last executing test programs: 8.949076634s ago: executing program 3 (id=953): socket(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 8.897976865s ago: executing program 2 (id=954): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d64697361626c652c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6661756c745f747970653d30303030303030303030303030303030303030342c008d73b6efef8bf6f516d60904182d07bca0e749cc80891d95a64e7017e017d72450a7d42539b57fb9c48865a0e2adbf3b690b6e666283ce3274281626e6b683df1e10a4b3b952294895df65e4a6b94f5c5a650e35a010e04bce2a92891fec6ae51521e10eeb1224f2905d434d7558325f47edf48ce3a8ad4664164f"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 8.760970537s ago: executing program 0 (id=955): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) 7.549529786s ago: executing program 3 (id=957): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r5, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) epoll_create1(0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 6.826842447s ago: executing program 2 (id=958): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = syz_open_dev$dri(0x0, 0x1, 0x50002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103", @ANYRESOCT], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a"], 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) 6.274479474s ago: executing program 3 (id=960): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c0000"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r3, &(0x7f0000000100), 0x9) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.273532854s ago: executing program 1 (id=961): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 6.166774056s ago: executing program 0 (id=962): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000240)={{@local, 0x1}, 0x1, 0x2, 0x8}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x9001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 6.082584117s ago: executing program 1 (id=963): dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="0174dfdb"], 0x20}}, 0x0) 5.835870022s ago: executing program 3 (id=964): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000180)={0x0, 0x3, 0x2, 'H\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000380)={0x20, 0x13, 0x2, "69c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000200)={0x20, 0x14, 0x2, "b005"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.421180168s ago: executing program 1 (id=965): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x3, 0xff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x1000000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) write$FUSE_WRITE(r3, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x0, {0x4}}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 5.074751442s ago: executing program 0 (id=966): r0 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) 5.033459903s ago: executing program 0 (id=967): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 4.452191893s ago: executing program 1 (id=968): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r0, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x14, r5, 0x528ea124191aeb57, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) epoll_create1(0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4.100236508s ago: executing program 2 (id=969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000025c0)={{0x0, r4, 0xee01, 0x0, 0x0, 0x120, 0xcc4}, 0x0, 0x0, 0x9, 0x0, 0x100000000, 0x70a1, 0x40, 0x414, 0x0, 0x10}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x74, 0x40, 0x0, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) 3.773665593s ago: executing program 1 (id=970): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000240)={{@local, 0x1}, 0x1, 0x2, 0x8}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f000001b000)={{r0}, "ff61f60b96a30f9304697c540b5500b5ec00e2ab006719c0a9634a4d6179bf877b052cb97394106541154fadd94f358fe70863adca2031f50108dd562d983f4c01e9f3999710e06e2618c09d78258ecc37a59443548e313d29a004e0f3d6cebc95affa0ae710af791cb8aed64bd72920d49ae9a03c603d6c97ac795d2d46a5a475c856a92e4442a73c5b3418f41ebea8000f9745a9ce89700bc603cd77e0f5b7abbdb6acc8c38532655b9d595f86c426337c75a9d3bf73f8d882a7e43c52435f8bb3689dafb92f81ab0e4233f1df5b21bd070822704199a1c9d0858539dc41b58e4f4c56b83e1a9d3e2d420ecc4fdda6d9e9df603c8796a83ef5a6a8ebfb7c0f507d8c12a433507972fe704b5f765d1cc55e7a7f797363e257c1bbc445cf8ac3224b697f3a24d9be20dd88e1b6f127317c69c1591e9d109b3d50246d028ec5817a67ca7dd920a41c2cfb70bbac739c74ce31ede208c9efef6439dc0998efd27f201a14fb4b4f79103464d18a686c8ba2b6b60cb36e21aa2ce4066b1baae0ebe3b9a661804b2ad4f1ca841e6ee9385844179dc8079ff365aee734587c5d1a15db99f6a4929bb6b3df9eb838d37975510d4bb36d4cd99b06ba74cf863e5413a6c1b124d79b8c4034bbdea19dbd26d0a909b3ef98955e2b480fea5049ba230aec198552445ec97996718b1520a93ed4f383323423747b91a47ea71648d5bfcc99d48b84e33c400acd1214e4d813e9ee7421068efc6e069513a47e2d16fc50f43aec479853e09af9e9da33c305b9b7d2c7b5530e9b70bf40fbb4bc0d272f8a62b8c7bc083a9c55f198616003a52763e476fddf3c7ef3a2740428c790b2b7bdbab49cd5c43d8386185cf459e08de85f98a4be8003c61563640f22747fb2330328f307a7e2707f487f86eb4134b3456be070d2ec1d532ba17c20d5f9a8db4c072984592e0b365f187f628bc6a8d2d0a1ece64c812e3af821cdf4dd80a2992ca94832e6bd45be545c8914237222a6d1157d337b5c9ac413fbc9adcb6757ffca03cc741fd20999c6daa1d2856b1f693dd8e1b2ec291d97ed2d53e9a1388fe3988a338b9f41e8e1ec3801c30ada4570a85c83f2cc51012db7fcb402a695bbc814662d4dffd46f2bac283517bfb3c16107dcab15f7f34fbac322349bb2aab8493e96f88755049f6454aedadd39e1ff1cf47f680891b19c697724eb9ad65707ac9023dff4c67b6c4e2227f2ee772637dc122e1bd67afa4f44b7f7e9fab4b514a5d2b7e95cc70ae98201393c222ffffd6068252b5a7070683c8e1d581ac43c65a1b5d33061eb3ab69b2c4b45994dd16a6387bfa49d528b1ced3f28076ec7c5a2b26abf736b0767962a85479add2842522d019835eae89dcaf92c7606b5f929dd3d51b20161ed21bd1b0f3ed0bb785086c6e9035c118cbd9a1038ba3f4fbab9c39cc657edbd4ce2cdaf33a4e133885a70635d0edb41d752af34bb883ebb38d96083c4bb0245a4f0289cb9f7316fe0483379eee4103600ee6d048ad770440210fc7b8411c8c59b4a37ae843db8a527c8cb628713897cba8a2814e0e5535885502ad4dbc0183c941694d9a981f1fdaeba2f1a957f9700fa5577da54b83b976ca43d342c0668071e124d30deb0e0c42e77bace5ca57f9eb0d5a65a424134f0df3c272deacbddf31779ab059180b6ba7bc8e18d059a492e4127b8aa3ea1506d60de8322214173407317c89f735785fbc8a8528b11036432eb0a2eab8de956bc52a7f485302a8c3c91cb0d4941abfdf2f62ddd22a83123d34d0a75e9bc8c5fa5b4202cd2ce1288b53f97f3f929b71dcb15628b943db33e3a3f7a1dc6d10098beb32af39c0da540c2ff1c100490449c612d5b80329842ef7ea23fb53c9883a4fdd73847fd7dbb592f080a8733df2baaf5b021793a5366c4b4efb8e225dcd7275adeb6ab63ecbb9e28bda26b144ce1a95e32cac0d3315eb3e48e95434cd65d8497936a834480c3cc96d5698123028acffb4a2d064411d81b60fb6ecd1153124c936ee7c1f964542dd5a3503afa091c1f6ed2de581bac52d36fa4b3e222297c1a8c12827572b1e48e10a9ad76dad1318fc79498ba96503c17ee3ac25b7f965d5139b1dc4d2543fb5f2b3dd58c2fe5c90c86bc4f075daa5c84fdadfa079c679ac6c22e5ccf93f6d9930e0d03a6a1350125ac771f84b39172afdb415b8432223026e490b815f554b11f46a2d5a5a20d6bdec1000557f534428f285fc9163d7a97f9968b0b98d1e49aa4dca05f5ac47b683e1d4e5dff3001d9cce5eca31bbfee1e7a65af73bd409241231097bc6816cabd0bafb54e1a0971c8fc757b6dd7269c8a9ce137934d858e34a357d5b732fd4408cd65dfc6e3712990facd85426e0bfb73cfd10c47a88a56d99db6ab331c524e0cb8735b3949480ceed1e75fcb641adf5c75a4bffdb333dbc58f6885398d8ca41b7ac947419d0bf149e589652188cb920dc8fb6cd1cde79cb944360088f33a30772180b16baaaacac2990f00e32fcf701abaebc2e37cf228874f9c765800981d1d54418a10ead42d3f08d536c5ade443856f868bfa41a5f505b323f20afbf78aa72cee8de34326f9b8e40b50d081328c64273068f58b881fc17f21f36d1258e97889f0c4682d4103086df1e715491751da0ef23d7a30cd42898f0c7de09d44770bea90c83a08fbf4d07c628bb4833916637bbed9a8eb27aeb28afb928c71686a39ecca3cb8c5e6c77db246968af3ca80e906a49e27c4612d83c002d80c764d37a6697ff28681fcf11a8d8d6f8d59f82a7566962a079c3603ab168e8acbe0b0fb88baa86f7fd0e4918eaa1efec88664e929b30d33ca861ecebee0baf3e7458a55610913297216debfb8193fa4ce99464c7c0a8f6772650ffff7983c5f3add38eb90898cca1afe2945fcf7f350587b291437aa67c4ff839bb9bc50b182aca07f15d24d041e469191e20df3eee54d8a9255dbe1ddcada08862158e421e0ddff66fb99eae47f705235e4a4be2d1cfb0a7af2af3ab84d93fb241b96167bf58db77e1876878511c22dc240f264d1670113bf749df07a48dd305cad13171e38315791a5f5247cc4319d1f6a3edaeac4a8caeb0064d077d5d589aa806b5a52a6f04f6f32be0654029d58c53af969ada6f3cc646cb10c18f3b0c7143e142b254ad8a423b635251ce544100efe002092fc61f27d3a986af23bbc055e1835e67fd530c5ca6cb78e93d4173cb0afc88c65fd61f241fe2432155bd2fd6cb75d6fc573c020e85305f065c8b0bb71fdd0def808c355bd956135488a7d4edaeed5647c2ddde420458f00f1a9620a74e49e45b6d30a78338dddcebad6eb2d2e4a2643f476d987ba09765b93497585d249bb68e4040fad7081b584adc7fc627abd334134861c93279747f1c4c937682963236b4d41a371fa0488fd127f536822c8f41556db63f99d67a18c7d5d8c042915911e68eeb963e3f5cd268d714fb9bde0e960ce58d701b363895494df03178cb2ee5d4168ef07a04a40b144ce336b9b4fca05e68e433743705642d453fbabbbe5ba77b7d9cd12bb8732f4fec4d06cbfc189fcb21e6dca5db72663a7aa01a3ccdcca7b7c0ac9fb46b3725b2dba9978693370cb647173af2ae768a4259bddcfee8645eadf53ccb94a5eba9b1b6c65e7bf1c135f68c4e87451465009a4c85a61e06899f36245b342ce49f89d34bc2f81d833c559389d1895ce9496f1f72ceccaede66466e7c31020d4371405c305ae8484c9e1f8c81fe24798000a424fc7c525a876b427918c0146a85f42aeb6c44cd321e6b4d5eef9e22387cc518d1b5911e44a30bbe2fba465f54e79497f575866132582f9b3fe45ee1f5f7ce0b1a6fdc4859d629e177cc96252f3639e42a128db273223c86953cf1f6d2017d1c5c306fcf5ac8db39b6de7a102ace161d18ab1845859cefcd9afe8305eb7b0abafb83061efd6fe9b74c05be859cac2879d397c34ab2338361d216d59382d05b9c75eca135fb3629c1e71573ed81cdbf38197d562f10d03b26a35b7f7f0708083d681607d74e6c03da55bcab666aee9b0434561cdb979154f19c9930b7daf85d88b714cf8df30a1bf2a579a905994f2c7ab4cca2a59814b562ad9a8e3f973d92879ce73c1208155a8d9008c759fddfa3552cccc16a0147ddb31546f71218b3760345719cec1b8c02c6aa8f97215b0649b0b6307863f2f7173b059d52c20ffc5d5dcc8ccde385de1ebdeb70df25ea115018d78a2603e43d1a3d39d985d89ea3b55620bd991058b558f16abf7401a72a914e445166f1fbda0a30976d0e13e6a4e6ddf2f17b5ae6deaec64c7684c145485d7392108e91fd0c05e6acc985c9cbc54171c7d3c93c05d129678861175fa836eb6fd959136aeae7e6882acb48f8149721dc8d593811dd6c87a694402cab277a274829a51cc3c356fbcf0c4c895141dd54d58ee46049a954491cb23928e513122e105460bc46213a16c249cca4aba41fc97ed47299918e0c736367da6622e572d7543e6345b813d95b4119de900c6e52d04da1a272ef609ad713d7608b13f6a83d494f0879aa7f47d1a6508c18f40aa4656933850d1742694d85a7369f5005713ca98e2775162023ed9b3fe9a558b5fab5850553ec808b4f8f834609edf06e82cea0b2658acb2ec3f2a7d0f8d1bc7e7c337303d57fbba4f79829faedcc630b8b3cdc438952adb31679eeaaab688ab9134367d36e58e87816fd7da342eea50ff5b96b9455964c6e4267cea47a67e961154347a049286e23c6219d56a4db73c62ab44a87959ebdaecd2a129517560826323512db2fc41a33ad1e37d4cac215fd7a57386d422f128d2cc62b3397dcbbc56eae940d0596b78c5afbfdd7cdaa36696357d2ec2aa1aa71b92326bee7496d2aedb03f6a463a841417a3b10dc544fafaf9670493be8e0a80b58c63ad1818660c5420f46e0e967cb48b4a77100981b233371f2a25d62a953bf7dbeb103576269da808d990ca397d2b8ab18d9407339338694fe251d6bdedc868f294da3d1c06a3d48604225f519647318aad37781a3cb2c82cf9a37c4962b2bc229dc74dafcc6f58d8f959016ce88bc1c4556f89c1429c192c2af209723d1582443747391b7d48c54bda292d65ff01b733c27e188c0f14026397a9173b14483e06c90a64c8c218acf8a74c02f0859c5d83669919e8ab5073a5c72359c1b1263993cb015a948deb3eec1f1c268e34f3a6944e8c4af774e2b0de87fd1060719f62d326b920c5cedd9b4fd52c144c8f06f95fb776db8260d74225e9e4870a0deb1fd6affd971696d84fdee5e90408276ec9d24eacc60d3b782a7485652a54b7a6cb5d9433c4a535d1fca5e3accf77b8a1af5b33b576585ba9650c374cd6724d4686cbcb6c340391f608a6e184c4b61e88af7cda05654112bee12dc50c9bf9d0ee18d7db29406c24d12831508eb0938bdc0031d9d456ada54dac025710ce279d1c695cf43f04e2873d419e318eee8a0d8c95159a3135297a0017760e4fa3e884c3046f14cb5fc50a7b4775677d18c2d00be067f1a6c6c7c44d55894c309ea0a39c063c2e01f19491bea3eb79357c4239d813b7370de00f9483a4aa7064b272fc776b7538c8f434589a35f87ec1158e9447c10039db94a48be981e5d77acad1eb4c310bf4decce3a8930c64f119a8914dbaf947ab7acfbd04012f783c380826855424f505d67981c2aa16be718afbd1e102a2c93551edfb1ea929df921e5e79e971c4d60a1b0ee3734969a4767d876a9664ea37d980b13f0e9b6d0d4aa002c"}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x9001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 2.884654396s ago: executing program 2 (id=971): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) 2.165237347s ago: executing program 3 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 1.866537792s ago: executing program 1 (id=973): r0 = syz_usb_connect$hid(0x3, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404355220500000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00220b00000008370000000093"], 0x0}, 0x0) 1.554449596s ago: executing program 0 (id=974): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000240)={{@local, 0x1}, 0x1, 0x2, 0x8}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x9001, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 505.860782ms ago: executing program 0 (id=975): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r4, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) 268.257666ms ago: executing program 2 (id=976): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$phonet_pipe(0x23, 0x5, 0x2) pipe2$9p(&(0x7f0000001900), 0x0) syz_io_uring_setup(0x6c5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2000001}, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[], 0x0) 25.378519ms ago: executing program 2 (id=977): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 0s ago: executing program 3 (id=978): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x3804410, &(0x7f0000000100)={[{@quota}, {@mblk_io_submit}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x585, &(0x7f0000000580)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = fsopen(&(0x7f00000001c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000003c0)=""/28, 0xffd2) sendto$inet(r4, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) kernel console output (not intermixed with test programs): .492439][ T6049] loop0: detected capacity change from 0 to 2048 [ 107.529068][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.246209][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.510387][ T6078] loop0: detected capacity change from 0 to 256 [ 109.574431][ T6078] exfat: Deprecated parameter 'utf8' [ 109.663370][ T6078] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 112.231004][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.463065][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 112.567089][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.668817][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.780260][ T55] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 112.909927][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.066757][ T55] usb 4-1: config 0 descriptor?? [ 113.161331][ T55] hub 4-1:0.0: USB hub found [ 113.656067][ T55] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 114.027857][ T55] usbhid 4-1:0.0: can't add hid device: -71 [ 114.143349][ T55] usbhid: probe of 4-1:0.0 failed with error -71 [ 114.216192][ T55] usb 4-1: USB disconnect, device number 2 [ 115.116308][ T6132] loop3: detected capacity change from 0 to 256 [ 115.144641][ T6132] exfat: Deprecated parameter 'utf8' [ 115.229935][ T6134] loop1: detected capacity change from 0 to 2048 [ 115.243117][ T6132] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 115.283359][ T6134] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 115.380984][ T6137] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.428342][ T5781] udevd[5781]: incorrect nilfs2 checksum on /dev/loop1 [ 115.596751][ T6134] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 115.658211][ T6134] Remounting filesystem read-only [ 117.939309][ T6155] block nbd0: shutting down sockets [ 118.362918][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.563069][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 118.578684][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.634164][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.653331][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.670551][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.703413][ T55] usb 2-1: config 0 descriptor?? [ 118.717316][ T55] hub 2-1:0.0: USB hub found [ 118.743094][ T786] libceph: connect (1)[c::]:6789 error -101 [ 118.750334][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 118.889077][ T6166] ceph: No mds server is up or the cluster is laggy [ 118.916438][ T786] libceph: connect (1)[c::]:6789 error -101 [ 118.954065][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 119.240198][ T786] libceph: connect (1)[c::]:6789 error -101 [ 119.257308][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 119.301480][ T55] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 119.695368][ T55] usbhid 2-1:0.0: can't add hid device: -71 [ 119.722490][ T55] usbhid: probe of 2-1:0.0 failed with error -71 [ 119.765560][ T55] usb 2-1: USB disconnect, device number 3 [ 122.647914][ T6192] loop1: detected capacity change from 0 to 256 [ 122.655769][ T6192] exfat: Deprecated parameter 'utf8' [ 122.809327][ T6192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 124.742810][ C1] sched: RT throttling activated [ 125.162003][ T6226] loop2: detected capacity change from 0 to 256 [ 125.185992][ T6226] exfat: Deprecated parameter 'utf8' [ 125.260222][ T6226] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 126.341068][ T6235] overlayfs: missing 'lowerdir' [ 129.645538][ T6256] loop1: detected capacity change from 0 to 256 [ 129.668424][ T6256] exfat: Deprecated parameter 'utf8' [ 129.742900][ T6256] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 130.901416][ T6264] overlayfs: missing 'lowerdir' [ 132.348651][ T6280] loop1: detected capacity change from 0 to 256 [ 132.368495][ T6280] exfat: Deprecated parameter 'utf8' [ 132.460651][ T6280] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 132.551455][ T6286] loop3: detected capacity change from 0 to 256 [ 132.589258][ T6286] exfat: Deprecated parameter 'utf8' [ 132.647239][ T6286] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 133.006213][ T6292] overlayfs: missing 'lowerdir' [ 133.524891][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.533824][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.304394][ T6315] loop1: detected capacity change from 0 to 256 [ 136.311928][ T6315] exfat: Deprecated parameter 'utf8' [ 136.420627][ T6315] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 137.995283][ T6333] loop1: detected capacity change from 0 to 256 [ 138.001961][ T6326] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 138.008923][ T6326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.021511][ T6326] vhci_hcd vhci_hcd.0: Device attached [ 138.117556][ T6333] exfat: Deprecated parameter 'utf8' [ 138.223582][ T6333] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 138.242551][ T6324] loop0: detected capacity change from 0 to 4096 [ 138.312733][ T6324] ======================================================= [ 138.312733][ T6324] WARNING: The mand mount option has been deprecated and [ 138.312733][ T6324] and is ignored by this kernel. Remove the mand [ 138.312733][ T6324] option from the mount to silence this warning. [ 138.312733][ T6324] ======================================================= [ 138.347880][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.354263][ T786] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 138.411308][ T6324] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 138.610570][ T6324] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 138.670101][ T6324] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 138.718296][ T6330] vhci_hcd: connection reset by peer [ 138.738789][ T3421] vhci_hcd: stop threads [ 138.745154][ T6344] loop1: detected capacity change from 0 to 256 [ 138.754006][ T3421] vhci_hcd: release socket [ 138.777105][ T6344] exfat: Deprecated parameter 'utf8' [ 138.782533][ T3421] vhci_hcd: disconnect device [ 138.809327][ T6344] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 141.161311][ T6357] loop0: detected capacity change from 0 to 256 [ 141.183835][ T6357] exfat: Deprecated parameter 'utf8' [ 141.211788][ T6357] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 142.949680][ T6368] loop2: detected capacity change from 0 to 256 [ 143.005675][ T6368] exfat: Deprecated parameter 'utf8' [ 143.185752][ T6368] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 143.523101][ T786] vhci_hcd: vhci_device speed not set [ 143.779966][ T6376] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 143.786659][ T6376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.814287][ T6376] vhci_hcd vhci_hcd.0: Device attached [ 144.243041][ T5813] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 145.394835][ T6376] loop2: detected capacity change from 0 to 4096 [ 145.404292][ T6376] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 145.927484][ T6390] loop3: detected capacity change from 0 to 32768 [ 145.965099][ T6390] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 145.973906][ T6390] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 146.000548][ T6390] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 146.045108][ T6376] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 146.075113][ T6390] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 147.179979][ T6376] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 147.550984][ T6378] vhci_hcd: connection reset by peer [ 147.577833][ T3451] vhci_hcd: stop threads [ 147.586313][ T3451] vhci_hcd: release socket [ 147.601769][ T3451] vhci_hcd: disconnect device [ 147.699854][ T6401] loop1: detected capacity change from 0 to 256 [ 147.764140][ T6401] exfat: Deprecated parameter 'utf8' [ 147.835772][ T6401] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 150.392982][ T5813] vhci_hcd: vhci_device speed not set [ 150.588819][ T6410] process 'syz.0.178' launched '/dev/fd/7' with NULL argv: empty string added [ 154.034572][ T5811] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.303002][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 154.385177][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.559640][ T5811] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.717950][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.822554][ T5811] usb 4-1: config 0 descriptor?? [ 154.941453][ T6443] loop0: detected capacity change from 0 to 256 [ 154.953555][ T6443] exfat: Deprecated parameter 'utf8' [ 155.003247][ T6443] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 155.086985][ T5811] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 155.163131][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.223221][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 155.512481][ T8] usb 4-1: USB disconnect, device number 3 [ 155.588169][ T786] usb 3-1: device descriptor read/64, error -71 [ 155.596922][ T27] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 155.608189][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.616579][ T27] usb 2-1: Product: syz [ 155.620785][ T27] usb 2-1: Manufacturer: syz [ 155.625554][ T27] usb 2-1: SerialNumber: syz [ 155.632565][ T27] usb 2-1: config 0 descriptor?? [ 156.013453][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.171828][ T6440] Bluetooth: MGMT ver 1.22 [ 156.313119][ T786] usb 3-1: device descriptor read/64, error -71 [ 156.371795][ T27] usb-storage 2-1:0.0: USB Mass Storage device detected [ 156.445138][ T786] usb usb3-port1: attempt power cycle [ 156.545103][ T27] usb 2-1: USB disconnect, device number 4 [ 156.872942][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.914937][ T786] usb 3-1: device descriptor read/8, error -71 [ 157.195330][ T786] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 158.003336][ T786] usb 3-1: device descriptor read/8, error -71 [ 158.143222][ T786] usb usb3-port1: unable to enumerate USB device [ 158.248540][ T6478] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.315476][ T6479] loop3: detected capacity change from 0 to 256 [ 158.339073][ T6479] exfat: Deprecated parameter 'utf8' [ 158.380999][ T6479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 158.402993][ T5774] Bluetooth: hci0: command tx timeout [ 158.846620][ T786] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.213409][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 159.238871][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.266848][ T786] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.282193][ T5811] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 159.312090][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.345668][ T786] usb 3-1: config 0 descriptor?? [ 159.386034][ T6488] block nbd3: shutting down sockets [ 159.492577][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.575102][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.605563][ T786] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 159.730500][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 159.914515][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.087395][ T5811] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 160.141378][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.193634][ T27] usb 3-1: USB disconnect, device number 6 [ 160.198968][ T5811] usb 1-1: config 0 descriptor?? [ 160.225036][ T6478] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.676815][ T5811] usbhid 1-1:0.0: can't add hid device: -71 [ 160.693137][ T5811] usbhid: probe of 1-1:0.0 failed with error -71 [ 160.725597][ T5811] usb 1-1: USB disconnect, device number 2 [ 164.119252][ T6525] block nbd2: shutting down sockets [ 164.512273][ T6531] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 164.518851][ T6531] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.526919][ T6531] vhci_hcd vhci_hcd.0: Device attached [ 164.571732][ T6531] loop1: detected capacity change from 0 to 4096 [ 164.590434][ T6531] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 164.651963][ T6531] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 164.663200][ T6531] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 164.670348][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.683809][ T6532] vhci_hcd: connection closed [ 164.697867][ T1098] vhci_hcd: stop threads [ 164.716638][ T1098] vhci_hcd: release socket [ 164.721181][ T1098] vhci_hcd: disconnect device [ 164.892976][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 164.925548][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.952954][ T5811] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.973028][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.992023][ T5811] usb 4-1: config 0 descriptor?? [ 165.205869][ T5811] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.642553][ T27] usb 4-1: USB disconnect, device number 4 [ 166.625450][ T6549] loop2: detected capacity change from 0 to 32768 [ 167.264728][ T6549] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 167.273105][ T6549] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 167.285539][ T6549] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 167.331969][ T6549] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 167.793369][ T786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.913004][ T6568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 167.919588][ T6568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.927577][ T6568] vhci_hcd vhci_hcd.0: Device attached [ 167.953247][ T786] usb 3-1: device descriptor read/64, error -71 [ 167.995922][ T6568] loop0: detected capacity change from 0 to 4096 [ 168.014602][ T6568] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 168.100052][ T6568] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 168.109310][ T6568] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 168.136060][ T6571] vhci_hcd: connection closed [ 168.137358][ T42] vhci_hcd: stop threads [ 168.149274][ T42] vhci_hcd: release socket [ 168.202846][ T42] vhci_hcd: disconnect device [ 168.335989][ T5832] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 168.344636][ T5832] usb 33-1: enqueue for inactive port 0 [ 169.633254][ T786] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.640943][ T5832] vhci_hcd: vhci_device speed not set [ 169.804489][ T786] usb 3-1: device descriptor read/64, error -71 [ 169.965659][ T786] usb usb3-port1: attempt power cycle [ 170.892998][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.097477][ T55] usb 4-1: Using ep0 maxpacket: 8 [ 171.133923][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.190845][ T55] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.212957][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.244217][ T55] usb 4-1: config 0 descriptor?? [ 171.543046][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.763700][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 171.918133][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.069771][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.230631][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.257254][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.293843][ T27] usb 1-1: config 0 descriptor?? [ 172.332205][ T27] hub 1-1:0.0: USB hub found [ 172.399773][ T55] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 172.419608][ T55] usb 4-1: USB disconnect, device number 5 [ 172.550010][ T27] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 172.572097][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 172.610099][ T6613] bond_slave_0: entered promiscuous mode [ 172.616356][ T6613] bond_slave_1: entered promiscuous mode [ 172.627506][ T6613] macvtap1: entered promiscuous mode [ 172.648454][ T6613] bond0: entered promiscuous mode [ 172.663522][ T6613] macvtap1: entered allmulticast mode [ 172.675518][ T6613] bond0: entered allmulticast mode [ 172.681020][ T6618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 172.687596][ T6618] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.695571][ T6618] vhci_hcd vhci_hcd.0: Device attached [ 172.704787][ T6613] bond_slave_0: entered allmulticast mode [ 172.712248][ T6613] bond_slave_1: entered allmulticast mode [ 172.762845][ T6618] loop3: detected capacity change from 0 to 4096 [ 172.772176][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.780039][ T6618] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 172.795031][ T6613] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 172.820378][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 172.842256][ T6616] bond0: left allmulticast mode [ 172.850567][ T6618] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 172.859911][ T6618] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 172.880617][ T6616] bond_slave_0: left allmulticast mode [ 172.887478][ T6619] vhci_hcd: connection closed [ 172.888017][ T48] vhci_hcd: stop threads [ 172.897366][ T6616] bond_slave_1: left allmulticast mode [ 172.903801][ T6616] bond0: left promiscuous mode [ 172.908708][ T48] vhci_hcd: release socket [ 172.914259][ T6616] bond_slave_0: left promiscuous mode [ 172.919843][ T6616] bond_slave_1: left promiscuous mode [ 172.925813][ T48] vhci_hcd: disconnect device [ 172.943283][ T5811] usb 2-1: device descriptor read/64, error -71 [ 172.973500][ T55] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 172.981172][ T55] usb 39-1: enqueue for