025150][ T27] usb 5-1: config 0 descriptor?? [ 516.081489][T11281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.109366][T11281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 516.131216][ T27] ldusb 5-1:0.55: Interrupt in endpoint not found [ 517.912476][T11334] loop0: detected capacity change from 0 to 64 [ 517.920175][T11334] hfs: creator requires a 4 character value [ 517.926153][T11334] hfs: unable to parse mount options [ 517.967671][ T5885] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 518.162735][ T5891] usb 5-1: USB disconnect, device number 8 [ 518.585607][T11334] loop0: detected capacity change from 0 to 8 [ 518.603831][T11334] Page size > filesystem block size (0). This is currently not supported! [ 518.612073][T11339] loop4: detected capacity change from 0 to 2048 [ 518.783428][T11339] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.801164][ T5800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 519.356356][T11350] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 519.377584][T11350] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 519.403502][T11350] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 519.435475][T11350] Error parsing options; rc = [-22] [ 519.736909][T11355] loop2: detected capacity change from 0 to 1024 [ 520.183985][T11355] hfsplus: xattr searching failed [ 520.840347][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 524.165502][T11373] loop0: detected capacity change from 0 to 32768 [ 524.204840][T11373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1310 (11373) [ 524.380921][T11373] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 524.845511][T11373] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 524.899138][T11373] BTRFS info (device loop0): enabling auto defrag [ 524.938374][T11373] BTRFS info (device loop0): use no compression [ 524.945373][T11373] BTRFS info (device loop0): max_inline at 4096 [ 524.952055][T11373] BTRFS info (device loop0): using free space tree [ 525.188418][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 525.211731][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 525.313172][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 525.401215][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 525.504750][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 525.516578][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 525.537978][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 525.549904][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 525.561743][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 525.573103][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 525.584289][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 525.595793][T11373] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 525.618957][T11373] BTRFS error (device loop0): open_ctree failed: -12 [ 525.661560][T11442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1318'. [ 526.913479][ T23] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 527.102231][ T23] usb 5-1: device descriptor read/64, error -71 [ 527.413749][ T23] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 527.581727][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 527.983023][ T23] usb 5-1: device descriptor read/64, error -71 [ 528.295705][ T23] usb usb5-port1: attempt power cycle [ 529.379503][T11493] loop3: detected capacity change from 0 to 8192 [ 529.724300][T11508] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1333'. [ 530.878204][T11537] loop2: detected capacity change from 0 to 64 [ 530.886203][T11537] hfs: creator requires a 4 character value [ 530.892530][T11537] hfs: unable to parse mount options [ 530.911200][ T5885] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 531.295121][T11545] loop2: detected capacity change from 0 to 8 [ 531.551455][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 531.577560][T11545] Page size > filesystem block size (0). This is currently not supported! [ 532.390497][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 532.520199][ T5892] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 532.802072][ T5892] usb 3-1: device descriptor read/64, error -71 [ 533.148701][T11564] loop3: