last executing test programs: 6.016232445s ago: executing program 3 (id=300): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060102"], 0x0) 4.804581915s ago: executing program 3 (id=311): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000106d044fc1ffffe600000109022400010800a0090904001001030006000921fcff060122290009058123ff"], 0x0) 4.61616449s ago: executing program 1 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/4, 0x2}, 0x20) 4.616032102s ago: executing program 1 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0x8001, 0x1, 0x1e89, 0x9, 0x800009}, {0xa, 0xfbff, 0x2, 0x0, 0xc8, 0x400101, 0xe}]}) 4.443680659s ago: executing program 1 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xe6) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000e00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x95}}}}}}}, 0x0) 4.443007909s ago: executing program 1 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x19) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4000000000, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 4.256233487s ago: executing program 2 (id=321): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd5, 0xb6, 0xc1, 0x8, 0x1870, 0x1, 0xe67f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$evdev(0x0, 0x3e, 0x208604) 3.586061104s ago: executing program 3 (id=323): syz_open_dev$hidraw(0x0, 0x9, 0x240c0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='7\'', 0x2) r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x903d01) r3 = syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x8000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000001740)=ANY=[], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001640)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x14}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, 0x0, &(0x7f0000000280)={0x20, 0x1, 0x26, "465568428821f3e69c781bd149729d428408429bde6fa479eb647e922bee02003d8990f57741"}, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000580), 0x0, 0x303040) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000015c0)={0x12, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 3.585886398s ago: executing program 1 (id=324): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001040)={0x14, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x38, &(0x7f0000000600)=ANY=[@ANYRES32], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 2.666194005s ago: executing program 2 (id=326): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0xd, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3bd, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.604154161s ago: executing program 2 (id=327): syz_usb_connect(0x0, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) 2.274891099s ago: executing program 1 (id=328): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500254300510b00d6968b373010203010902120001000000000904"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001166000000199efb72e71c7dba0100ed66d5e6312e2851407ba64fffe5d538a2c48ab424b8832dbfc903fb1bcaff8854798086682c978a3a0f6fc46fd9bc57656f754a234179d0f7760d68c76b93441400db12e94a564a01153fd5d79e6fd76b3e2822ffffff", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.935649616s ago: executing program 3 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x1000, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7800000000000000020000000000000400"/32], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x20000) 1.786234184s ago: executing program 3 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b86de) capset(0x0, 0x0) setxattr$incfs_size(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x3) 1.785983881s ago: executing program 3 (id=331): r0 = syz_usb_connect(0x5, 0x248, &(0x7f0000000040)=ANY=[@ANYBLOB="120150024b31d110da0b23d7aed50102030109023602010902a0080904a3c10fffffff0109050e02"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x2, "9993"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.446161302s ago: executing program 2 (id=332): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001000)={0x44, &(0x7f0000000d40)={0x20, 0x6, 0x4, "4807aa67"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0}) 675.942296ms ago: executing program 0 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x1000, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7800000000000000020000000000000400"/32], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x20000) 546.053469ms ago: executing program 0 (id=339): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb9c, 0x2ae40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x8001) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000300)=""/243) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 544.729489ms ago: executing program 0 (id=340): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) read(r0, &(0x7f0000000100)=""/211, 0xd3) 466.153372ms ago: executing program 0 (id=341): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071190600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 465.968666ms ago: executing program 0 (id=342): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x4, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 395.371094ms ago: executing program 0 (id=343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0xff, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, 'J\a\x00', 0x0, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x4}, @ipv4={'\x00', '\xff\xff', @broadcast}, [@hopopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x8, {0x1, 0x0, 0xae, 0xfbff}}]}]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f0000000200)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0xfffd, 0x3) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) fchdir(0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f0000005640)={&(0x7f0000005480)=[&(0x7f0000000140)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, &(0x7f00000001c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000000240)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f00000002c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000000300)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, 0x0, &(0x7f0000000380)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000003c0)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000000400)=@features={{0x4f32494e, 0x6, 0x10, 0x100000000}}, &(0x7f0000000440)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x9}, 0x0, 0x0, 0x0, &(0x7f0000000640)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, 0x0, &(0x7f00000006c0)=@label={{0x4f32494e, 0x4, 0x10}}, 0x0, 0x0, 0x0, &(0x7f0000000840)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000000880)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x5, 0x6}, {0x9aa, 0x3}, {0x10001, 0x1}, {0x6, 0xaca4}, {0x1, 0x5}, {0x3, 0x3}, {0x8, 0x615c}, {0xc5, 0x450}, {0x81, 0x6}, {0x7, 0x2e}, {0x3ff, 0x4}, {0x97b3, 0x5fa3183a}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x7ff, 0x8}, {0x3, 0x4}, {0x8, 0xaa5}, {0x8000000000000001, 0x5}, {0x30000000000, 0x2}, {0x6, 0x1}, {0x6, 0x1}, {0x400, 0xe00}, {0x5, 0x3}, {0x4, 0xa8}, {0xdd22, 0x7}, {0x6, 0xf}, {0x1ff, 0x4d3}, {0x2, 0x3}, {0x5, 0x6}, {0x2, 0xa2}, {0x5, 0x4}, {0x8000, 0xc}, {0x80000000, 0x8}, {0x2400000000000, 0x401}, {0x6, 0xe1f}, {0x3, 0x6}, {0x7f, 0x10001}, {0x73cc, 0x10001}, {0x3, 0x80}, {0x55800000, 0x3ff}, {0x9, 0x3}, {0x0, 0x906}, {0x4, 0x6}, {0x2, 0x3}, {0x7fff, 0xadf}, {0x8, 0x6}, {0x7, 0x28}, {0x7da, 0x9}, {0x6, 0xe727}, {0x0, 0x2}, {0xfffffffffffffe00, 0x2}, {0x8, 0x7fff}, {0x0, 0x1}, {0xfffffffffffffff7, 0xfffffffffffffffe}, {0xffff, 0x8b6}, {0x3d, 0x4}, {0x7fffffffffffffff, 0xffff}, {0xfffffffffffeffff, 0x6}, {0x700000, 0x7}, {0x7, 0x6}, {0x9, 0x8000}, {0xfffffffffffffffe, 0x5}, {0x9, 0xffffffffffffd572}, {0x0, 0x4283192b}, {0x3, 0x8}, {0x80000000, 0x10000000}, {0x6bf, 0x90}, {0x1, 0x2aa}, {0x3, 0x1}, {}, {0x6}, {0x6, 0xffffffffffffffc4}, {0x1, 0xf}, {0x30adcaf8, 0x101}, {0xfffffffffffffffc, 0x9}, {0x2, 0x5}, {0x81}, {0x2, 0x9}, {0x19c3, 0x7}, {0x2ff000, 0x6}, {0x8, 0x1}, {0x1}, {0x48, 0x9}, {0x80000000000, 0xc6}, {0x401, 0x4}, {0x3, 0x9}, {0x30000, 0x18e00000000}, {0x5, 0xf}, {0x200, 0x3}, {0x9, 0x941}, {0x0, 0x5}, {0xff, 0xea}, {0xfffffffffffffff9, 0x9}, {0x8, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x8000000000000000, 0x7f}, {0xffffffffffff8001, 0x8000000000000000}, {0x3, 0x6}, {0xcbe7, 0xf2f}, {0x15dc, 0x1}, {0x6, 0x9}, {0x4, 0x1ff}, {0x2, 