inactive port 0 [ 172.983057][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 173.003012][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 173.047141][ T27] usb 1-1: USB disconnect, device number 3 [ 173.072969][ T55] vhci_hcd: vhci_device speed not set [ 173.233084][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.393160][ T5811] usb 2-1: device descriptor read/64, error -71 [ 173.494651][ T6622] loop3: detected capacity change from 0 to 16 [ 173.529766][ T5811] usb usb2-port1: attempt power cycle [ 173.543173][ T6622] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.920926][ T6630] syz.3.248: attempt to access beyond end of device [ 173.920926][ T6630] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 174.083471][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 174.693383][ T5811] usb 2-1: device descriptor read/8, error -71 [ 175.005951][ T5811] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.083225][ T5811] usb 2-1: device not accepting address 8, error -71 [ 176.205351][ T5811] usb usb2-port1: unable to enumerate USB device [ 176.245745][ T6648] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 176.252346][ T6648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.664857][ T6648] vhci_hcd vhci_hcd.0: Device attached [ 177.855489][ T6648] loop2: detected capacity change from 0 to 4096 [ 177.871023][ T6648] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 177.983349][ T6648] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 178.013228][ T6648] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 178.033087][ T6653] vhci_hcd: connection closed [ 178.069466][ T3451] vhci_hcd: stop threads [ 178.092463][ T3451] vhci_hcd: release socket [ 178.107016][ T3451] vhci_hcd: disconnect device [ 178.153252][ T9] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 178.162063][ T9] usb 37-1: enqueue for inactive port 0 [ 178.274469][ T9] vhci_hcd: vhci_device speed not set [ 178.375175][ T6659] loop1: detected capacity change from 0 to 16 [ 178.384725][ T6651] loop3: detected capacity change from 0 to 32768 [ 178.413840][ T6659] erofs: (device loop1): mounted with root inode @ nid 36. [ 179.957522][ T6667] syz.1.260: attempt to access beyond end of device [ 179.957522][ T6667] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 180.281431][ T6651] read_mapping_page failed! [ 180.359429][ T6651] diRead: diIAGRead returned -5 [ 180.755608][ T5811] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.713186][ T5811] usb 2-1: device descriptor read/64, error -71 [ 181.747223][ T9] libceph: connect (1)[c::]:6789 error -101 [ 181.753758][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 181.821185][ T6683] ceph: No mds server is up or the cluster is laggy [ 182.009408][ T5811] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.062460][ T6695] loop3: detected capacity change from 0 to 16 [ 182.092681][ T6695] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.319001][ T5811] usb 2-1: device descriptor read/64, error -71 [ 183.964608][ T6701] syz.3.272: attempt to access beyond end of device [ 183.964608][ T6701] loop3: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 184.203133][ T5811] usb usb2-port1: attempt power cycle [ 185.770541][ T9] libceph: connect (1)[c::]:6789 error -101 [ 185.790239][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 185.812668][ T6723] ceph: No mds server is up or the cluster is laggy [ 186.233339][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.262928][ T786] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.583645][ T27] usb 3-1: device descriptor read/64, error -71 [ 186.713154][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 186.810584][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 186.903153][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.926542][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.059313][ T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.179135][ T27] usb 3-1: device descriptor read/64, error -71 [ 187.210488][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 187.242906][ T786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 187.268066][ T786] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 187.292593][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.326538][ T786] usb 2-1: config 0 descriptor?? [ 187.333124][ T6732] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 187.345876][ T27] usb usb3-port1: attempt power cycle [ 187.843076][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.884341][ T27] usb 3-1: device descriptor read/8, error -71 [ 187.950275][ T786] usb 2-1: USB disconnect, device number 12 [ 187.956892][ T5774] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 188.244699][ T27] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.529209][ T27] usb 3-1: device descriptor read/8, error -71 [ 188.708804][ T5832] libceph: connect (1)[c::]:6789 error -101 [ 188.715516][ T5832] libceph: mon0 (1)[c::]:6789 connect error [ 188.754292][ T27] usb usb3-port1: unable to enumerate USB device [ 188.764262][ T6765] ceph: No mds server is up or the cluster is laggy [ 188.890245][ T6770] binder: 6769:6770 ioctl c0306201 0 returned -14 [ 190.436242][ T6789] loop1: detected capacity change from 0 to 2048 [ 190.899351][ T6789] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.263184][ T6794] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.293489][ T5777] udevd[5777]: incorrect nilfs2 checksum on /dev/loop1 [ 191.340307][ T6789] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 191.382955][ T6789] Remounting filesystem read-only [ 191.423546][ T9] libceph: connect (1)[c::]:6789 error -101 [ 191.434339][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 191.546008][ T6798] ceph: No mds server is up or the cluster is laggy [ 191.623020][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.837665][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 191.880266][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.891005][ T786] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 191.899133][ T27] usb 3-1: config 0 has no interfaces? [ 191.918892][ T27] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 191.931336][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.180590][ T27] usb 3-1: Product: syz [ 192.189516][ T27] usb 3-1: Manufacturer: syz [ 192.195527][ T27] usb 3-1: SerialNumber: syz [ 192.209429][ T27] usb 3-1: config 0 descriptor?? [ 192.391747][ T6816] loop0: detected capacity change from 0 to 32768 [ 192.473095][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 192.587352][ T6816] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 192.595736][ T6816] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 192.619922][ T6816] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 192.918830][ T6816] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 193.116018][ T786] usb 2-1: unable to get BOS descriptor or descriptor too short [ 193.179658][ T786] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 193.213894][ T786] usb 2-1: can't read configurations, error -71 [ 194.968004][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.996998][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.154388][ T55] usb 3-1: USB disconnect, device number 14 [ 195.524044][ T6833] loop2: detected capacity change from 0 to 2048 [ 195.533011][ T5814] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.537155][ T6833] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 195.577339][ T6834] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.604222][ T6833] NILFS error (device loop2): nilfs_readdir: zero-length directory entry [ 195.617866][ T6833] Remounting filesystem read-only [ 195.748368][ T5814] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 195.758385][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.770924][ T5814] usb 1-1: Product: syz [ 195.777483][ T5814] usb 1-1: Manufacturer: syz [ 195.783304][ T5814] usb 1-1: SerialNumber: syz [ 195.791446][ T5814] usb 1-1: config 0 descriptor?? [ 196.012723][ T5814] usb-storage 1-1:0.0: USB Mass Storage device detected [ 196.325061][ T5814] usb 1-1: USB disconnect, device number 4 [ 199.433058][ T5814] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.540670][ T6865] loop1: detected capacity change from 0 to 2048 [ 199.635884][ T6865] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 199.663034][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 199.680230][ T5777] udevd[5777]: incorrect nilfs2 checksum on /dev/loop1 [ 199.722527][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.738039][ T6872] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.754829][ T5814] usb 1-1: config 0 has no interfaces? [ 199.765599][ T5814] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 199.782855][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.805519][ T5814] usb 1-1: Product: syz [ 199.820367][ T5814] usb 1-1: Manufacturer: syz [ 199.826991][ T5814] usb 1-1: SerialNumber: syz [ 199.883274][ T6865] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 199.932692][ T6865] Remounting filesystem read-only [ 200.052658][ T5814] usb 1-1: config 0 descriptor?? [ 201.960155][ T55] usb 1-1: USB disconnect, device number 5 [ 203.029428][ T6902] loop2: detected capacity change from 0 to 16 [ 203.062647][ T6902] erofs: (device loop2): mounted with root inode @ nid 36. [ 203.123859][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 203.529341][ T6907] syz.2.336: attempt to access beyond end of device [ 203.529341][ T6907] loop2: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 204.015630][ T6908] loop1: detected capacity change from 0 to 2048 [ 204.078603][ T6908] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.149041][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 204.163623][ T55] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.172401][ T55] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.182948][ T55] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.192183][ T6911] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.195723][ T55] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.213615][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.221781][ T55] usb 1-1: Product: syz [ 204.228966][ T55] usb 1-1: Manufacturer: syz [ 204.234726][ T55] usb 1-1: SerialNumber: syz [ 204.236687][ T5781] udevd[5781]: incorrect nilfs2 checksum on /dev/loop1 [ 204.678260][ T55] usb 1-1: 0:2 : does not exist [ 208.120930][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 208.120985][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 208.130914][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 208.133378][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 208.532647][ T55] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 209.400898][ T55] usb 1-1: USB disconnect, device number 6 [ 209.521085][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.934003][ T55] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 210.080051][ T6943] loop1: detected capacity change from 0 to 2048 [ 210.089874][ T6943] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 210.102901][ T5811] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.129476][ T6944] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.144475][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 210.158832][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 210.183008][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.193501][ T55] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 210.203310][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 210.214566][ T55] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 210.226485][ T55] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 210.235857][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.249253][ T55] usb 1-1: config 0 descriptor?? [ 210.256132][ T6935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.310030][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 210.363629][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.443084][ T5811] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 210.480247][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.519104][ T5811] usb 3-1: config 0 descriptor?? [ 210.737301][ T5774] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 210.737519][ T5814] usb 1-1: USB disconnect, device number 7 [ 211.234764][ T5811] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 211.794344][ T9] usb 3-1: USB disconnect, device number 15 [ 211.921621][ T6957] loop0: detected capacity change from 0 to 16 [ 211.943243][ T6957] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.397875][ T6959] syz.0.355: attempt to access beyond end of device [ 212.397875][ T6959] loop0: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 213.118800][ T6962] syz.2.356 (6962): /proc/6961/oom_adj is deprecated, please use /proc/6961/oom_score_adj instead. [ 213.662940][ T55] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 213.843051][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 213.864471][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.886304][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.911750][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.947663][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.975555][ T55] usb 3-1: config 0 descriptor?? [ 214.796730][ T55] hub 3-1:0.0: USB hub found [ 214.941967][ T55] hub 3-1:0.0: 1 port detected [ 215.080905][ T6983] loop1: detected capacity change from 0 to 16 [ 215.090046][ T6983] erofs: (device loop1): mounted with root inode @ nid 36. [ 215.631412][ T6985] syz.1.365: attempt to access beyond end of device [ 215.631412][ T6985] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 215.685218][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 216.090508][ T27] usb 3-1: USB disconnect, device number 16 [ 216.253489][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 216.264137][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.275427][ T5814] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.285682][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.297710][ T5814] usb 1-1: config 0 descriptor?? [ 216.519566][ T5814] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 216.672158][ T6987] loop1: detected capacity change from 0 to 32768 [ 216.685650][ T6987] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 216.694092][ T6987] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 216.710857][ T6987] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 216.780607][ T6987] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 217.105089][ T5814] usb 1-1: USB disconnect, device number 8 [ 222.658979][ T5811] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 222.898168][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.910432][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.932043][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 222.967936][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.992876][ T5811] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 223.002161][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.023825][ T5811] usb 4-1: config 0 descriptor?? [ 223.031218][ T7023] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.192980][ T5814] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 223.506578][ T5811] usbhid 4-1:0.0: can't add hid device: -71 [ 223.538105][ T5811] usbhid: probe of 4-1:0.0 failed with error -71 [ 223.574323][ T5811] usb 4-1: USB disconnect, device number 6 [ 223.957172][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 