detected capacity change from 0 to 64 [ 533.159680][T11564] hfs: creator requires a 4 character value [ 533.165822][T11564] hfs: unable to parse mount options [ 533.536226][ T5892] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 533.743585][ T5885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 533.900254][ T5892] usb 3-1: device descriptor read/64, error -71 [ 534.062534][T11573] loop3: detected capacity change from 0 to 8 [ 534.070955][T11573] Page size > filesystem block size (0). This is currently not supported! [ 534.080850][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1346'. [ 534.126383][ T5885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 534.138509][ T5892] usb usb3-port1: attempt power cycle [ 534.483388][T11591] loop4: detected capacity change from 0 to 64 [ 534.492288][T11591] hfs: creator requires a 4 character value [ 534.498288][T11591] hfs: unable to parse mount options [ 534.650739][ T5892] usb 3-1: new low-speed USB device number 41 using dummy_hcd [ 534.658816][ T5885] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 535.279931][T11599] loop4: detected capacity change from 0 to 8 [ 535.678538][T11599] Page size > filesystem block size (0). This is currently not supported! [ 535.702823][ T5892] usb 3-1: device descriptor read/8, error -71 [ 536.060338][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 538.319351][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1357'. [ 538.541201][T11641] loop3: detected capacity change from 0 to 64 [ 538.548788][T11641] hfs: creator requires a 4 character value [ 538.554898][T11641] hfs: unable to parse mount options [ 539.087898][ T1091] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.099686][ T1091] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.114033][ T27] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.131839][ T5885] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 539.616832][T11656] loop3: detected capacity change from 0 to 8 [ 539.642001][T11656] Page size > filesystem block size (0). This is currently not supported! [ 539.954697][ T5825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.031139][ T5825] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 540.115905][T11663] loop0: detected capacity change from 0 to 64 [ 540.123621][T11663] hfs: creator requires a 4 character value [ 540.129576][T11663] hfs: unable to parse mount options [ 540.347336][T11665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1361'. [ 540.534797][T11670] loop0: detected capacity change from 0 to 8 [ 540.566129][T11670] Page size > filesystem block size (0). This is currently not supported! [ 541.429729][T11682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1369'. [ 541.490338][ T5891] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 542.190619][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 542.193596][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.208363][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.222300][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 542.255973][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.399063][ T5891] usb 3-1: config 0 descriptor?? [ 542.414284][ T5891] hub 3-1:0.0: USB hub found [ 543.160676][ T5891] hub 3-1:0.0: 1 port detected [ 543.310620][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.684062][ T5891] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 543.691943][ T5891] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 544.104089][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 544.127275][ T5891] usbhid: probe of 3-1:0.0 failed with error -71 [ 544.171978][ T5891] usb 3-1: USB disconnect, device number 43 [ 544.336564][T11715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1375'. [ 544.397456][T11717] loop4: detected capacity change from 0 to 64 [ 544.406057][T11717] hfs: creator requires a 4 character value [ 544.412363][T11717] hfs: unable to parse mount options [ 544.789718][T11721] loop4: detected capacity change from 0 to 8 [ 544.829858][T11721] Page size > filesystem block size (0). This is currently not supported! [ 545.615756][T11727] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 