0x8000000000}, {0x1, 0x2}, {0xde2, 0x101}, {0x7, 0x4}, {0x7ff, 0x3}, {0x100000000, 0x6}, {0xc6ba, 0x8}, {0x4, 0x6}, {0x8, 0xffff}, {0xb3c, 0x6}, {0xef9b, 0x9}, {0x3, 0x80000000}, {0x1ae9, 0x83}, {0x5, 0x400}, {0x800, 0x4}, {0xbf5, 0x3ff}, {0xc, 0x2}, {0x0, 0x9}, {0x5, 0x5}, {0x9, 0x10}, {0x7, 0x7}, {0x3, 0x5}, {0x1000, 0xffffffffffff036f}, {0xff, 0x80000000}, {0x2, 0x9df}, {0xb, 0x9}, {0xfffffffffffffc01, 0x5}, {0x4, 0x3}, {0xffffffffffffbad3, 0x80000001}, {0x3, 0x1}, {0x100, 0xc}, {0x6, 0xd92}, {0x0, 0xb30}, {0x2, 0x800}, {0x7, 0x2}, {0xf2, 0x8}, {0x60f, 0x6}, {0x6, 0x8000}, {0x0, 0xfffffffffffffff9}, {0x6, 0x8000000}, {0x8, 0x4}, {0x21, 0x9}, {0x7}, {0x7, 0xfffffffffffff910}, {0x0, 0x5}, {0x5, 0x3}, {0x100, 0x7}, {0xfffffffffffffffa, 0x4}, {0x3, 0x3}, {0xc, 0x1152045e}, {0x3336, 0x9c}, {0x2, 0x4}, {0xfffffffffffffff4, 0x1}, {0x81, 0x1}, {0x4, 0x8000}, {0x0, 0x9}, {0x1, 0xff}, {0x9, 0x1}, {0x0, 0x10000}, {0xfffffffffffffffa, 0x8}, {0x6, 0xfffffffffffffffd}, {0x8, 0x3}, {0x81, 0x4}, {0x8, 0x4}, {0x8, 0x80000001}, {0x80000000, 0x7}, {0x800, 0x7}, {0x5, 0x8000000000000000}, {0xffffffffffffffff, 0x2}, {0x7, 0x6}, {0xfffffffffffffffe, 0x3}, {0x100000001, 0x100000001}, {0xc80, 0x1}, {0x0, 0x100000001}, {0xe00, 0xfffffffeffffffff}, {0x100000000, 0x3}, {0x7, 0xf}, {0x2, 0x7}, {0x9, 0x9}, {0x3, 0x1d}, {0x1000, 0x1ff}, {0x4, 0x8000000000000001}, {0xd}, {0xc, 0x5}, {0x0, 0x500}, {0x7, 0x5}, {0x1, 0x210c}, {0x55, 0x64}, {0x6b, 0x3ff}, {0x1, 0xfffffffffffffffc}, {0xfffffffffffffff9, 0x9}, {0x11, 0xfc0}, {0x0, 0xfdc}, {0xa34c, 0x7ff}, {0x0, 0xce}, {0xf97b, 0x10001}, {0xbc, 0x8000000000000001}, {}, {0x236, 0x38}, {0x9, 0x8}, {0x2, 0x5b49}, {0x3, 0xa}, {0xffffffffffffffff, 0x2c418d97}, {0x8, 0x3ff}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x3}, {0x5}, {0x7, 0xfff}, {0x9, 0x8000}, {0xd76f, 0x200000000000000}, {0x9, 0x3}, {0xbaa}, {0xf4d0, 0x7}, {0xa9, 0xc7a4}, {0x9, 0x3}, {0x8000000000000000, 0xffffffffffffff89}, {0x1, 0x6}, {0x1800000000}, {0x496, 0x7}, {0x90000000000, 0x24421c81}, {0x4, 0x5}, {0xfffffffffffffc01, 0x8b1b}, {0x5, 0xfffffffffffffffb}, {0x3, 0xffffffffffffffff}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0x7}, {0x887}, {0x4, 0x4}, {0xfffffffffffffffe, 0xffffffffffffffff}, {0x2}, {0x7f, 0x7fff}, {0x8, 0x4b59bafc}, {}, {0x80000001, 0x10}, {0xfffffffffffffff7, 0x2}, {0x8000, 0x100000001}, {0x10000, 0x694}, {0x2, 0x2}, {0x1, 0x100000001}, {0xec25, 0x800}, {0x1000, 0x869}, {0x1, 0xda5}, {0x9, 0x4}, {0x3, 0x9}, {0xb, 0x9}, {0x7fffffffffffffff, 0x1000}, {0x3, 0x7fffffffffffffff}, {0x0, 0x7ff}, {0x3, 0x3}]}, &(0x7f00000018c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x100000001}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x60000000}}, &(0x7f00000040c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000004100)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000004140)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x17, 0x93}, {0x5, 0x7cdec84}, {0x7, 0x8}, {0xffffffffffffffc2, 0xffffffffffffa0d0}, {0x6, 0x200}, {0x10000, 0x400}, {0x7, 0x1}, {0x8, 0x2}, {0x6, 0xe}, {0x5, 0x19}, {0x7f, 0x7}, {0xc, 0x8}, {0x0, 0x4}, {0x158, 0x3ff}, {0xa44, 0x4}, {0xc, 0xffffffff}, {0xfffffffffffffff7, 0x5}, {0xe33, 0x9}, {0x2, 0xee94}, {0xfffffffffffffffa, 0x8000}, {0xc3, 0xe482}, {0x5, 0x8}, {0xd5fc, 0x7ff}, {0x7, 0x3}, {0xffffffffffffffff, 0x1}, {0x30, 0x7}, {0x2, 0x100000001}, {0xfffffffeffffffff, 0x7fe000000}, {0x7f, 0x5}, {0x7, 0x7}, {0x3, 0x10000}, {0x0, 0x2}, {0xa4b, 0xb7}, {0x2b, 0x3}, {0x0, 0x817}, {0xffffffff7fffffff}, {0x400, 0x7}, {0x94ed, 0x7ff}, {0x5, 0x5}, {0x7, 0xfff}, {0x2, 0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x80000000}, {0x7, 0x8000000000000001}, {0x1, 0x7}, {0x5, 0x40}, {0x9, 0xd}, {0xbb9, 0x7}, {0x4, 0x1}, {0x7f85, 0x80000000}, {0x2, 0x2}, {0xf3db, 0x7}, {0xff, 0x98}, {0x1b4, 0x1000}, {0x80000000, 0xffffffffffffff4d}, {0x8000000000000000, 0x3}, {0x0, 0x6}, {0x95, 0x8}, {0xfffffffffffffffa, 0x73}, {0x51, 0x3}, {0x0, 0x1}, {0x2, 0x6}, {0x8, 0x2}, {0x9, 0x1}, {0x8}, {0x6, 0x1}, {0xabd, 0x6}, {0x69, 0x15b}, {0x8b79ab7, 0x8d63}, {0x2, 0x8000}, {0xdd}, {0x0, 0xfffffffffffff011}, {0x7, 0x6}, {0xffffffffffffffc0, 0x3}, {0x2, 0x3}, {0x2, 0x2}, {0x7}, {0x1, 0x5}, {0x4, 0x3}, {0xffff, 0x7}, {0x3, 0xffffffffffff0000}, {0x9}, {0x10001, 0x3}, {0x1, 0x8}, {0x800, 0xffff}, {0x0, 0x8001}, {0x8, 0x7}, {0x80000000, 0x2}, {0x6, 0x849}, {0x8, 0x6}, {0x100000001, 0x101}, {0x7, 0xfffffffffffffff9}, {0x401, 0x7}, {0x4, 0x573d93dc}, {0x6, 0x9}, {0xe3d, 0xba4e}, {0x3, 0x7}, {0x7ff, 0x7}, {0x7fffffff, 0x3}, {0x38bc, 0x7}, {0x80000001, 0x5}, {0x6, 0xfffffffffffffffb}, {0x6, 0x99d}, {0x6, 0x1000}, {0x1, 0x5}, {0x2f0, 0x7}, {0x3, 0x4}, {0x10, 0x8}, {0x1ff, 0x7}, {0x1ff, 0x100}, {}, {}, {0x4, 0x3}, {0xfffffffffffffff8, 0xc}, {0x0, 0x28}, {0xffffffffffffffff, 0x8}, {0x8001, 0x10001}, {0x8, 0x7}, {0x28000000000, 0x6}, {0xfffffffffffffff3, 0x1c1e}, {0x1, 0x6}, {0x2, 0x549f}, {0x3ff, 0x3}, {0x10001, 0x3}, {0x16b, 0x8001}, {0x9, 0x6}, {0xa11, 0x9}, {0x7, 0xd6}, {0x4, 0xfff}, {0x2, 0x7}, {0x6, 0x81}, {0x2, 0x400}, {0x2b, 0x1f0}, {0x18, 0x2}, {0xab, 0x100000000}, {0x580d, 0x9}, {0x9, 0xffffffffffffffff}, {0x101, 0x1df}, {0x6, 0x3d58}, {0x7, 0x1}, {0x6}, {0xffffffff80000000, 0x8d}, {0x4, 0x3}, {0xfff, 0x9}, {0xfffffffffffffff9, 0x6}, {0x0, 0x7fffffffffffffff}, {0x7, 0x2}, {0xffffffff80000001, 0x7fff}, {0x0, 0x8000000000000001}, {0x2}, {0x9000, 0x8}, {0x80000001, 0x8}, {0x40, 0x6}, {0x2, 0x370}, {0xb, 0x9}, {0xffffffffffffcdd2, 0xffffffffffffffff}, {0x8, 0x8001}, {0x7f, 0x1}, {0x5, 0x7}, {0x81, 0x8000000000000000}, {0x5, 0xfffffffffffffffa}, {0x7, 0x1}, {0x4b81}, {0x5774d21a, 0xf}, {0x3, 0x8}, {0x4, 0x5a5}, {0x5, 0x4000000000000000}, {0x10001, 0x800}, {0x5, 0xa}, {0x0, 0x7fff}, {0x7, 0xbf43}, {0x7, 0x1}, {0x2, 0x6b}, {0x9, 0x5}, {0x7, 0x8}, {0x3, 0x42a}, {0x8001, 0x40}, {0x7ff, 0x6}, {0x3}, {0x9, 0xffff}, {0xfff, 0x100000000}, {0x3, 0x7f}, {0x3, 0x2}, {0xea5, 0x4}, {0x1, 0x4}, {0x8, 0x64a9}, {0x10}, {0x8b3c, 0x1}, {0x24, 0x59d}, {0x3, 0x81}, {0xfff, 0xffff}, {0x6, 0x51e00}, {0xf, 0xf}, {0x2c147ee9, 0x8000000000000001}, {0x9, 0x408660b1}, {0x6, 0x4f8}, {0x5, 0x10}, {0x2, 0x4c}, {0x4, 0x6}, {0x3, 0x7}, {0x917, 0x5}, {0x0, 0xad}, {0xfffe}, {0x273, 0x7fffffff}, {0x6, 0x5}, {0x8, 0x7a}, {0x0, 0x6}, {0x2fb5, 0x5}, {0x0, 0xfffffffffffffff8}, {0x2, 0xffffffff}, {0x5, 0x5}, {0x7, 0x9}, {0x6, 0x7f}, {0x5, 0xffffffffffffff2c}, {0x7, 0x8}, {0xd, 0x653b8a8e}, {0x5, 0xd82a}, {0x5, 0xf2}, {0x500000000000000, 0x5}, {0x0, 0xffffffffffffffff}, {0x5, 0x1}, {0x7, 0x5d}, {0x4}, {0x0, 0xe}, {0x2, 0x6}, {0xffffffffffffffff, 0xa}, {0x1, 0xadf2}, {0x2, 0x6}, {0xda5, 0x3}, {0x0, 0x299}, {0xe09, 0x8}, {0x6, 0xfffffffffffffffa}, {0x7, 0xffffffff}, {0x7, 0x70000}, {0x1000, 0x7}, {0x8000000000000000, 0x375}, {0xd, 0x5}, {0x101, 0x9}, {0x9, 0x7}, {0x6}, {0xd395}, {0x9, 0x1000}, {0x6, 0x4}, {0x9, 0x80000000}, {0x2, 0x7ff}, {0x4, 0xff}, {0x3, 0x2}, {0x200, 0x7}, {0x8, 0xb63b}, {0x4, 0x2}, {0x1, 0x3}, {0x6db4, 0x6}]}, &(0x7f0000005180)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f00000051c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000005200)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000005240)=@blocksize={{0x4f32494e, 0x2, 0x10, 0xc0000001}}, 0x0, &(0x7f00000052c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x9}, &(0x7f0000005400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}], 0x32}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 443.605µs ago: executing program 2 (id=344): setreuid(0xee01, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) 0s ago: executing program 2 (id=345): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x40200, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffe, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x8000a]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10172' (ED25519) to the list of known hosts. [ 57.406610][ T5927] cgroup: Unknown subsys name 'net' [ 57.532642][ T5927] cgroup: Unknown subsys name 'cpuset' [ 57.538570][ T5927] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.527036][ T5927] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.113874][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.116865][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.120367][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.122717][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.125134][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.126286][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.128072][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.130022][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.132556][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.134226][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.137130][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.141061][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.142685][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.142765][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.145058][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.148953][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.149096][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.149735][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.150489][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.152940][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.412887][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 62.418126][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 62.542483][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 62.576710][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.579855][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.582391][ T5941] bridge_slave_0: entered allmulticast mode [ 62.585481][ T5941] bridge_slave_0: entered promiscuous mode [ 62.593343][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.595722][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.597925][ T5941] bridge_slave_1: entered allmulticast mode [ 62.600509][ T5941] bridge_slave_1: entered promiscuous mode [ 62.702397][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.705282][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.710968][ T5951] bridge_slave_0: entered allmulticast mode [ 62.716383][ T5951] bridge_slave_0: entered promiscuous mode [ 62.720685][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.723514][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.726554][ T5951] bridge_slave_1: entered allmulticast mode [ 62.730077][ T5951] bridge_slave_1: entered promiscuous mode [ 62.733388][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 62.755608][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.773027][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.775998][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.778802][ T5940] bridge_slave_0: entered allmulticast mode [ 62.781650][ T5940] bridge_slave_0: entered promiscuous mode [ 62.787232][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.791724][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.800676][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.809256][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.811558][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.814494][ T5940] bridge_slave_1: entered allmulticast mode [ 62.817268][ T5940] bridge_slave_1: entered promiscuous mode [ 62.852281][ T5951] team0: Port device team_slave_0 added [ 62.858972][ T5951] team0: Port device team_slave_1 added [ 62.874566][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.879387][ T5941] team0: Port device team_slave_0 added [ 62.893354][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.906161][ T5941] team0: Port device team_slave_1 added [ 62.928655][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.931327][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.940938][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.964092][ T5940] team0: Port device team_slave_0 added [ 62.974279][ T5940] team0: Port device team_slave_1 added [ 62.977094][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.979301][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.987378][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.991241][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.993452][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.001446][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.005099][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.007464][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.009748][ T5942] bridge_slave_0: entered allmulticast mode [ 63.012437][ T5942] bridge_slave_0: entered promiscuous mode [ 63.015839][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.018149][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.020461][ T5942] bridge_slave_1: entered allmulticast mode [ 63.023161][ T5942] bridge_slave_1: entered promiscuous mode [ 63.035724][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.038157][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.048295][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.062698][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.064890][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.072888][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.090622][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.093718][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.096105][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.103885][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.129883][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.149151][ T5951] hsr_slave_0: entered promiscuous mode [ 63.152339][ T5951] hsr_slave_1: entered promiscuous mode [ 63.165930][ T5941] hsr_slave_0: entered promiscuous mode [ 63.169012][ T5941] hsr_slave_1: entered promiscuous mode [ 63.171986][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 63.174374][ T5941] Cannot create hsr debugfs directory [ 63.185967][ T5940] hsr_slave_0: entered promiscuous mode [ 63.188220][ T5940] hsr_slave_1: entered promiscuous mode [ 63.190296][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 63.192063][ T5940] Cannot create hsr debugfs directory [ 63.203046][ T5942] team0: Port device team_slave_0 added [ 63.211496][ T5942] team0: Port device team_slave_1 added [ 63.266144][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.268639][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.277732][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.304645][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.307199][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.315203][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.418621][ T5942] hsr_slave_0: entered promiscuous mode [ 63.422012][ T5942] hsr_slave_1: entered promiscuous mode [ 63.424518][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 63.426816][ T5942] Cannot create hsr debugfs directory [ 63.539160][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.553353][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.563363][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.569218][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.618961][ T5941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.624630][ T5941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.629061][ T5941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.637089][ T5941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.693380][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.709395][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.718118][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.723191][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.761419][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.765999][ T5942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.770952][ T5942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.780113][ T5942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.784408][ T5942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.802577][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.834415][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.836846][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.840983][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.843131][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.900384][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.907135][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.924156][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.932280][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.937069][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.941612][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.944002][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.951265][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.953505][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.957602][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.959882][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.969838][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.976624][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.978836][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.986131][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.988433][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.000046][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.002294][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.070397][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.079533][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.112513][ T5940] veth0_vlan: entered promiscuous mode [ 64.118744][ T5940] veth1_vlan: entered promiscuous mode [ 64.134028][ T5940] veth0_macvtap: entered promiscuous mode [ 64.139271][ T5940] veth1_macvtap: entered promiscuous mode [ 64.148961][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.156166][ T5945] Bluetooth: hci3: command tx timeout [ 64.170387][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.184790][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.190894][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198231][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.200931][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.217411][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.224009][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.235464][ T5945] Bluetooth: hci2: command tx timeout [ 64.235490][ T5299] Bluetooth: hci0: command tx timeout [ 64.235914][ T5947] Bluetooth: hci1: command tx timeout [ 64.239714][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.269549][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.272857][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.297584][ T5942] veth0_vlan: entered promiscuous mode [ 64.308799][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.311542][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.317807][ T5941] veth0_vlan: entered promiscuous mode [ 64.321095][ T5942] veth1_vlan: entered promiscuous mode [ 64.333074][ T5951] veth0_vlan: entered promiscuous mode [ 64.343445][ qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa8000) T5951] veth1_vlan: entered promiscuous mode [ 64.347391][ T5941] veth1_vlan: entered promiscuous mode [ 64.362905][ T5942] veth0_macvtap: entered promiscuous mode [ 64.366778][ T5942] veth1_macvtap: entered promiscuous mode [ 64.368802][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.382559][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.396321][ T1110] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 64.402189][ T5941] veth0_macvtap: entered promiscuous mode [ 64.405410][ T1110] ata1: failed to read log page 10h (errno=-5) [ 64.407342][ T1110] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 64.407930][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.409660][ T1110] ata1.00: irq_stat 0x41000000 [ 64.413244][ T1110] ata1.00: failed command: READ FPDMA QUEUED [ 64.415010][ T1110] ata1.00: cmd 60/40:f0:1e:7b:03/05:00:00:00:00/40 tag 30 ncq dma 688128 in [ 64.415010][ T1110] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 64.421414][ T1110] ata1.00: status: { DRDY } [ 64.423087][ T1110] ata1.00: error: { ABRT } [ 64.425159][ T1110] ata1.00: configured for UDMA/100 [ 64.426016][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.427109][ T1110] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 64.430052][ T5941] veth1_macvtap: entered promiscuous mode [ 64.432370][ T1110] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 64.436888][ T1110] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 64.439518][ T1110] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 7b 1e 00 05 40 00 [ 64.440784][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.442213][ T1110] I/O error, dev sda, sector 228126 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 64.447643][ T1110] ata1: EH complete [ 64.448736][ T5951] veth0_macvtap: entered promiscuous mode [ 64.453864][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.458089][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.460909][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.468761][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.478911][ T5951] veth1_macvtap: entered promiscuous mode [ 64.484915][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.488152][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.508824][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.511865][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.517941][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.534979][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.548472][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.551690][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.616119][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.619301][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.623094][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.626195][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.664126][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.671552][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.695787][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.698213][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.708669][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.711005][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.731277][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.733655][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.773382][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.776386][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.826264][ T6045] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 64.841980][ T6048] netlink: 400 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.112261][ T6089] syz.0.27 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.439613][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.55'. [ 65.445021][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.55'. [ 65.598094][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 65.604391][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.68'. [ 65.966038][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.95'. [ 65.970997][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.95'. [ 66.097393][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.107'. [ 66.104234][ T6251] syzkaller0: entered promiscuous mode [ 66.107510][ T6251] syzkaller0: entered allmulticast mode [ 66.122461][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.107'. [ 66.235887][ T5299] Bluetooth: hci3: command tx timeout [ 66.315534][ T5299] Bluetooth: hci2: command tx timeout [ 66.315839][ T5945] Bluetooth: hci0: command tx timeout [ 66.316422][ T5947] Bluetooth: hci1: command tx timeout [ 66.362003][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 66.991146][ T6310] binder: binder_mmap: 6309 809c6000-809c8000 bad vm_flags failed -1 [ 67.028921][ T6314] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.208160][ T6322] Illegal XDP return value 4294967294 on prog (id 25) dev syz_tun, expect packet loss! [ 67.225455][ T6038] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 67.365590][ T6330] hub 9-0:1.0: USB hub found [ 67.367282][ T6330] hub 9-0:1.0: 1 port detected [ 67.407150][ T6038] usb 7-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config [ 67.410423][ T6038] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 67.415872][ T6038] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.418686][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 67.421549][ T6038] usb 7-1: SerialNumber: syz [ 67.429420][ T6038] cdc_ether 7-1:1.0: invalid descriptor buffer length [ 67.432679][ T6038] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 67.525411][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 67.634729][ T6038] usb 7-1: USB disconnect, device number 2 [ 67.688867][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 67.693255][ T29] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 67.702298][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 67.706097][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.708887][ T29] usb 8-1: Product: syz [ 67.710353][ T29] usb 8-1: Manufacturer: syz [ 67.712010][ T29] usb 8-1: SerialNumber: syz [ 67.922891][ T29] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.931936][ T29] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 67.934811][ T29] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 67.938096][ T29] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 67.958013][ T29] usb 8-1: USB disconnect, device number 2 [ 67.978295][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.315585][ T5945] Bluetooth: hci3: command tx timeout [ 68.395902][ T5945] Bluetooth: hci0: command tx timeout [ 68.396179][ T5943] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.396315][ T5947] Bluetooth: hci2: command tx timeout [ 68.396392][ T5299] Bluetooth: hci1: command tx timeout [ 68.557079][ T5943] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 68.561315][ T5943] usb 5-1: config 1 interface 0 has no altsetting 0 [ 68.567248][ T5943] usb 5-1: string descriptor 0 read error: -22 [ 68.569427][ T5943] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.40 [ 68.572417][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.986865][ T5943] chicony 0003:04F2:1421.0002: collection stack underflow [ 68.989517][ T5943] chicony 0003:04F2:1421.0002: item 0 0 0 12 parsing failed [ 68.992390][ T5943] chicony 0003:04F2:1421.0002: Chicony hid parse failed: -22 [ 68.995013][ T5943] chicony 0003:04F2:1421.0002: probe with driver chicony failed with error -22 [ 69.185479][ T29] usb 5-1: USB disconnect, device number 2 [ 69.775422][ T29] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 69.961555][ T29] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 69.969830][ T29] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.974289][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 69.979209][ T29] usb 8-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 69.982142][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.991176][ T29] usb 8-1: config 0 descriptor?? [ 69.993275][ T6366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.402218][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.404600][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.405460][ T5945] Bluetooth: hci3: command tx timeout [ 70.407244][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.410598][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.412678][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.414785][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.417018][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.419215][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.421308][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.423389][ T29] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 70.431305][ T29] sony 0003:054C:0374.0003: hiddev0,hidraw1: USB HID v0.20 Device [HID 054c:0374] on usb-dummy_hcd.3-1/input0 [ 70.434928][ T29] sony 0003:054C:0374.0003: failed to claim input [ 70.475491][ T5945] Bluetooth: hci0: command tx timeout [ 70.486220][ T5299] Bluetooth: hci2: command tx timeout [ 70.488150][ T5945] Bluetooth: hci1: command tx timeout [ 70.600771][ T29] usb 8-1: USB disconnect, device number 3 [ 71.205041][ T6422] __nla_validate_parse: 2 callbacks suppressed [ 71.205053][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 71.216936][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 71.481474][ T50] kernel read not supported for file /114/oom_score (pid: 50 comm: kworker/2:1) [ 71.536055][ T6448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.695448][ T54] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.867779][ T54] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.873336][ T54] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.876588][ T6466] futex_wake_op: syz.0.196 tries to shift op by 144; fix this program [ 71.879191][ T54] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.882345][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.885032][ T54] usb 8-1: SerialNumber: syz [ 72.000539][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.199'. [ 72.094977][ T54] usb 8-1: 0:2 : does not exist [ 72.119304][ T54] usb 8-1: USB disconnect, device number 4 [ 72.138106][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.212380][ T6480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.215989][ T6480] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 72.316980][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.349344][ T6485] syzkaller0: entered promiscuous mode [ 72.351619][ T6485] syzkaller0: entered allmulticast mode [ 72.475407][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 72.496770][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 72.500406][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 72.505879][ T29] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 72.508935][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.512173][ T29] usb 7-1: Product: syz [ 72.513585][ T29] usb 7-1: Manufacturer: syz [ 72.515157][ T29] usb 7-1: SerialNumber: syz [ 72.518189][ T29] usb 7-1: config 0 descriptor?? [ 72.750043][ T29] usb 7-1: USB disconnect, device number 3 [ 72.762470][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.885722][ T6499] syzkaller0: create flow: hash 675058271 index 2 [ 72.899668][ T6499] syzkaller0: delete flow: hash 675058271 index 2 [ 73.265484][ T6507] binder: 6506:6507 ioctl c0306201 80000640 returned -22 [ 73.615525][ T5943] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.777479][ T5943] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.780814][ T5943] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.785312][ T5943] usb 7-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 73.789143][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.791798][ T5943] usb 7-1: Product: syz [ 73.793197][ T5943] usb 7-1: Manufacturer: syz [ 73.794741][ T5943] usb 7-1: SerialNumber: syz [ 73.918470][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.008940][ T5943] usb 7-1: 0:1 : does not exist [ 74.010726][ T5943] usb 7-1: unit 4 not found! [ 74.031662][ T5943] usb 7-1: USB disconnect, device number 4 [ 74.045053][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.085741][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 74.088949][ T10] usb 5-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 74.092373][ T10] usb 5-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 74.097753][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 74.100923][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.103655][ T10] usb 5-1: Product: syz [ 74.105126][ T10] usb 5-1: Manufacturer: syz [ 74.108368][ T10] usb 5-1: SerialNumber: syz [ 74.326589][ T10] usb 5-1: unit 2 not found! [ 74.345065][ T10] usb 5-1: USB disconnect, device number 3 [ 74.364034][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.532670][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.536296][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 74.649847][ T6550] vlan2: entered promiscuous mode [ 74.652084][ T6550] vlan0: entered promiscuous mode [ 75.078416][ T6574] ======================================================= [ 75.078416][ T6574] WARNING: The mand mount option has been deprecated and [ 75.078416][ T6574] and is ignored by this kernel. Remove the mand [ 75.078416][ T6574] option from the mount to silence this warning. [ 75.078416][ T6574] ======================================================= [ 75.998198][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.000304][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.565477][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 76.565502][ T5299] Bluetooth: hci4: command 0x1003 tx timeout [ 76.645489][ T5943] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 76.796601][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 76.801608][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.806631][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.811514][ T5943] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 76.815981][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.822655][ T5943] usb 6-1: config 0 descriptor?? [ 77.075408][ T50] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 77.228212][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 77.234360][ T5943] elecom 0003:056E:00FE.0004: invalid report_count 37697 [ 77.235269][ T50] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 77.239264][ T5943] elecom 0003:056E:00FE.0004: item 0 2 1 9 parsing failed [ 77.239315][ T50] usb 7-1: can't read configurations, error -71 [ 77.241990][ T5943] elecom 0003:056E:00FE.0004: probe with driver elecom failed with error -22 [ 77.432643][ T29] usb 6-1: USB disconnect, device number 2 [ 78.041525][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 78.272554][ T6688] overlayfs: missing 'lowerdir' [ 78.285518][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.377837][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 78.436285][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 78.440392][ T50] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 78.443273][ T50] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 78.446210][ T50] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 78.449710][ T50] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 78.453087][ T50] usb 7-1: config 250 has no interface number 0 [ 78.455708][ T50] usb 7-1: config 250 interface 228 has no altsetting 0 [ 78.459714][ T50] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 78.462769][ T50] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 78.465612][ T50] usb 7-1: Product: syz [ 78.467091][ T50] usb 7-1: SerialNumber: syz [ 78.473302][ T50] hub 7-1:250.228: bad descriptor, ignoring hub [ 78.475598][ T50] hub 7-1:250.228: probe with driver hub failed with error -5 [ 78.813823][ T132] Bluetooth: hci4: Frame reassembly failed (-84) [ 78.935450][ T5943] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.946418][ T29] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 79.061587][ T6719] netlink: 76 bytes leftover after parsing attributes in process `syz.1.304'. [ 79.086016][ T5943] usb 8-1: Using ep0 maxpacket: 8 [ 79.088847][ T5943] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 79.091400][ T5943] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.094577][ T5943] usb 8-1: config 0 has no interface number 0 [ 79.098958][ T5943] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 79.101867][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.104385][ T5943] usb 8-1: Product: syz [ 79.105869][ T5943] usb 8-1: Manufacturer: syz [ 79.107364][ T5943] usb 8-1: SerialNumber: syz [ 79.110141][ T5943] usb 8-1: config 0 descriptor?? [ 79.113433][ T5943] uvcvideo 8-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 79.116252][ T5943] uvcvideo 8-1:0.31: Failed to create links for entity 32774 [ 79.118608][ T5943] uvcvideo 8-1:0.31: Failed to register entities (-22). [ 79.154776][ T6721] capability: warning: `syz.1.305' uses deprecated v2 capabilities in a way that may be insecure [ 79.187691][ T6723] veth0: entered promiscuous mode [ 79.190434][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 79.316916][ T5959] usb 8-1: USB disconnect, device number 5 [ 79.615950][ T50] usb 7-1: USB disconnect, device number 6 [ 80.175463][ T50] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.335832][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 80.338808][ T50] usb 8-1: config 8 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.345163][ T50] usb 8-1: config 8 interface 0 has no altsetting 0 [ 80.348395][ T50] usb 8-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 80.351225][ T50] usb 8-1: New USB device strings: Mfr=230, Product=0, SerialNumber=0 [ 80.353766][ T50] usb 8-1: Manufacturer: syz [ 80.569523][ T29] usb 8-1: USB disconnect, device number 6 [ 80.695567][ T5943] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 80.857081][ T5943] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.859926][ T5943] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 80.863189][ T5943] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.866142][ T5943] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.869720][ T5943] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 80.873173][ T5943] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 80.875492][ T5945] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 80.875533][ T5299] Bluetooth: hci4: command 0x1003 tx timeout [ 80.877966][ T5943] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.883820][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.886466][ T5943] usb 7-1: Product: syz [ 80.887817][ T5943] usb 7-1: Manufacturer: syz [ 80.895653][ T6757] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.898705][ T5943] cdc_wdm 7-1:1.0: skipping garbage [ 80.900400][ T5943] cdc_wdm 7-1:1.0: skipping garbage [ 80.908138][ T5943] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 80.910378][ T5943] cdc_wdm 7-1:1.0: Unknown control protocol [ 81.116836][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.119660][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.122455][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.125261][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.128096][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.130646][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.132748][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.134828][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.137137][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.139695][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.142466][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.145216][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.148160][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.151032][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.153906][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.156681][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.160801][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.163291][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.165426][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 81.167555][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 81.170189][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.173753][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.281555][ T24] usb 7-1: USB disconnect, device number 7 [ 81.281970][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 81.287180][ T6757] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 81.345484][ T5943] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 81.415620][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 81.425467][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.495858][ T5943] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 81.499611][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.502481][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.506020][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.508835][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.511733][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.515270][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.518325][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.521136][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.524849][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.528404][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.531224][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.534587][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.537563][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.540378][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.544118][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.547588][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.550391][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.553831][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.557284][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.560071][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.563532][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.566489][ T5943] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 81.569288][ T5943] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 81.572703][ T5943] usb 8-1: config 0 interface 0 has no altsetting 0 [ 81.576257][ T5943] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 81.579165][ T5943] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 81.581878][ T5943] usb 8-1: Product: syz [ 81.583342][ T5943] usb 8-1: Manufacturer: syz [ 81.584802][ T5943] usb 8-1: SerialNumber: syz [ 81.592104][ T5943] usb 8-1: config 0 descriptor?? [ 81.595455][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 81.598093][ T5943] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 81.598788][ T50] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 