224.558699][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.580708][ T5814] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.598652][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.623855][ T5814] usb 3-1: config 0 descriptor?? [ 224.849812][ T5814] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 224.960178][ T7042] loop0: detected capacity change from 0 to 1024 [ 225.074537][ T7047] loop1: detected capacity change from 0 to 8 [ 225.638421][ T7042] hfsplus: failed to load root directory [ 225.696420][ T5814] usb 3-1: USB disconnect, device number 17 [ 230.413169][ T5814] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 230.616610][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.647484][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.682098][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 230.719923][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.741574][ T5814] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 230.751964][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.833982][ T5814] usb 4-1: config 0 descriptor?? [ 230.840129][ T7072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 231.263224][ T5814] usbhid 4-1:0.0: can't add hid device: -71 [ 231.279653][ T5814] usbhid: probe of 4-1:0.0 failed with error -71 [ 231.336490][ T5814] usb 4-1: USB disconnect, device number 7 [ 231.343618][ T5810] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 231.553457][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 231.589687][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.601592][ T5810] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.611247][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.637961][ T5810] usb 3-1: config 0 descriptor?? [ 232.190976][ T7097] [U]  [ 232.533413][ T5810] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 233.607022][ T55] usb 3-1: USB disconnect, device number 18 [ 233.963022][ T5811] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.143113][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 234.189555][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.228106][ T5811] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 234.250746][ T5811] usb 1-1: can't read configurations, error -71 [ 235.773601][ T5814] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 236.118653][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.163951][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.175120][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 237.077360][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.179505][ T5814] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 237.188832][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.556325][ T5814] usb 3-1: config 0 descriptor?? [ 237.600145][ T7126] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.036656][ T5814] usbhid 3-1:0.0: can't add hid device: -71 [ 238.057901][ T5814] usbhid: probe of 3-1:0.0 failed with error -71 [ 238.073219][ T5814] usb 3-1: USB disconnect, device number 19 [ 238.174446][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 238.482883][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 238.503088][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.522282][ T27] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.537378][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.555722][ T27] usb 1-1: config 0 descriptor?? [ 238.814050][ T27] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 239.850961][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 239.858203][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 239.964197][ T7158] ceph: No mds server is up or the cluster is laggy [ 240.063718][ T5813] usb 1-1: USB disconnect, device number 11 [ 240.125827][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 240.199852][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 241.333553][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 241.863748][ T27] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 241.918565][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.933306][ T27] usb 1-1: config 0 has no interface number 0 [ 241.942517][ T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 241.976132][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.993267][ T27] usb 1-1: Product: syz [ 242.002924][ T27] usb 1-1: Manufacturer: syz [ 242.007656][ T27] usb 1-1: SerialNumber: syz [ 242.035404][ T27] usb 1-1: config 0 descriptor?? [ 242.401798][ T27] ftdi_sio 1-1:0.9: FTDI USB Serial Device converter detected [ 242.617082][ T27] usb 1-1: Detected SIO [ 242.638335][ T27] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 242.652313][ T27] usb 1-1: USB disconnect, device number 12 [ 242.707072][ T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 242.939316][ T27] ftdi_sio 1-1:0.9: device disconnected [ 244.246386][ T27] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 244.454680][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 244.473353][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.506347][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.516961][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.530632][ T27] usb 3-1: config 0 descriptor?? [ 245.179979][ T27] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 245.231681][ T5813] usb 3-1: USB disconnect, device number 20 [ 246.351475][ T7213] loop2: detected capacity change from 0 to 4096 [ 246.377115][ T7213] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 247.492940][ T5811] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 247.682959][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 247.692216][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.719694][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.765313][ T5811] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.806463][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.861729][ T5811] usb 4-1: config 0 descriptor?? [ 247.905255][ T5811] hub 4-1:0.0: USB hub found [ 248.136803][ T5811] hub 4-1:0.0: 1 port detected [ 248.793844][ T5814] usb 4-1: USB disconnect, device number 8 [ 249.159288][ T7247] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 249.165911][ T7247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.174274][ T7247] vhci_hcd vhci_hcd.0: Device attached [ 249.423652][ T7250] loop2: detected capacity change from 0 to 4096 [ 249.452878][ T7250] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 249.732486][ T27] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 251.053196][ T7250] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 251.615805][ T7250] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 251.973292][ T7248] vhci_hcd: connection reset by peer [ 252.258172][ T1086] vhci_hcd: stop threads [ 252.341395][ T1086] vhci_hcd: release socket [ 252.346404][ T1086] vhci_hcd: disconnect device [ 253.208185][ T7273] [U]  [ 254.953080][ T27] vhci_hcd: vhci_device speed not set [ 255.393023][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 255.582873][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 255.590250][ T23] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 255.633020][ T23] usb 3-1: config 155 has 0 interfaces, different from the descriptor's value: 1 [ 255.655815][ T23] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 255.665596][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.676928][ T23] usb 3-1: Product: syz [ 255.681160][ T23] usb 3-1: Manufacturer: syz [ 255.694253][ T23] usb 3-1: SerialNumber: syz [ 256.043179][ T5813] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.111308][ T7301] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 256.118182][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 256.127514][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 256.305003][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 256.372839][ T7301] loop3: detected capacity change from 0 to 4096 [ 256.411238][ T7301] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 256.476639][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.523066][ T5811] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 256.545351][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.558095][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.606334][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.734755][ T5813] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.752489][ T7301] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 256.782602][ T7301] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 256.908573][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.035030][ T5813] usb 2-1: config 0 descriptor?? [ 257.045656][ T7302] vhci_hcd: connection reset by peer [ 257.157333][ T5813] hub 2-1:0.0: USB hub found [ 257.162133][ T3421] vhci_hcd: stop threads [ 257.218173][ T3421] vhci_hcd: release socket [ 257.290370][ T3421] vhci_hcd: disconnect device [ 257.488780][ T5813] hub 2-1:0.0: 1 port detected [ 257.833855][ T7307] loop3: detected capacity change from 0 to 512 [ 257.861012][ T7307] EXT4-fs: Ignoring removed bh option [ 258.110981][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 258.123019][ T27] usb 3-1: USB disconnect, device number 21 [ 258.151134][ T9] usb 2-1: USB disconnect, device number 15 [ 258.214446][ T7307] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 260.063018][ T5813] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 260.255441][ T5813] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 260.272981][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.290554][ T5813] usb 1-1: config 0 has no interface number 0 [ 260.293271][ T5814] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 260.304887][ T5813] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 260.334845][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.355107][ T5813] usb 1-1: Product: syz [ 260.359359][ T5813] usb 1-1: Manufacturer: syz [ 260.382805][ T5813] usb 1-1: SerialNumber: syz [ 260.390634][ T5813] usb 1-1: config 0 descriptor?? [ 260.400089][ T5813] ftdi_sio 1-1:0.9: FTDI USB Serial Device converter detected [ 260.411442][ T5813] usb 1-1: Detected SIO [ 260.426287][ T5813] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 260.508281][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 260.525470][ T5814] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 260.555424][ T5814] usb 2-1: config 155 has 0 interfaces, different from the descriptor's value: 1 [ 260.587778][ T5814] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 260.605077][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.612250][ T5813] usb 1-1: USB disconnect, device number 13 [ 260.625163][ T5814] usb 2-1: Product: syz [ 260.642901][ T5814] usb 2-1: Manufacturer: syz [ 260.651055][ T5813] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.652524][ T5814] usb 2-1: SerialNumber: syz [ 260.678952][ T5813] ftdi_sio 1-1:0.9: device disconnected [ 261.754621][ T5811] vhci_hcd: vhci_device speed not set [ 262.182974][ T5814] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 262.343717][ T7362] loop3: detected capacity change from 0 to 164 [ 262.435212][ T23] libceph: connect (1)[c::]:6789 error -101 [ 262.441591][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 262.452954][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 262.461027][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.473604][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.483942][ T5814] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.493221][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.512064][ T5814] usb 3-1: config 0 descriptor?? [ 262.526244][ T5814] hub 3-1:0.0: USB hub found [ 262.646391][ T7364] ceph: No mds server is up or the cluster is laggy [ 262.703697][ T23] libceph: connect (1)[c::]:6789 error -101 [ 262.730772][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 262.751002][ T5814] hub 3-1:0.0: 1 port detected [ 263.558357][ T5811] usb 2-1: USB disconnect, device number 16 [ 264.076078][ T5811] usb 3-1: USB disconnect, device number 22 [ 264.331896][ T7376] loop3: detected capacity change from 0 to 32768 [ 264.366120][ T7376] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 264.374569][ T7376] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 264.399620][ T7376] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 264.467733][ T7376] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 265.630554][ T7391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 265.637441][ T7391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.646760][ T7391] vhci_hcd vhci_hcd.0: Device attached [ 265.879087][ T7391] loop0: detected capacity change from 0 to 4096 [ 265.907328][ T7391] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 266.306344][ T5813] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 267.701657][ T7391] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 267.742975][ T7391] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 268.025139][ T7392] vhci_hcd: connection reset by peer [ 268.121765][ T3451] vhci_hcd: stop threads [ 268.202475][ T3451] vhci_hcd: release socket [ 268.305673][ T3451] vhci_hcd: disconnect device [ 270.268358][ T7421] loop3: detected capacity change from 0 to 32768 [ 270.344568][ T7421] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 270.352938][ T7421] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 270.377794][ T7421] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 270.414055][ T7421] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 270.577359][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 271.462882][ T7431] loop1: detected capacity change from 0 to 4096 [ 271.829211][ T7431] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 271.843124][ T5813] vhci_hcd: vhci_device speed not set [ 271.950290][ T7429] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 271.956992][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.964863][ T7429] vhci_hcd vhci_hcd.0: Device attached [ 272.062898][ T23] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 272.788243][ T7431] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 272.806362][ T7431] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 272.914069][ T5811] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 273.492844][ T23] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 273.502097][ T23] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.511249][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.538060][ T7430] vhci_hcd: connection closed [ 273.542054][ T11] vhci_hcd: stop threads [ 273.562936][ T11] vhci_hcd: release socket [ 273.579279][ T11] vhci_hcd: disconnect device [ 274.565266][ T5813] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.783120][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 274.790770][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 274.832948][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.842694][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.948822][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 275.037463][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 275.397451][ T5813] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 275.650368][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.733567][ T5813] usb 4-1: config 0 descriptor?? [ 275.753877][ T7436] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 276.064013][ T23] usb 3-1: can't set config #27, error -71 [ 276.095755][ T23] usb 3-1: USB disconnect, device number 23 [ 276.217326][ T5774] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 276.225411][ T5810] usb 4-1: USB disconnect, device number 9 [ 276.614934][ T7460] loop1: detected capacity change from 0 to 4096 [ 277.299699][ T7458] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 277.306311][ T7458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.315487][ T7458] vhci_hcd vhci_hcd.0: Device attached [ 277.324266][ T7460] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 278.181913][ T7460] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 278.200224][ T7460] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 278.469198][ T7459] vhci_hcd: connection reset by peer [ 278.527056][ T6793] vhci_hcd: stop threads [ 278.531491][ T6793] vhci_hcd: release socket [ 278.587416][ T6793] vhci_hcd: disconnect device [ 278.742953][ T5811] vhci_hcd: vhci_device speed not set [ 281.113169][ T5814] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 281.899979][ T5814] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 282.612536][ T5814] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 282.623789][ T5814] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 282.633919][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.003135][ T5811] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 283.312394][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 283.412569][ T5811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 283.637094][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.744228][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 283.774916][ T5811] pvrusb2: ********** [ 283.783437][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 283.835616][ T5811] pvrusb2: Important functionality might not be entirely working. [ 283.865161][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 283.937795][ T5811] pvrusb2: ********** [ 283.979214][ T2319] pvrusb2: Invalid write control endpoint [ 284.194257][ T7502] pvrusb2: Invalid write control endpoint [ 284.224936][ T5814] usb 3-1: USB disconnect, device number 24 [ 284.266539][ T2319] pvrusb2: Invalid write control endpoint [ 284.272548][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 284.487426][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 284.503417][ T5810] usb 4-1: USB disconnect, device number 10 [ 284.511826][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 284.537509][ T2319] pvrusb2: Device being rendered inoperable [ 284.563116][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 285.814625][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 285.844152][ T2319] pvrusb2: Attached sub-driver cx25840 [ 285.850110][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 285.925296][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 285.926077][ T7523] Illegal XDP return value 8 on prog (id 41) dev N/A, expect packet loss! [ 288.487299][ T7554] loop3: detected capacity change from 0 to 128 [ 288.874619][ T7558] loop3: detected capacity change from 0 to 64 [ 289.088694][ T5814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 289.689767][ T5814] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 289.700592][ T5814] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 289.710161][ T5814] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.719315][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.081089][ T5814] usb 1-1: USB disconnect, device number 14 [ 290.118304][ T7567] loop2: detected capacity change from 0 to 1024 [ 290.202989][ T7567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.302914][ T28] audit: type=1800 audit(1750162633.177:2): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 290.665005][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.416296][ T7587] loop3: detected capacity change from 0 to 1024 [ 292.459875][ T7587] hfsplus: failed to load root directory [ 292.538811][ T5777] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.044115][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 293.313076][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 293.368408][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.380082][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.395594][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 293.408287][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.472690][ T27] usb 2-1: config 0 descriptor?? [ 293.541852][ T27] hub 2-1:0.0: USB hub found [ 293.710905][ T27] hub 2-1:0.0: 1 port detected [ 294.711114][ T27] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 294.711833][ T5811] usb 2-1: USB disconnect, device number 17 [ 296.311241][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 296.563370][ T27] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 296.597006][ T27] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 296.615545][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.778933][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.128845][ T7636] loop2: detected capacity change from 0 to 512 [ 298.136251][ T7636] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.142908][ T7636] EXT4-fs: Ignoring removed bh option [ 299.663224][ T7636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.674735][ T7636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 299.687938][ T7636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 299.785536][ T7636] EXT4-fs (loop2): 1 truncate cleaned up [ 299.792304][ T7636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.842021][ T7641] [U]  [ 300.124518][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.367544][ T7663] loop3: detected capacity change from 0 to 32768 [ 302.417377][ T7663] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 302.426153][ T7663] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 302.447624][ T7663] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 302.458372][ T27] usb 2-1: USB disconnect, device number 18 [ 302.545830][ T7663] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 303.721711][ T7675] loop1: detected capacity change from 0 to 40427 [ 303.765932][ T7675] F2FS-fs (loop1): invalid crc value [ 303.783504][ T7675] F2FS-fs (loop1): Found nat_bits in checkpoint [ 303.848673][ T7675] F2FS-fs (loop1): Start checkpoint disabled! [ 303.876895][ T7675] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 304.248127][ T55] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 304.452908][ T55] usb 4-1: device descriptor read/64, error -71 [ 304.694590][ T48] kworker/u4:3: attempt to access beyond end of device [ 304.694590][ T48] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 304.725426][ T55] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 304.742915][ T48] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 304.882883][ T55] usb 4-1: device descriptor read/64, error -71 [ 305.004096][ T55] usb usb4-port1: attempt power cycle [ 305.629188][ T55] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 305.672493][ T55] usb 4-1: device descriptor read/8, error -71 [ 305.997089][ T55] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 306.214591][ T55] usb 4-1: device descriptor read/8, error -71 [ 306.472630][ T55] usb usb4-port1: unable to enumerate USB device [ 307.443506][ T7704] batadv_slave_1: entered allmulticast mode [ 307.542956][ T55] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 307.722999][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 307.750018][ T55] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 307.769646][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.812796][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.827167][ T55] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.866300][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.908558][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 307.936041][ T7708] xt_connbytes: Forcing CT accounting to be enabled [ 307.943858][ T7708] Cannot find add_set index 0 as target [ 307.978854][ T55] usb 2-1: Product: syz [ 308.004132][ T55] usb 2-1: Manufacturer: syz [ 308.053213][ T55] usb 2-1: SerialNumber: syz [ 308.729998][ T55] usb 2-1: 0:2 : does not exist [ 308.735695][ T5810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 308.771947][ T55] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 308.791411][ T7713] loop0: detected capacity change from 0 to 1024 [ 308.820395][ T7713] hfsplus: failed to load root directory [ 308.844985][ T55] usb 2-1: USB disconnect, device number 19 [ 308.922975][ T5810] usb 4-1: Using ep0 maxpacket: 16 [ 308.932417][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 308.969415][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 309.006527][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.032972][ T5810] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.042559][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.064573][ T5810] usb 4-1: config 0 descriptor?? [ 309.545731][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.568168][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.576653][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.584832][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.601457][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.610898][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.626644][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.641778][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.650442][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.661487][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.672934][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.682321][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.694784][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.703543][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.711184][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.719438][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.727383][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.735449][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.743402][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.751079][ T5810] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 309.796080][ T5810] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 309.859347][ T5810] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 309.922775][ T5810] microsoft 0003:045E:07DA.0001: no inputs found [ 309.962942][ T5810] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 309.985839][ T7703] batadv_slave_1: left allmulticast mode [ 310.805468][ T5810] usb 4-1: USB disconnect, device number 15 [ 310.893076][ T7724] fido_id[7724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 311.069024][ T7733] netlink: 240 bytes leftover after parsing attributes in process `syz.1.607'. [ 311.443316][ T5810] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 311.658729][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.742558][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.755580][ T5810] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 311.783365][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.816745][ T5810] usb 2-1: config 0 descriptor?? [ 312.741231][ T5810] uclogic 0003:5543:0522.0002: No inputs registered, leaving [ 312.814200][ T5810] uclogic 0003:5543:0522.0002: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 312.843140][ T5810] usb 2-1: USB disconnect, device number 20 [ 313.341400][ T7751] fido_id[7751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 314.251089][ T7763] loop2: detected capacity change from 0 to 1024 [ 314.301570][ T7763] hfsplus: failed to load root directory [ 316.087033][ T7777] loop1: detected capacity change from 0 to 32768 [ 316.098987][ T7777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.622 (7777) [ 316.135800][ T7777] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 316.146377][ T7777] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 316.155624][ T7777] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 316.166535][ T7777] BTRFS info (device loop1): trying to use backup root at mount time [ 316.175059][ T7777] BTRFS info (device loop1): setting nodatasum [ 316.181316][ T7777] BTRFS info (device loop1): force zlib compression, level 3 [ 316.189016][ T7777] BTRFS info (device loop1): turning on flush-on-commit [ 316.191465][ T7775] loop2: detected capacity change from 0 to 4096 [ 316.196166][ T7777] BTRFS info (device loop1): enabling disk space caching [ 316.210183][ T7777] BTRFS error (device loop1): cannot disable free space tree [ 316.224243][ T7777] BTRFS error (device loop1): open_ctree failed: -22 [ 316.245096][ T7775] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 317.884786][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.891409][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.257045][ T5777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (5777) [ 323.158986][ T7834] loop1: detected capacity change from 0 to 4096 [ 323.179806][ T7834] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 327.328468][ T7867] loop2: detected capacity change from 0 to 4096 [ 327.362256][ T7867] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 329.074054][ T7879] loop3: detected capacity change from 0 to 1024 [ 329.137640][ T7879] hfsplus: failed to load root directory [ 329.278535][ T5781] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.142299][ T7907] netlink: 68 bytes leftover after parsing attributes in process `syz.0.663'. [ 333.758067][ T7930] loop2: detected capacity change from 0 to 16 [ 333.762367][ T7917] loop0: detected capacity change from 0 to 32768 [ 333.968421][ T7917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.667 (7917) [ 334.228000][ T7917] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.245536][ T7930] erofs: (device loop2): mounted with root inode @ nid 36. [ 334.273170][ T7917] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 334.285877][ T7917] BTRFS info (device loop0): using free space tree [ 334.502920][ T7917] BTRFS info (device loop0): enabling ssd optimizations [ 334.510008][ T7917] BTRFS info (device loop0): auto enabling async discard [ 335.088975][ T7954] loop1: detected capacity change from 0 to 2048 [ 335.201785][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.280948][ T7954] EXT4-fs (loop1): failed to initialize system zone (-117) [ 335.289889][ T7954] EXT4-fs (loop1): mount failed [ 337.443008][ T5814] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 338.375149][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.386592][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.412822][ T5814] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 338.421997][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.445627][ T5814] usb 4-1: config 0 descriptor?? [ 338.948284][ T5814] usbhid 4-1:0.0: can't add hid device: -71 [ 338.980625][ T5814] usbhid: probe of 4-1:0.0 failed with error -71 [ 339.130062][ T5814] usb 4-1: USB disconnect, device number 16 [ 339.575951][ T7993] [U]  [ 340.301821][ T8006] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 340.349105][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.356250][ T5813] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 340.381080][ T8006] team0: Device bond0 failed to register rx_handler [ 340.569649][ T5813] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 340.578109][ T5813] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.589095][ T5813] usb 4-1: config 0 has no interface number 0 [ 340.602513][ T5813] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 340.629111][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.642848][ T5813] usb 4-1: Product: syz [ 340.647114][ T5813] usb 4-1: Manufacturer: syz [ 340.659842][ T5813] usb 4-1: SerialNumber: syz [ 340.677671][ T5813] usb 4-1: config 0 descriptor?? [ 340.692549][ T5813] ftdi_sio 4-1:0.9: FTDI USB Serial Device converter detected [ 340.710549][ T5813] usb 4-1: Detected SIO [ 340.785372][ T5813] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 340.903782][ T5813] usb 4-1: USB disconnect, device number 17 [ 340.964281][ T5813] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 340.998239][ T5813] ftdi_sio 4-1:0.9: device disconnected [ 341.965114][ T8020] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 342.063921][ T8020] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 342.099862][ T8020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.154534][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 342.379750][ T8027] [U]  [ 342.491620][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.059515][ T8020] veth3: entered promiscuous mode [ 343.107928][ T8020] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 343.602918][ T5810] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 343.799832][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.819751][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.842937][ T5814] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 343.860965][ T5810] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 343.880866][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.897623][ T5810] usb 4-1: config 0 descriptor?? [ 344.194312][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 344.213972][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 344.240915][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.252926][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.262981][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 344.274451][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 344.285100][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 344.295086][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.364192][ T5814] usb 3-1: config 0 descriptor?? [ 344.386176][ T8039] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 344.447188][ T5810] usbhid 4-1:0.0: can't add hid device: -71 [ 344.474349][ T5810] usbhid: probe of 4-1:0.0 failed with error -71 [ 344.528082][ T5810] usb 4-1: USB disconnect, device number 18 [ 345.149253][ T5813] usb 3-1: USB disconnect, device number 25 [ 345.155704][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 346.626038][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 346.852868][ T5813] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 347.115011][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 347.715537][ T5813] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 347.728226][ T5813] usb 3-1: config 0 has no interface number 0 [ 347.740633][ T5813] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 347.760218][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.777372][ T5813] usb 3-1: Product: syz [ 347.792142][ T5813] usb 3-1: Manufacturer: syz [ 347.822879][ T5813] usb 3-1: SerialNumber: syz [ 347.830669][ T5813] usb 3-1: config 0 descriptor?? [ 347.852000][ T5813] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 348.083488][ T5813] usb 3-1: qt2_attach - failed to power on unit: -71 [ 348.100895][ T5813] quatech2: probe of 3-1:0.51 failed with error -71 [ 348.649283][ T5813] usb 3-1: USB disconnect, device number 26 [ 349.519239][ T8072] loop0: detected capacity change from 0 to 40427 [ 349.737993][ T8072] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 350.001105][ T8072] F2FS-fs (loop0): Image doesn't support compression [ 350.008064][ T8072] F2FS-fs (loop0): Image doesn't support compression [ 350.014891][ T8072] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 350.053021][ T8072] F2FS-fs (loop0): invalid crc value [ 350.109618][ T8072] F2FS-fs (loop0): Found nat_bits in checkpoint [ 350.296970][ T8072] F2FS-fs (loop0): Start checkpoint disabled! [ 350.359893][ T8072] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 350.389958][ T8091] loop2: detected capacity change from 0 to 2048 [ 350.445143][ T8091] EXT4-fs (loop2): failed to initialize system zone (-117) [ 350.456329][ T8091] EXT4-fs (loop2): mount failed [ 350.508564][ T8072] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 352.767840][ T8115] loop1: detected capacity change from 0 to 32768 [ 352.810740][ T8115] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 352.820083][ T8115] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 352.831790][ T8115] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 353.025768][ T8115] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 355.078758][ T8141] loop3: detected capacity change from 0 to 1024 [ 355.297787][ T8142] loop2: detected capacity change from 0 to 4096 [ 355.313153][ T8141] hfsplus: failed to load root directory [ 355.531394][ T8142] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 357.094735][ T8160] veth3: entered promiscuous mode [ 358.964174][ T8190] loop1: detected capacity change from 0 to 1764 [ 359.384993][ T8200] netlink: 'syz.2.756': attribute type 1 has an invalid length. [ 359.611864][ T8204] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 359.662438][ T8200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.671406][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 359.810148][ T1086] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 359.917856][ T8210] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 360.346949][ T8215] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 361.743953][ T5813] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 361.945323][ T5813] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 361.962773][ T5813] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.998323][ T5813] usb 2-1: config 0 has no interface number 0 [ 362.003762][ T5813] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 362.003799][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.003821][ T5813] usb 2-1: Product: syz [ 362.003838][ T5813] usb 2-1: Manufacturer: syz [ 362.003854][ T5813] usb 2-1: SerialNumber: syz [ 362.007476][ T5813] usb 2-1: config 0 descriptor?? [ 362.020291][ T5813] ftdi_sio 2-1:0.9: FTDI USB Serial Device converter detected [ 362.021500][ T5813] usb 2-1: Detected SIO [ 362.077755][ T5813] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 362.866628][ T9] usb 2-1: USB disconnect, device number 21 [ 362.880230][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 362.890996][ T9] ftdi_sio 2-1:0.9: device disconnected [ 365.033378][ T8257] batadv_slave_1: entered allmulticast mode [ 365.313093][ T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 365.513077][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 365.598415][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 365.743029][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 365.776439][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.791431][ T27] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 365.807018][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.942970][ T27] usb 4-1: config 0 descriptor?? [ 366.367710][ T8256] batadv_slave_1: left allmulticast mode [ 366.377645][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 366.403871][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 366.434577][ T27] usb 4-1: USB disconnect, device number 19 [ 374.268335][ T5814] libceph: connect (1)[c::]:6789 error -101 [ 374.277042][ T5814] libceph: mon0 (1)[c::]:6789 connect error [ 374.362112][ T8311] ceph: No mds server is up or the cluster is laggy [ 379.313882][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.320378][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.912829][ T5811] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 381.123300][ T5811] usb 4-1: device descriptor read/64, error -71 [ 381.418441][ T8374] loop1: detected capacity change from 0 to 32768 [ 381.433272][ T5811] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 381.444159][ T8374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.810 (8374) [ 381.496656][ T8374] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 381.521700][ T8374] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 381.550887][ T8374] BTRFS info (device loop1): using free space tree [ 381.642867][ T5811] usb 4-1: device descriptor read/64, error -71 [ 381.690590][ T8374] BTRFS info (device loop1): enabling ssd optimizations [ 381.698741][ T8374] BTRFS info (device loop1): auto enabling async discard [ 381.774893][ T5811] usb usb4-port1: attempt power cycle [ 382.071202][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 382.220089][ T5811] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 382.288260][ T5811] usb 4-1: device descriptor read/8, error -71 [ 383.213911][ T5811] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 383.243764][ T5811] usb 4-1: device descriptor read/8, error -71 [ 383.363697][ T5811] usb usb4-port1: unable to enumerate USB device [ 384.443990][ T8412] [U]  [ 384.614382][ T8422] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 384.755954][ T8426] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 384.801139][ T8422] veth3: entered promiscuous mode [ 384.817920][ T8422] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 385.002971][ T5810] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 385.043879][ T5811] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 385.067847][ T8423] loop1: detected capacity change from 0 to 40427 [ 385.089559][ T8423] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 385.100435][ T8423] F2FS-fs (loop1): Image doesn't support compression [ 385.107642][ T8423] F2FS-fs (loop1): Image doesn't support compression [ 385.116019][ T8423] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 385.129655][ T8423] F2FS-fs (loop1): invalid crc value [ 385.141914][ T8423] F2FS-fs (loop1): Found nat_bits in checkpoint [ 385.184894][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 385.198059][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.204923][ T8423] F2FS-fs (loop1): Start checkpoint disabled! [ 385.215093][ T5811] usb 3-1: device descriptor read/64, error -71 [ 385.227025][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.240229][ T5810] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.250296][ T8423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 385.253016][ T5814] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 385.270771][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.293988][ T5810] usb 4-1: config 0 descriptor?? [ 385.310790][ T5810] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 385.462189][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 385.474230][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.484807][ T5814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 385.496091][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.496714][ T5811] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 385.515816][ T5814] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 385.526857][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.544371][ T5814] usb 1-1: config 0 descriptor?? [ 385.559838][ T8431] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 385.702918][ T5811] usb 3-1: device descriptor read/64, error -71 [ 385.958209][ T5811] usb usb3-port1: attempt power cycle [ 385.983190][ T5814] usbhid 1-1:0.0: can't add hid device: -71 [ 385.995565][ T5814] usbhid: probe of 1-1:0.0 failed with error -71 [ 386.006611][ T5814] usb 1-1: USB disconnect, device number 15 [ 386.384080][ T5811] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 386.413884][ T5811] usb 3-1: device descriptor read/8, error -71 [ 386.688108][ T5811] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 386.743491][ T5811] usb 3-1: device descriptor read/8, error -71 [ 387.623062][ T5811] usb usb3-port1: unable to enumerate USB device [ 387.755770][ T5814] usb 4-1: USB disconnect, device number 24 [ 388.057029][ T8457] [U]  [ 388.543483][ T5814] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 388.860218][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 389.068253][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 389.080521][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.100830][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.130452][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 389.158346][ T5814] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 389.180608][ T5814] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 389.198616][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.226399][ T5814] usb 3-1: config 0 descriptor?? [ 389.235608][ T8459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 389.593148][ T5814] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 389.676037][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 389.676246][ T27] usb 3-1: USB disconnect, device number 31 [ 389.795297][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 389.806611][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.817071][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 389.827983][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.841357][ T5814] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 389.850677][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.863187][ T5814] usb 2-1: config 0 descriptor?? [ 389.869716][ T8465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 389.913316][ T5811] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 390.092884][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 390.100451][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.110385][ T5811] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.119686][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.130954][ T5811] usb 4-1: config 0 descriptor?? [ 390.143925][ T5811] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 390.286525][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 390.294057][ T5814] usbhid: probe of 2-1:0.0 failed with error -71 [ 390.306646][ T5814] usb 2-1: USB disconnect, device number 22 [ 390.542878][ T5811] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 390.703158][ T5811] usb 3-1: device descriptor read/64, error -71 [ 390.845780][ T8480] netlink: 'syz.1.844': attribute type 1 has an invalid length. [ 390.982921][ T5811] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 392.066600][ T5811] usb 3-1: device descriptor read/64, error -71 [ 392.193239][ T5811] usb usb3-port1: attempt power cycle [ 392.602841][ T5811] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 392.653618][ T5811] usb 3-1: device descriptor read/8, error -71 [ 392.689123][ T27] usb 4-1: USB disconnect, device number 25 [ 392.922857][ T5811] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 392.973920][ T5811] usb 3-1: device descriptor read/8, error -71 [ 393.103091][ T5811] usb usb3-port1: unable to enumerate USB device [ 393.121860][ T8504] netlink: 'syz.3.853': attribute type 1 has an invalid length. [ 393.447546][ T8509] loop2: detected capacity change from 0 to 1024 [ 393.455306][ T8509] EXT4-fs: Ignoring removed mblk_io_submit option [ 393.481784][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.505826][ T27] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 394.126048][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 394.149281][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.160799][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 394.182528][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.201282][ T27] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 394.216301][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.231135][ T27] usb 1-1: config 0 descriptor?? [ 394.248765][ T8502] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 395.414833][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 395.548265][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 395.564518][ T27] usb 1-1: USB disconnect, device number 16 [ 395.589018][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.478083][ T8536] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 396.827076][ T8534] loop2: detected capacity change from 0 to 32768 [ 396.844723][ T8534] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 396.853107][ T8534] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 396.898514][ T8534] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 396.913599][ T5814] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 396.993895][ T8534] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 397.103091][ T5814] usb 1-1: device descriptor read/64, error -71 [ 397.983307][ T5814] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 398.072855][ T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 398.143467][ T5814] usb 1-1: device descriptor read/64, error -71 [ 398.255080][ T27] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 398.266224][ T5814] usb usb1-port1: attempt power cycle [ 398.271866][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.282500][ T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 398.291746][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 398.300133][ T27] usb 4-1: SerialNumber: syz [ 398.482822][ T5811] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 398.522342][ T27] usb 4-1: 0:2 : does not exist [ 398.548334][ T27] usb 4-1: USB disconnect, device number 26 [ 398.584969][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.682876][ T5814] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 398.685579][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.701911][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.711794][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 398.724145][ T5814] usb 1-1: device descriptor read/8, error -71 [ 398.732798][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.757449][ T5811] usb 3-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 398.770961][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.794967][ T5811] usb 3-1: config 0 descriptor?? [ 398.801243][ T8556] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 398.854711][ T8558] loop1: detected capacity change from 0 to 1024 [ 398.878395][ T8558] hfsplus: failed to load root directory [ 399.012890][ T5814] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 399.043783][ T5814] usb 1-1: device descriptor read/8, error -71 [ 399.173052][ T5814] usb usb1-port1: unable to enumerate USB device [ 399.235718][ T5811] usbhid 3-1:0.0: can't add hid device: -71 [ 399.246612][ T5811] usbhid: probe of 3-1:0.0 failed with error -71 [ 399.258951][ T5811] usb 3-1: USB disconnect, device number 36 [ 399.432272][ T8560] loop3: detected capacity change from 0 to 32768 [ 399.451784][ T8560] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.870 (8560) [ 399.737621][ T8560] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.753084][ T8560] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 399.772936][ T8560] BTRFS info (device loop3): using free space tree [ 400.572311][ T8560] BTRFS info (device loop3): enabling ssd optimizations [ 400.596081][ T8560] BTRFS info (device loop3): auto enabling async discard [ 400.859769][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 401.561089][ T8598] [U]  [ 402.262806][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 402.462905][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 402.474288][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 402.486113][ T5811] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 402.510793][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.529863][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.547257][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 402.579213][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 402.607577][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 402.630959][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.696198][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 402.722172][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.750278][ T9] usb 2-1: config 0 descriptor?? [ 402.769156][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 402.797364][ T8607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 402.828649][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.916602][ T5811] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 402.928890][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.947934][ T5811] usb 4-1: config 0 descriptor?? [ 402.954726][ T8609] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 403.127509][ T8614] loop2: detected capacity change from 0 to 32768 [ 403.144271][ T8614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.883 (8614) [ 403.258031][ T8614] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.273090][ T8614] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 403.281846][ T8614] BTRFS info (device loop2): using free space tree [ 403.329063][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 403.329072][ T5814] usb 2-1: USB disconnect, device number 23 [ 403.379789][ T5811] usbhid 4-1:0.0: can't add hid device: -71 [ 403.392509][ T5811] usbhid: probe of 4-1:0.0 failed with error -71 [ 403.404899][ T5811] usb 4-1: USB disconnect, device number 27 [ 403.553155][ T8614] BTRFS info (device loop2): enabling ssd optimizations [ 403.560206][ T8614] BTRFS info (device loop2): auto enabling async discard [ 403.776067][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.027852][ T8642] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 404.320182][ T8652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.406185][ T8653] loop1: detected capacity change from 0 to 4096 [ 404.542938][ T8655] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 404.822361][ T8660] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 405.174653][ T8664] veth5: entered promiscuous mode [ 405.228429][ T8664] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 406.159939][ T8672] loop2: detected capacity change from 0 to 32768 [ 406.174155][ T8672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.895 (8672) [ 406.382490][ T5810] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 406.393252][ T5813] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 406.425391][ T8672] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.440414][ T8672] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 406.453216][ T8672] BTRFS info (device loop2): using free space tree [ 406.505598][ T8672] BTRFS info (device loop2): enabling ssd optimizations [ 406.512646][ T8672] BTRFS info (device loop2): auto enabling async discard [ 406.575201][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 406.594854][ T5813] usb 4-1: device descriptor read/64, error -71 [ 406.602028][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.637090][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 406.668999][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.707303][ T5810] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 406.718724][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.734869][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.757854][ T5810] usb 1-1: config 0 descriptor?? [ 406.765858][ T8678] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 406.883037][ T5813] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 407.052797][ T5813] usb 4-1: device descriptor read/64, error -71 [ 407.191314][ T5813] usb usb4-port1: attempt power cycle [ 407.193399][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 407.204524][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 407.212624][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 407.222337][ T5810] usbhid 1-1:0.0: can't add hid device: -32 [ 407.229070][ T5810] usbhid: probe of 1-1:0.0 failed with error -32 [ 407.253086][ T5810] usb 1-1: USB disconnect, device number 21 [ 407.812834][ T5813] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 407.830348][ T8709] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 407.853640][ T5813] usb 4-1: device descriptor read/8, error -71 [ 407.890515][ T8709] veth5: entered promiscuous mode [ 407.904141][ T8709] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 408.608797][ T5813] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 408.643691][ T5813] usb 4-1: device descriptor read/8, error -71 [ 408.691489][ T8718] netlink: 'syz.1.906': attribute type 1 has an invalid length. [ 408.762398][ T8718] veth3: entered promiscuous mode [ 408.767925][ T5813] usb usb4-port1: unable to enumerate USB device [ 408.778701][ T8718] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 409.234738][ T8726] batadv_slave_1: entered allmulticast mode [ 409.264191][ T8725] batadv_slave_1: left allmulticast mode [ 410.153349][ T5814] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 410.455037][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.476704][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.512080][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 410.539941][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.561442][ T5814] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 410.571052][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.596698][ T5814] usb 2-1: config 0 descriptor?? [ 410.606881][ T8735] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 411.269679][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 411.427012][ T5814] usbhid: probe of 2-1:0.0 failed with error -71 [ 411.488414][ T5814] usb 2-1: USB disconnect, device number 24 [ 411.736392][ T8755] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 411.758620][ T8756] loop0: detected capacity change from 0 to 256 [ 411.801877][ T8756] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0xd819abd0, checksum : 0x1119abd0) [ 411.827143][ T8756] exFAT-fs (loop0): invalid boot region [ 411.846241][ T8756] exFAT-fs (loop0): failed to recognize exfat type [ 412.103503][ T8758] veth7: entered promiscuous mode [ 412.134129][ T8758] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 414.444215][ T8784] batadv_slave_1: entered allmulticast mode [ 414.673810][ T8780] loop2: detected capacity change from 0 to 32768 [ 414.684281][ T8780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.923 (8780) [ 414.717213][ T8780] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 414.728681][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 414.736124][ T8780] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 414.747738][ T8780] BTRFS info (device loop2): using free space tree [ 414.799121][ T8780] BTRFS info (device loop2): enabling ssd optimizations [ 414.806603][ T8780] BTRFS info (device loop2): auto enabling async discard [ 414.869105][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 414.905044][ T5813] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 414.932804][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 414.942229][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 414.972829][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 414.986210][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.000601][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.013599][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.042104][ T9] usb 2-1: config 0 descriptor?? [ 415.115714][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.154612][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.187308][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 415.243246][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.326013][ T5813] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 415.371467][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.398235][ T5813] usb 4-1: config 0 descriptor?? [ 415.412644][ T8788] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 415.564455][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.653407][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.712816][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.741212][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.758008][ T8783] batadv_slave_1: left allmulticast mode [ 415.827591][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.880458][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.888588][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.918709][ T5813] usbhid 4-1:0.0: can't add hid device: -71 [ 415.924949][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.932252][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 415.939918][ T5813] usbhid: probe of 4-1:0.0 failed with error -71 [ 415.972458][ T5813] usb 4-1: USB disconnect, device number 32 [ 415.982914][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.012558][ T8809] loop0: detected capacity change from 0 to 4096 [ 416.023603][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.052563][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.066197][ T8809] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 416.075291][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075330][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075356][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075381][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075425][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075453][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075478][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.075504][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 416.076546][ T9] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 416.157658][ T9] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 416.169507][ T9] microsoft 0003:045E:07DA.0003: no inputs found [ 416.184390][ T9] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 416.259100][ T9] usb 2-1: USB disconnect, device number 25 [ 416.387594][ T8811] fido_id[8811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 416.708569][ T8819] loop0: detected capacity change from 0 to 256 [ 416.766129][ T8819] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0xd819abd0, checksum : 0x1119abd0) [ 416.801652][ T8819] exFAT-fs (loop0): invalid boot region [ 416.839188][ T8819] exFAT-fs (loop0): failed to recognize exfat type [ 416.895370][ T5777] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 417.764440][ T8824] loop3: detected capacity change from 0 to 1024 [ 417.795281][ T8824] hfsplus: failed to load root directory [ 418.693100][ T8838] loop3: detected capacity change from 0 to 4096 [ 418.708034][ T8838] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 418.991206][ T8829] loop1: detected capacity change from 0 to 32768 [ 419.055441][ T8829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.936 (8829) [ 419.132015][ T8829] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 419.174088][ T8829] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 419.211135][ T8829] BTRFS info (device loop1): using free space tree [ 419.650108][ T8829] BTRFS info (device loop1): enabling ssd optimizations [ 419.669369][ T8829] BTRFS info (device loop1): auto enabling async discard [ 419.869071][ T8836] loop0: detected capacity change from 0 to 40427 [ 419.923472][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 419.949062][ T8836] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 420.002811][ T8836] F2FS-fs (loop0): Image doesn't support compression [ 420.062810][ T8836] F2FS-fs (loop0): Image doesn't