545.980421][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 546.423915][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 546.680128][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 546.687686][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 546.708190][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 546.780961][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.820619][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.842601][T11743] loop3: detected capacity change from 0 to 64 [ 546.850666][T11743] hfs: creator requires a 4 character value [ 546.856645][T11743] hfs: unable to parse mount options [ 546.928428][T11735] loop0: detected capacity change from 0 to 32768 [ 547.049094][T11735] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 547.095018][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.104227][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.305699][T11750] loop3: detected capacity change from 0 to 8 [ 548.216740][T11750] Page size > filesystem block size (0). This is currently not supported! [ 548.574124][T11735] [ 548.576532][T11735] ====================================================== [ 548.583587][T11735] WARNING: possible circular locking dependency detected [ 548.590755][T11735] syzkaller #0 Not tainted [ 548.595209][T11735] ------------------------------------------------------ [ 548.602276][T11735] syz.0.1383/11735 is trying to acquire lock: [ 548.608471][T11735] ffff88805ad3a658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 548.622057][T11735] [ 548.622057][T11735] but task is already holding lock: [ 548.629447][T11735] ffff888078684da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x199/0x310 [ 548.640055][T11735] [ 548.640055][T11735] which lock already depends on the new lock. [ 548.640055][T11735] [ 548.650498][T11735] [ 548.650498][T11735] the existing dependency chain (in reverse order) is: [ 548.659910][T11735] [ 548.659910][T11735] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 548.668786][T11735] down_write+0x97/0x1f0 [ 548.679552][T11735] ocfs2_try_remove_refcount_tree+0xb7/0x320 [ 548.686106][T11735] ocfs2_xattr_set+0x596/0x11f0 [ 548.691537][T11735] ocfs2_set_acl+0x4e1/0x590 [ 548.696709][T11735] ocfs2_iop_set_acl+0x1ab/0x2a0 [ 548.702340][T11735] vfs_set_acl+0x803/0xa60 [ 548.707513][T11735] path_setxattr+0x39f/0x550 [ 548.712734][T11735] __x64_sys_setxattr+0xbb/0xd0 [ 548.718155][T11735] do_syscall_64+0x55/0xb0 [ 548.723144][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.729599][T11735] [ 548.729599][T11735] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 548.737467][T11735] down_read+0x46/0x2e0 [ 548.742280][T11735] ocfs2_init_acl+0x2fa/0x720 [ 548.747527][T11735] ocfs2_mknod+0x12e5/0x20f0 [ 548.752678][T11735] ocfs2_create+0x196/0x410 [ 548.757765][T11735] path_openat+0x1277/0x3190 [ 548.762913][T11735] do_filp_open+0x1c5/0x3d0 [ 548.768061][T11735] do_sys_openat2+0x12c/0x1c0 [ 548.773294][T11735] __x64_sys_openat+0x139/0x160 [ 548.778697][T11735] do_syscall_64+0x55/0xb0 [ 548.783674][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.790126][T11735] [ 548.790126][T11735] -> #3 (jbd2_handle){++++}-{0:0}: [ 548.797638][T11735] start_this_handle+0x1e9d/0x20c0 [ 548.803312][T11735] jbd2__journal_start+0x2bb/0x5b0 [ 548.808989][T11735] jbd2_journal_start+0x2a/0x40 [ 548.814402][T11735] ocfs2_start_trans+0x376/0x6c0 [ 548.819923][T11735] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 548.826224][T11735] ocfs2_dismount_volume+0x1e2/0x890 [ 548.832092][T11735] generic_shutdown_super+0x134/0x2b0 [ 548.838055][T11735] kill_block_super+0x44/0x90 [ 548.843317][T11735] deactivate_locked_super+0x97/0x100 [ 548.849276][T11735] cleanup_mnt+0x429/0x4c0 [ 548.854263][T11735] task_work_run+0x1ce/0x250 [ 548.859430][T11735] exit_to_user_mode_loop+0xe6/0x110 [ 548.865303][T11735] exit_to_user_mode_prepare+0xf6/0x180 [ 548.871429][T11735] syscall_exit_to_user_mode+0x1a/0x50 [ 548.877463][T11735] do_syscall_64+0x61/0xb0 [ 548.882459][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.888924][T11735] [ 548.888924][T11735] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 548.897584][T11735] down_read+0x46/0x2e0 [ 548.902328][T11735] ocfs2_start_trans+0x36a/0x6c0 [ 548.907848][T11735] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 548.914232][T11735] ocfs2_dismount_volume+0x1e2/0x890 [ 548.920090][T11735] generic_shutdown_super+0x134/0x2b0 [ 548.926045][T11735] kill_block_super+0x44/0x90 [ 548.931291][T11735] deactivate_locked_super+0x97/0x100 [ 548.937240][T11735] cleanup_mnt+0x429/0x4c0 [ 548.942226][T11735] task_work_run+0x1ce/0x250 [ 548.947388][T11735] exit_to_user_mode_loop+0xe6/0x110 [ 548.953259][T11735] exit_to_user_mode_prepare+0xf6/0x180 [ 548.959471][T11735] syscall_exit_to_user_mode+0x1a/0x50 [ 548.965502][T11735] do_syscall_64+0x61/0xb0 [ 548.970487][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.976946][T11735] [ 548.976946][T11735] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 548.984608][T11735] ocfs2_start_trans+0x26b/0x6c0 [ 548.990117][T11735] ocfs2_mknod+0xe47/0x20f0 [ 548.995186][T11735] ocfs2_create+0x196/0x410 [ 549.000261][T11735] path_openat+0x1277/0x3190 [ 549.005778][T11735] do_filp_open+0x1c5/0x3d0 [ 549.010861][T11735] do_sys_openat2+0x12c/0x1c0 [ 549.016104][T11735] __x64_sys_openat+0x139/0x160 [ 549.021523][T11735] do_syscall_64+0x55/0xb0 [ 549.026501][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.033236][T11735] [ 549.033236][T11735] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 549.044078][T11735] __lock_acquire+0x2ddb/0x7c80 [ 549.049541][T11735] lock_acquire+0x197/0x410 [ 549.054617][T11735] down_write+0x97/0x1f0 [ 549.059460][T11735] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 549.066186][T11735] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 549.073105][T11735] ocfs2_lock_allocators+0x2fb/0x5b0 [ 549.078986][T11735] ocfs2_write_begin_nolock+0x225a/0x4190 [ 549.085287][T11735] ocfs2_write_begin+0x1bc/0x310 [ 549.090814][T11735] generic_perform_write+0x2fb/0x5b0 [ 549.096663][T11735] ocfs2_file_write_iter+0x1582/0x1d00 [ 549.102692][T11735] vfs_write+0x43b/0x940 [ 549.107503][T11735] __x64_sys_pwrite64+0x195/0x220 [ 549.113112][T11735] do_syscall_64+0x55/0xb0 [ 549.118089][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.124546][T11735] [ 549.124546][T11735] other info that might help us debug this: [ 549.124546][T11735] [ 549.134809][T11735] Chain exists of: [ 549.134809][T11735] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 549.134809][T11735] [ 549.143952][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1388'. [ 549.152060][T11735] Possible unsafe locking scenario: [ 549.152060][T11735] [ 549.152072][T11735] CPU0 CPU1 [ 549.152077][T11735] ---- ---- [ 549.152081][T11735] lock(&ocfs2_file_ip_alloc_sem_key); [ 549.152099][T11735] lock(&oi->ip_xattr_sem); [ 549.152114][T11735] lock(&ocfs2_file_ip_alloc_sem_key); [ 549.152128][T11735] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 549.152150][T11735] [ 549.152150][T11735] *** DEADLOCK *** [ 549.152150][T11735] [ 549.152155][T11735] 3 locks held by syz.0.1383/11735: [ 549.152167][T11735] #0: ffff888047f22418 (sb_writers#19){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 549.230111][T11735] #1: ffff888078685118 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x40b/0x1d00 [ 549.241497][T11735] #2: ffff888078684da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_write_begin+0x199/0x310 [ 549.252540][T11735] [ 549.252540][T11735] stack backtrace: [ 549.258472][T11735] CPU: 1 PID: 11735 Comm: syz.0.1383 Not tainted syzkaller #0 [ 549.265968][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 549.276152][T11735] Call Trace: [ 549.279474][T11735] [ 549.282451][T11735] dump_stack_lvl+0x16c/0x230 [ 549.287178][T11735] ? load_image+0x3b0/0x3b0 [ 549.291719][T11735] ? show_regs_print_info+0x20/0x20 [ 549.296972][T11735] ? print_circular_bug+0x12b/0x1a0 [ 549.302209][T11735] check_noncircular+0x2bd/0x3c0 [ 549.307190][T11735] ? print_deadlock_bug+0x5d0/0x5d0 [ 549.312436][T11735] ? lockdep_lock+0xe0/0x220 [ 549.317098][T11735] ? _find_first_zero_bit+0xd3/0x100 [ 549.322446][T11735] __lock_acquire+0x2ddb/0x7c80 [ 549.327549][T11735] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 549.333591][T11735] ? __lock_acquire+0x7c80/0x7c80 [ 549.338674][T11735] ? verify_lock_unused+0x140/0x140 [ 