81.603612][ T50] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 81.603721][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.606481][ T50] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 81.610931][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.612505][ T50] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 81.612519][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 81.612531][ T50] usb 6-1: config 0 has no interface number 0 [ 81.612564][ T50] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 81.615770][ T29] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 81.618432][ T50] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 81.621251][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.623387][ T50] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.628841][ T29] usb 5-1: config 0 descriptor?? [ 81.630038][ T50] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.645085][ T50] usb 6-1: config 0 interface 125 has no altsetting 0 [ 81.647344][ T50] usb 6-1: config 0 interface 125 has no altsetting 2 [ 81.651014][ T50] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 81.654149][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.657617][ T50] usb 6-1: Product: syz [ 81.659499][ T50] usb 6-1: Manufacturer: syz [ 81.661563][ T50] usb 6-1: SerialNumber: syz [ 81.664631][ T50] usb 6-1: config 0 descriptor?? [ 81.668087][ T50] usb 6-1: selecting invalid altsetting 2 [ 81.871181][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.874137][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.877527][ C2] usb 6-1: async_complete: urb error -71 [ 81.879339][ C2] usb 6-1: async_complete: urb error -71 [ 81.881140][ C2] usb 6-1: async_complete: urb error -71 [ 81.882938][ C2] usb 6-1: async_complete: urb error -71 [ 81.885635][ T50] get_1284_register: usb error -71 [ 81.889678][ T50] usb 6-1: USB disconnect, device number 3 [ 81.967885][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.970727][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.979758][ C0] usb 8-1: yurex_control_callback - control failed: -71 [ 81.982208][ T5943] usb 8-1: USB disconnect, device number 7 [ 81.985977][ T5943] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 82.039570][ T29] hid_parser_main: 23 callbacks suppressed [ 82.039584][ T29] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 82.048094][ T29] cp2112 0003:10C4:EA90.0005: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 82.244313][ T29] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 82.335807][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 82.487799][ T50] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 82.493549][ T50] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 82.497276][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.500543][ T50] usb 7-1: Product: syz [ 82.502254][ T50] usb 7-1: Manufacturer: syz [ 82.504129][ T50] usb 7-1: SerialNumber: syz [ 82.511491][ T50] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 82.655557][ T5959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 82.714794][ T50] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.719253][ T50] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 82.721960][ T50] usb 7-1: media controller created [ 82.728920][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.777055][ T50] usb 7-1: USB disconnect, device number 8 [ 82.805457][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 82.808608][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.813130][ T5959] usb 6-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 82.816145][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.818775][ T5959] usb 6-1: Product: syz [ 82.820156][ T5959] usb 6-1: Manufacturer: syz [ 82.821702][ T5959] usb 6-1: SerialNumber: syz [ 82.824502][ T5959] usb 6-1: config 0 descriptor?? [ 83.032914][ T5959] usb 6-1: USB disconnect, device number 4 [ 83.056108][ T50] usb 5-1: USB disconnect, device number 4 [ 83.195845][ T5943] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.345496][ T5943] usb 8-1: Using ep0 maxpacket: 16 [ 83.351119][ T5943] usb 8-1: unable to get BOS descriptor or descriptor too short [ 83.354970][ T5943] usb 8-1: config 9 has an invalid interface number: 163 but max is 0 [ 83.357879][ T5943] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 83.360977][ T5943] usb 8-1: config 9 has no interface number 0 [ 83.362858][ T5943] usb 8-1: config 9 interface 163 altsetting 193 endpoint 0xE has invalid wMaxPacketSize 0 [ 83.367309][ T5943] usb 8-1: config 9 interface 163 altsetting 193 bulk endpoint 0xE has invalid maxpacket 0 [ 83.371342][ T5943] usb 8-1: config 9 interface 163 altsetting 193 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 83.377423][ T5943] usb 8-1: config 9 interface 163 has no altsetting 0 [ 83.383078][ T5943] usb 8-1: string descriptor 0 read error: -22 [ 83.385907][ T5943] usb 8-1: New USB device found, idVendor=0bda, idProduct=d723, bcdDevice=d5.ae [ 83.389529][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.495457][ T5959] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 83.505509][ T50] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 83.655537][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 83.655541][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 83.657481][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 83.660614][ T50] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 83.665121][ T50] usb 7-1: config 0 has no interface number 0 [ 83.666265][ T5959] usb 6-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 83.667054][ T50] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.670463][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.675112][ T50] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 83.678860][ T5959] usb 6-1: Product: syz [ 83.682816][ T50] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 83.684300][ T5959] usb 6-1: Manufacturer: syz [ 83.689190][ T50] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 83.691183][ T5959] usb 6-1: SerialNumber: syz [ 83.695169][ T50] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 83.701868][ T50] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.705675][ T50] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 83.705926][ T5959] usb 6-1: config 0 descriptor?? [ 83.709511][ T50] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 83.715512][ T50] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.722450][ T50] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 83.726013][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.729082][ T50] usb 7-1: Product: syz [ 83.730717][ T50] usb 7-1: Manufacturer: syz [ 83.732583][ T50] usb 7-1: SerialNumber: syz [ 83.736422][ T50] usb 7-1: config 0 descriptor?? [ 83.739105][ T6790] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.742111][ T6790] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 83.746198][ T50] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 83.749477][ T50] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 83.768551][ T50] scsi host6: microtekX6 [ 83.914872][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.148614][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.151481][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.155904][ T50] usb 7-1: USB disconnect, device number 9 [ 84.729433][ T6827] loop6: detected capacity change from 0 to 7 [ 84.738639][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.742283][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.745506][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.748755][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.751429][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.754545][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.757384][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.760457][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.763248][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.766687][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.769545][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.772595][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.775818][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.778803][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.781451][ T5949] ldm_validate_partition_table(): Disk read failed. [ 