549.343928][T11735] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 549.349617][T11735] ? do_raw_spin_lock+0x121/0x2c0 [ 549.354694][T11735] ? mutex_unlock+0x10/0x10 [ 549.359258][T11735] lock_acquire+0x197/0x410 [ 549.363801][T11735] ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 549.370175][T11735] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 549.376203][T11735] ? __might_sleep+0xe0/0xe0 [ 549.380848][T11735] ? read_lock_is_recursive+0x20/0x20 [ 549.386271][T11735] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 549.392476][T11735] ? lockdep_unlock+0x137/0x2d0 [ 549.397410][T11735] ? lockdep_lock+0x220/0x220 [ 549.402137][T11735] down_write+0x97/0x1f0 [ 549.406441][T11735] ? ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 549.412821][T11735] ? down_read_killable+0x340/0x340 [ 549.418065][T11735] ? __lock_acquire+0x2b6b/0x7c80 [ 549.423134][T11735] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 549.429394][T11735] ? stack_trace_save+0x9c/0xe0 [ 549.434314][T11735] ? verify_lock_unused+0x140/0x140 [ 549.439565][T11735] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 549.446289][T11735] ? kasan_set_track+0x5f/0x70 [ 549.451117][T11735] ? ocfs2_file_write_iter+0x1582/0x1d00 [ 549.456820][T11735] ? vfs_write+0x43b/0x940 [ 549.461288][T11735] ? __x64_sys_pwrite64+0x195/0x220 [ 549.466720][T11735] ? do_syscall_64+0x55/0xb0 [ 549.471466][T11735] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.477661][T11735] ? ocfs2_alloc_should_use_local+0x13e/0x2d0 [ 549.483760][T11735] ? __lock_acquire+0x7c80/0x7c80 [ 549.488803][T11735] ? do_raw_spin_lock+0x121/0x2c0 [ 549.493940][T11735] ? __rwlock_init+0x150/0x150 [ 549.498989][T11735] ? do_raw_spin_unlock+0x121/0x230 [ 549.504208][T11735] ? _raw_spin_unlock+0x28/0x40 [ 549.509070][T11735] ? ocfs2_alloc_should_use_local+0x13e/0x2d0 [ 549.515149][T11735] ? ocfs2_reserve_clusters_with_limit+0x16c/0xba0 [ 549.521682][T11735] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 549.528730][T11735] ? ocfs2_reserve_clusters+0x30/0x30 [ 549.534129][T11735] ? ocfs2_read_inode_block+0x11e/0x180 [ 549.539796][T11735] ? rcu_is_watching+0x15/0xb0 [ 549.544594][T11735] ? ocfs2_num_free_extents+0x2e2/0x5a0 [ 549.550171][T11735] ? ocfs2_validate_extent_block+0x550/0x550 [ 549.556188][T11735] ? ocfs2_get_clusters+0x2b4/0xa70 [ 549.561422][T11735] ocfs2_lock_allocators+0x2fb/0x5b0 [ 549.566771][T11735] ? _ocfs2_clear_bit+0x40/0x40 [ 549.571747][T11735] ? do_raw_spin_lock+0x121/0x2c0 [ 549.576920][T11735] ? __rwlock_init+0x150/0x150 [ 549.581791][T11735] ? ocfs2_write_begin_nolock+0xf3a/0x4190 [ 549.587672][T11735] ocfs2_write_begin_nolock+0x225a/0x4190 [ 549.593459][T11735] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 549.599296][T11735] ? verify_lock_unused+0x140/0x140 [ 549.604551][T11735] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 549.611117][T11735] ? __might_sleep+0xe0/0xe0 [ 549.615767][T11735] ? __schedule+0x14da/0x44d0 [ 549.620462][T11735] ? read_lock_is_recursive+0x20/0x20 [ 549.625883][T11735] ? down_write+0x162/0x1f0 [ 549.630424][T11735] ? down_read_killable+0x340/0x340 [ 549.635688][T11735] ? asan.module_dtor+0x20/0x20 [ 549.640571][T11735] ocfs2_write_begin+0x1bc/0x310 [ 549.645672][T11735] ? ocfs2_readahead+0x1a0/0x1a0 [ 549.650655][T11735] ? preempt_schedule+0xab/0xc0 [ 549.655547][T11735] ? preempt_schedule_common+0x82/0xc0 [ 549.661026][T11735] ? fault_in_readable+0x11c/0x160 [ 549.666158][T11735] ? fault_in_iov_iter_readable+0xbf/0x2e0 [ 549.671991][T11735] generic_perform_write+0x2fb/0x5b0 [ 549.677309][T11735] ? generic_file_direct_write+0x3e0/0x3e0 [ 549.683147][T11735] ? __mnt_drop_write_file+0xc3/0x100 [ 549.688557][T11735] ? __generic_file_write_iter+0xf7/0x230 [ 549.694296][T11735] ? ocfs2_file_write_iter+0x1559/0x1d00 [ 549.700047][T11735] ocfs2_file_write_iter+0x1582/0x1d00 [ 549.705556][T11735] ? ocfs2_file_read_iter+0xa30/0xa30 [ 549.710978][T11735] ? rcu_read_lock_any_held+0xb4/0x120 [ 549.716485][T11735] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 549.721828][T11735] vfs_write+0x43b/0x940 [ 549.726093][T11735] ? file_end_write+0x250/0x250 [ 549.730998][T11735] ? __fget_files+0x44a/0x4d0 [ 549.735731][T11735] ? __fdget+0x180/0x210 [ 549.740004][T11735] ? __x64_sys_pwrite64+0xf0/0x220 [ 549.745172][T11735] __x64_sys_pwrite64+0x195/0x220 [ 549.750228][T11735] ? ksys_pwrite64+0x1c0/0x1c0 [ 549.755146][T11735] ? lockdep_hardirqs_on+0x98/0x150 [ 549.760367][T11735] do_syscall_64+0x55/0xb0 [ 549.764900][T11735] ? clear_bhb_loop+0x40/0x90 [ 549.769612][T11735] ? clear_bhb_loop+0x40/0x90 [ 549.774332][T11735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.780245][T11735] RIP: 0033:0x7f3564f8efc9 [ 549.784678][T11735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.804560][T11735] RSP: 002b:00007f3565e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 549.812994][T11735] RAX: ffffffffffffffda RBX: 00007f35651e5fa0 RCX: 00007f3564f8efc9 [ 549.820979][T11735] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 0000000000000004 SYZFAIL: failed to send rpc fd=3 want=1528 sent=0 n=-1 (errno 32: Broken pipe) [ 549.828968][T11735] RBP: 00007f3565011f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.836981][T11735] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 549.844981][T11735] R13: 00007f35651e6038 R14: 00007f35651e5fa0 R15: 00007ffc09fbc338 [ 549.853008][T11735] [ 549.857554][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 549.865955][ T23] usbtmc 5-1:16.0: can't read capabilities [ 549.881951][ T23] usb 5-1: USB disconnect, device number 12 [ 550.113155][ T5783] ocfs2: Unmounting device (7,0) on (node local) [ 550.652660][ T2933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.721572][ T2933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.825202][ T2933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.919453][ T2933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.667429][ T2933] hsr_slave_0: left promiscuous mode [ 551.676062][ T2933] hsr_slave_1: left promiscuous mode [ 551.682462][ T2933] batman_adv: batadv0: Interface deactivated: dummy0 [ 551.689255][ T2933] batman_adv: batadv0: Removing interface: dummy0 [ 551.698234][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.708020][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.718495][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.727329][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.739112][ T2933] bridge_slave_1: left allmulticast mode [ 551.744951][ T2933] bridge_slave_1: left promiscuous mode [ 551.752666][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.762038][ T2933] bridge_slave_0: left allmulticast mode [ 551.767878][ T2933] bridge_slave_0: left promiscuous mode [ 551.773925][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.785636][ T2933] veth1_macvtap: left promiscuous mode [ 551.791601][ T2933] veth0_macvtap: left promiscuous mode [ 551.797240][ T2933] veth1_vlan: left promiscuous mode [ 551.802622][ T2933] veth0_vlan: left promiscuous mode [ 552.009749][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 552.050576][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 552.086814][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.123609][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.218773][ T2933] bond0 (unregistering): Released all slaves [ 552.684140][ T2933] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.747158][ T2933] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.816888][ T2933] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.878579][ T2933] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.008560][ T2933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.056940][ T2933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.137434][ T2933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.198167][ T2933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.332586][ T2933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.407969][ T2933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.482291][ T2933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.548627][ T2933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.685600][ T2933] tipc: Left network mode [ 553.691941][ T2933] tipc: Disabling bearer [ 553.697994][ T2933] tipc: Left network mode [ 554.520703][ T2933] dvmrp17 (unregistering): left allmulticast mode [ 554.539155][ T2933] dvmrp17 (unregistering): left allmulticast mode [ 