84.785805][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.789601][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.792905][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.796423][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.836082][ T6828] [ 84.837186][ T6828] ====================================================== [ 84.840144][ T6828] WARNING: possible circular locking dependency detected [ 84.843084][ T6828] syzkaller #0 Not tainted [ 84.845044][ T6828] ------------------------------------------------------ [ 84.847958][ T6828] syz.2.345/6828 is trying to acquire lock: [ 84.850443][ T6828] ffff88801caf4220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 84.854720][ T6828] [ 84.854720][ T6828] but task is already holding lock: [ 84.857885][ T6828] ffff888027550060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 84.862646][ T6828] [ 84.862646][ T6828] which lock already depends on the new lock. [ 84.862646][ T6828] [ 84.866962][ T6828] [ 84.866962][ T6828] the existing dependency chain (in reverse order) is: [ 84.870725][ T6828] [ 84.870725][ T6828] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 84.874361][ T6828] blk_alloc_queue+0x610/0x790 [ 84.876701][ T6828] blk_mq_alloc_queue+0x174/0x290 [ 84.879098][ T6828] __blk_mq_alloc_disk+0x29/0x120 [ 84.881419][ T6828] loop_add+0x498/0xb60 [ 84.883464][ T6828] loop_init+0x1d3/0x200 [ 84.885506][ T6828] do_one_initcall+0x11d/0x760 [ 84.887752][ T6828] kernel_init_freeable+0x6e5/0x7a0 [ 84.890132][ T6828] kernel_init+0x1f/0x1e0 [ 84.891901][ T6828] ret_from_fork+0x754/0xd80 [ 84.893470][ T6828] ret_from_fork_asm+0x1a/0x30 [ 84.895098][ T6828] [ 84.895098][ T6828] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 84.897399][ T6828] fs_reclaim_acquire+0xc4/0x100 [ 84.899091][ T6828] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 84.900900][ T6828] __kernfs_iattrs+0x126/0x400 [ 84.902574][ T6828] __kernfs_setattr+0x4d/0x3c0 [ 84.904252][ T6828] kernfs_iop_setattr+0xda/0x130 [ 84.905910][ T6828] notify_change+0xb25/0x1330 [ 84.907500][ T6828] do_truncate+0x1df/0x240 [ 84.909091][ T6828] path_openat+0x2a55/0x31a0 [ 84.910718][ T6828] do_file_open+0x20e/0x430 [ 84.912252][ T6828] do_sys_openat2+0x10d/0x1e0 [ 84.913849][ T6828] __x64_sys_openat+0x12d/0x210 [ 84.915579][ T6828] do_syscall_64+0x106/0xf80 [ 84.917205][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.919314][ T6828] [ 84.919314][ T6828] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 84.922222][ T6828] __lock_acquire+0x14b8/0x2630 [ 84.923952][ T6828] lock_acquire+0x1cf/0x380 [ 84.925589][ T6828] down_read+0x99/0x460 [ 84.927127][ T6828] kernfs_iop_getattr+0x9c/0xf0 [ 84.928893][ T6828] vfs_getattr_nosec+0x2d4/0x430 [ 84.930586][ T6828] vfs_getattr+0x4a/0x60 [ 84.932081][ T6828] loop_query_min_dio_size.isra.0+0x117/0x250 [ 84.934099][ T6828] lo_ioctl+0x13aa/0x1bc0 [ 84.935629][ T6828] lo_compat_ioctl+0xf3/0x160 [ 84.937243][ T6828] compat_blkdev_ioctl+0x682/0x7b0 [ 84.939001][ T6828] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 84.940826][ T6828] __do_fast_syscall_32+0xe3/0x8c0 [ 84.942558][ T6828] do_fast_syscall_32+0x32/0x70 [ 84.944245][ T6828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.946457][ T6828] [ 84.946457][ T6828] other info that might help us debug this: [ 84.946457][ T6828] [ 84.949561][ T6828] Chain exists of: [ 84.949561][ T6828] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 84.949561][ T6828] [ 84.953825][ T6828] Possible unsafe locking scenario: [ 84.953825][ T6828] [ 84.956088][ T6828] CPU0 CPU1 [ 84.957718][ T6828] ---- ---- [ 84.959359][ T6828] lock(&q->q_usage_counter(io)#23); [ 84.960965][ T6828] lock(fs_reclaim); [ 84.963015][ T6828] lock(&q->q_usage_counter(io)#23); [ 84.965552][ T6828] rlock(&root->kernfs_iattr_rwsem); [ 84.967260][ T6828] [ 84.967260][ T6828] *** DEADLOCK *** [ 84.967260][ T6828] [ 84.969815][ T6828] 3 locks held by syz.2.345/6828: [ 84.971421][ T6828] #0: ffff888027694448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 84.974593][ T6828] #1: ffff888027550060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 84.978258][ T6828] #2: ffff888027550098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 84.982056][ T6828] [ 84.982056][ T6828] stack backtrace: [ 84.984218][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.2.345 Not tainted syzkaller #0 PREEMPT(full) [ 84.984233][ T6828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.984240][ T6828] Call Trace: [ 84.984249][ T6828] [ 84.984254][ T6828] dump_stack_lvl+0x100/0x190 [ 84.984274][ T6828] print_circular_bug.cold+0x178/0x1c7 [ 84.984293][ T6828] check_noncircular+0x146/0x160 [ 84.984309][ T6828] __lock_acquire+0x14b8/0x2630 [ 84.984325][ T6828] lock_acquire+0x1cf/0x380 [ 84.984338][ T6828] ? kernfs_iop_getattr+0x9c/0xf0 [ 84.984353][ T6828] ? __pfx___might_resched+0x10/0x10 [ 84.984372][ T6828] down_read+0x99/0x460 [ 84.984384][ T6828] ? kernfs_iop_getattr+0x9c/0xf0 [ 84.984398][ T6828] ? find_held_lock+0x2b/0x80 [ 84.984413][ T6828] ? __pfx_down_read+0x10/0x10 [ 84.984424][ T6828] ? kernfs_root+0xee/0x2a0 [ 84.984439][ T6828] kernfs_iop_getattr+0x9c/0xf0 [ 84.984455][ T6828] vfs_getattr_nosec+0x2d4/0x430 [ 84.984468][ T6828] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 84.984485][ T6828] vfs_getattr+0x4a/0x60 [ 84.984497][ T6828] loop_query_min_dio_size.isra.0+0x117/0x250 [ 84.984516][ T6828] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 84.984537][ T6828] lo_ioctl+0x13aa/0x1bc0 [ 84.984555][ T6828] ? __pfx_lo_ioctl+0x10/0x10 [ 84.984573][ T6828] ? tomoyo_path_number_perm+0x46d/0x580 [ 84.984587][ T6828] ? kasan_quarantine_put+0x104/0x240 [ 84.984603][ T6828] ? blk_get_meta_cap+0xd4/0x6c0 [ 84.984618][ T6828] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 84.984633][ T6828] ? find_held_lock+0x2b/0x80 [ 84.984643][ T6828] ? tomoyo_path_number_perm+0x28f/0x580 [ 84.984657][ T6828] ? blkdev_common_ioctl+0x515/0x2ba0 [ 84.984673][ T6828] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 84.984691][ T6828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 84.984702][ T6828] ? do_vfs_ioctl+0x226/0x13e0 [ 84.984717][ T6828] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 84.984734][ T6828] lo_compat_ioctl+0xf3/0x160 [ 84.984750][ T6828] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 84.984766][ T6828] compat_blkdev_ioctl+0x682/0x7b0 [ 84.984783][ T6828] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 84.984800][ T6828] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 84.984816][ T6828] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 84.984833][ T6828] __do_fast_syscall_32+0xe3/0x8c0 [ 84.984845][ T6828] do_fast_syscall_32+0x32/0x70 [ 84.984856][ T6828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.984870][ T6828] RIP: 0023:0xf70aef6c [ 84.984879][ T6828] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 84.984889][ T6828] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 84.984899][ T6828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 84.984906][ T6828] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.984912][ T6828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.984917][ T6828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 84.984923][ T6828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.984932][ T6828] [ 85.082256][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.085533][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.089672][ T5949] Dev loop6: unable to read RDB block 0 [ 85.091943][ T5949] loop6: unable to read partition table [ 85.093834][ T5949] loop6: partition table beyond EOD, truncated [ 85.097351][ T6827] ldm_validate_partition_table(): Disk read failed. [ 85.099778][ T6827] Dev loop6: unable to read RDB block 0 [ 85.101921][ T6827] loop6: unable to read partition table [ 85.103843][ T6827] loop6: partition table beyond EOD, truncated [ 85.105879][ T6827] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 85.110823][ T6828] ldm_validate_partition_table(): Disk read failed. [ 85.113103][ T6828] Dev loop6: unable to read RDB block 0 [ 85.115083][ T6828] loop6: unable to read partition table [ 85.117085][ T6828] loop6: partition table beyond EOD, truncated [ 85.118968][ T6828] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 85.425161][ T9] usb 6-1: USB disconnect, device number 5 [ 85.956785][ T29] usb 8-1: USB disconnect, device number 8 [ 86.236779][ T1331] cfg80211: failed to load regulatory.db