554.592793][ T2933] IPVS: stopping master sync thread 8887 ... [ 555.106999][ T2933] hsr_slave_0: left promiscuous mode [ 555.114313][ T2933] hsr_slave_1: left promiscuous mode [ 555.124905][ T2933] batman_adv: batadv0: Interface deactivated: dummy0 [ 555.133856][ T2933] batman_adv: batadv0: Removing interface: dummy0 [ 555.141460][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.148915][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.158358][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.166138][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.175611][ T2933] bridge_slave_1: left allmulticast mode [ 555.181766][ T2933] bridge_slave_1: left promiscuous mode [ 555.187550][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.199135][ T2933] bridge_slave_0: left allmulticast mode [ 555.205036][ T2933] bridge_slave_0: left promiscuous mode [ 555.212243][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.225885][ T2933] hsr_slave_0: left promiscuous mode [ 555.233602][ T2933] hsr_slave_1: left promiscuous mode [ 555.239707][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.249112][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.258719][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.266568][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.274365][ T2933] bridge_slave_1: left allmulticast mode [ 555.280452][ T2933] bridge_slave_1: left promiscuous mode [ 555.286167][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.295969][ T2933] bridge_slave_0: left allmulticast mode [ 555.301899][ T2933] bridge_slave_0: left promiscuous mode [ 555.307595][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.319578][ T2933] hsr_slave_0: left promiscuous mode [ 555.325623][ T2933] hsr_slave_1: left promiscuous mode [ 555.332035][ T2933] batman_adv: batadv0: Interface deactivated: dummy0 [ 555.338764][ T2933] batman_adv: batadv0: Removing interface: dummy0 [ 555.345831][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.353373][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.361393][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.368821][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.376698][ T2933] bridge_slave_1: left allmulticast mode [ 555.382462][ T2933] bridge_slave_1: left promiscuous mode [ 555.388149][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.398167][ T2933] bridge_slave_0: left allmulticast mode [ 555.403929][ T2933] bridge_slave_0: left promiscuous mode [ 555.409605][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.424013][ T2933] veth1_macvtap: left promiscuous mode [ 555.429555][ T2933] veth0_macvtap: left promiscuous mode [ 555.435248][ T2933] veth1_vlan: left promiscuous mode [ 555.442606][ T2933] veth1_macvtap: left promiscuous mode [ 555.448332][ T2933] veth0_macvtap: left promiscuous mode [ 555.454051][ T2933] veth1_vlan: left promiscuous mode [ 555.459383][ T2933] veth0_vlan: left promiscuous mode [ 555.467430][ T2933] veth1_macvtap: left promiscuous mode [ 555.473449][ T2933] veth0_macvtap: left promiscuous mode [ 555.479081][ T2933] veth1_vlan: left promiscuous mode [ 555.484454][ T2933] veth0_vlan: left promiscuous mode [ 555.786382][ T2933] team0 (unregistering): Port device veth0_virt_wifi removed [ 555.873902][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 555.912875][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 555.928322][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.943200][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.026124][ T2933] bond0 (unregistering): Released all slaves [ 556.214722][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 556.253395][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 556.266876][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.281795][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.365016][ T2933] bond0 (unregistering): Released all slaves [ 556.580534][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 556.618628][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 556.653969][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.689631][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.769188][ T2933] bond0 (unregistering): Released all slaves