support compression [ 420.082379][ T8836] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 420.146213][ T8836] F2FS-fs (loop0): invalid crc value [ 420.223027][ T8836] F2FS-fs (loop0): Found nat_bits in checkpoint [ 420.429689][ T8836] F2FS-fs (loop0): Start checkpoint disabled! [ 420.492994][ T8836] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 420.560615][ T8836] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 420.592861][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 420.783103][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 420.800800][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 420.861377][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 421.047618][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 421.248805][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 421.390816][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.607026][ T9] usb 2-1: config 0 descriptor?? [ 421.698410][ T8875] loop3: detected capacity change from 0 to 1024 [ 421.721502][ T8875] hfsplus: failed to load root directory [ 422.315569][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.350609][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.402896][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.410305][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.444140][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.451468][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.482569][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.497977][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.526667][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.537990][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.550814][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.559060][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.615866][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.680576][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.685925][ T8882] loop2: detected capacity change from 0 to 4096 [ 422.724390][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.800118][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.802091][ T8882] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 422.913368][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 422.978335][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 423.004525][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 423.040374][ T9] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 423.117934][ T9] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 423.163730][ T9] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 423.198892][ T9] microsoft 0003:045E:07DA.0004: no inputs found [ 423.212995][ T9] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 423.293128][ T9] usb 2-1: USB disconnect, device number 26 [ 423.413348][ T8888] fido_id[8888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 423.449091][ T8892] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 423.582578][ T8892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.952999][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 424.145815][ T9] usb 4-1: config 1 has an invalid descriptor of length 63, skipping remainder of the config [ 424.163160][ T55] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 424.171337][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.198515][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.209183][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.222927][ T9] usb 4-1: SerialNumber: syz [ 424.347718][ T8899] loop2: detected capacity change from 0 to 40427 [ 424.362855][ T55] usb 1-1: Using ep0 maxpacket: 8 [ 424.371319][ T8899] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 424.373417][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 424.401724][ T8899] F2FS-fs (loop2): Image doesn't support compression [ 424.410254][ T8899] F2FS-fs (loop2): Image doesn't support compression [ 424.434978][ T8899] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 424.441125][ T9] usb 4-1: 0:2 : does not exist [ 424.454721][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.465585][ T55] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.477455][ T9] usb 4-1: unit 5 not found! [ 424.484315][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 424.504522][ T8899] F2FS-fs (loop2): invalid crc value [ 424.510840][ T9] usb 4-1: USB disconnect, device number 33 [ 424.517198][ T55] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 424.534644][ T8899] F2FS-fs (loop2): Found nat_bits in checkpoint [ 424.558309][ T55] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 424.585339][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.597289][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.625813][ T55] usb 1-1: config 0 descriptor?? [ 424.654907][ T5783] Bluetooth: hci4: urb ffff8880231ade00 submission failed (90) [ 424.729253][ T8899] F2FS-fs (loop2): Start checkpoint disabled! [ 424.769499][ T8899] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 424.903272][ T8899] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 425.614295][ T27] usb 1-1: USB disconnect, device number 22 [ 426.122572][ T8914] netlink: 96 bytes leftover after parsing attributes in process `syz.1.959'. [ 426.502024][ T8924] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 426.772443][ T55] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 426.852586][ T8929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 427.019845][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 427.057407][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 427.094544][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 427.111984][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.127975][ T55] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.180679][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.214266][ T55] usb 3-1: config 0 descriptor?? [ 427.313501][ T27] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 427.333531][ T8934] [U]  [ 427.553146][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 427.563983][ T27] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 427.573444][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.584357][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.597051][ T27] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.607024][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.615878][ T27] usb 4-1: Product: syz [ 427.620249][ T27] usb 4-1: Manufacturer: syz [ 427.625656][ T27] usb 4-1: SerialNumber: syz [ 427.636224][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.661683][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.679212][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.693455][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.706989][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.721488][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.729078][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.740121][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.752101][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.769382][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.778083][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.792376][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.799760][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.811398][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.818837][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.833076][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.849930][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.857606][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.870199][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.879340][ T55] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 427.897791][ T55] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 427.918515][ T55] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 427.940175][ T55] microsoft 0003:045E:07DA.0005: no inputs found [ 427.950923][ T55] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 427.986297][ T55] usb 3-1: USB disconnect, device number 37 [ 428.063137][ T27] usb 4-1: 0:2 : does not exist [ 428.092197][ T8941] fido_id[8941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 428.877584][ T8940] loop0: detected capacity change from 0 to 40427 [ 428.894946][ T8940] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 428.913399][ T8940] F2FS-fs (loop0): Image doesn't support compression [ 429.653009][ T8940] F2FS-fs (loop0): Image doesn't support compression [ 429.797115][ T8940] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 430.062629][ T8940] F2FS-fs (loop0): invalid crc value [ 430.260223][ T8940] F2FS-fs (loop0): Found nat_bits in checkpoint [ 430.353764][ T55] usb 4-1: USB disconnect, device number 34 [ 430.588422][ T8940] F2FS-fs (loop0): Start checkpoint disabled! [ 430.672879][ T5811] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 430.889178][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 430.916120][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 430.943798][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.981802][ T5811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.997683][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 431.021502][ T5811] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 431.036296][ T5811] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 431.050406][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.080092][ T5811] usb 3-1: config 0 descriptor?? [ 431.153139][ T5810] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 431.241860][ T5783] Bluetooth: hci4: urb ffff888026744600 submission failed (90) [ 431.384142][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.408077][ T5810] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.482267][ T5810] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 431.598789][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.630038][ T5811] usb 3-1: USB disconnect, device number 38 [ 431.647836][ T5810] usb 2-1: config 0 descriptor?? [ 432.099810][ T8973] loop0: detected capacity change from 0 to 1024 [ 432.118755][ T8973] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.176474][ T8973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.157910][ T8984] ================================================================== [ 433.166193][ T8984] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 433.173922][ T8984] Read of size 1 at addr ffff8880265d8c30 by task syz.2.977/8984 [ 433.181674][ T8984] [ 433.184046][ T8984] CPU: 1 PID: 8984 Comm: syz.2.977 Not tainted 6.6.93-syzkaller #0 [ 433.191981][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.202092][ T8984] Call Trace: [ 433.205410][ T8984] [ 433.208378][ T8984] dump_stack_lvl+0x16c/0x230 [ 433.213116][ T8984] ? __lock_acquire+0x7c80/0x7c80 [ 433.218269][ T8984] ? show_regs_print_info+0x20/0x20 [ 433.223534][ T8984] ? load_image+0x3b0/0x3b0 [ 433.228101][ T8984] ? __virt_addr_valid+0x469/0x540 [ 433.233250][ T8984] print_report+0xac/0x230 [ 433.237715][ T8984] kasan_report+0x151/0x180 [ 433.242260][ T8984] ? rose_get_neigh+0x391/0x990 [ 433.247159][ T8984] rose_get_neigh+0x391/0x990 [ 433.251885][ T8984] rose_connect+0x417/0x10a0 [ 433.256578][ T8984] ? aa_sk_perm+0x7fc/0x930 [ 433.261132][ T8984] ? rose_bind+0x7c0/0x7c0 [ 433.265615][ T8984] ? aa_af_perm+0x200/0x2b0 [ 433.270164][ T8984] ? tomoyo_socket_connect_permission+0x164/0x290 [ 433.276892][ T8984] ? __might_fault+0xaa/0x120 [ 433.281708][ T8984] ? bpf_lsm_socket_connect+0x9/0x10 [ 433.287043][ T8984] ? security_socket_connect+0x80/0xa0 [ 433.292550][ T8984] ? rose_bind+0x7c0/0x7c0 [ 433.297013][ T8984] __sys_connect+0x397/0x420 [ 433.301640][ T8984] ? __sys_connect_file+0x180/0x180 [ 433.306893][ T8984] __x64_sys_connect+0x7a/0x90 [ 433.311691][ T8984] do_syscall_64+0x55/0xb0 [ 433.316146][ T8984] ? clear_bhb_loop+0x40/0x90 [ 433.320860][ T8984] ? clear_bhb_loop+0x40/0x90 [ 433.325673][ T8984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.331646][ T8984] RIP: 0033:0x7f4fbcf8e929 [ 433.331733][ T8985] loop3: detected capacity change from 0 to 1024 [ 433.336099][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.336124][ T8984] RSP: 002b:00007f4fbcdff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 433.336158][ T8984] RAX: ffffffffffffffda RBX: 00007f4fbd1b5fa0 RCX: 00007f4fbcf8e929 [ 433.336174][ T8984] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 433.336189][ T8984] RBP: 00007f4fbd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 433.345475][ T8985] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.362199][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.362225][ T8984] R13: 0000000000000000 R14: 00007f4fbd1b5fa0 R15: 00007ffeebb3d368 [ 433.362251][ T8984] [ 433.362258][ T8984] [ 433.362272][ T8984] Allocated by task 8809: [ 433.362285][ T8984] kasan_set_track+0x4e/0x70 [ 433.362317][ T8984] __kasan_kmalloc+0x8f/0xa0 [ 433.362340][ T8984] ntfs_security_init+0x6d6/0xc40 [ 433.362357][ T8984] ntfs_fill_super+0x3cdd/0x42e0 [ 433.362372][ T8984] get_tree_bdev+0x3e4/0x510 [ 433.362394][ T8984] vfs_get_tree+0x8c/0x280 [ 433.362416][ T8984] do_new_mount+0x24b/0xa40 [ 433.362435][ T8984] __se_sys_mount+0x2da/0x3c0 [ 433.465030][ T8984] do_syscall_64+0x55/0xb0 [ 433.469524][ T8984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.475481][ T8984] [ 433.477841][ T8984] Last potentially related work creation: [ 433.483592][ T8984] kasan_save_stack+0x3e/0x60 [ 433.488346][ T8984] __kasan_record_aux_stack+0xaf/0xc0 [ 433.493809][ T8984] insert_work+0x3d/0x310 [ 433.498192][ T8984] __queue_work+0xd2c/0x1020 [ 433.500327][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.502824][ T8984] call_timer_fn+0x16e/0x530 [ 433.502852][ T8984] __run_timers+0x558/0x7d0 [ 433.502871][ T8984] run_timer_softirq+0x67/0xf0 [ 433.502888][ T8984] handle_softirqs+0x280/0x820 [ 433.502908][ T8984] __irq_exit_rcu+0xc7/0x190 [ 433.502926][ T8984] irq_exit_rcu+0x9/0x20 [ 433.502942][ T8984] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 433.502965][ T8984] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.502987][ T8984] [ 433.502991][ T8984] Second to last potentially related work creation: [ 433.502999][ T8984] kasan_save_stack+0x3e/0x60 [ 433.503025][ T8984] __kasan_record_aux_stack+0xaf/0xc0 [ 433.503054][ T8984] insert_work+0x3d/0x310 [ 433.503076][ T8984] __queue_work+0xd2c/0x1020 [ 433.503094][ T8984] call_timer_fn+0x16e/0x530 [ 433.503111][ T8984] __run_timers+0x558/0x7d0 [ 433.503129][ T8984] run_timer_softirq+0x67/0xf0 [ 433.503147][ T8984] handle_softirqs+0x280/0x820 [ 433.503164][ T8984] __irq_exit_rcu+0xc7/0x190 [ 433.503181][ T8984] irq_exit_rcu+0x9/0x20 [ 433.503198][ T8984] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 433.503218][ T8984] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.503238][ T8984] [ 433.503243][ T8984] The buggy address belongs to the object at ffff8880265d8c00 [ 433.503243][ T8984] which belongs to the cache kmalloc-512 of size 512 [ 433.503263][ T8984] The buggy address is located 48 bytes inside of [ 433.503263][ T8984] freed 512-byte region [ffff8880265d8c00, ffff8880265d8e00) [ 433.503285][ T8984] [ 433.503290][ T8984] The buggy address belongs to the physical page: [ 433.503316][ T8984] page:ffffea0000997600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880265d9000 pfn:0x265d8 [ 433.673232][ T8984] head:ffffea0000997600 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 433.682274][ T8984] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 433.690299][ T8984] page_type: 0xffffffff() [ 433.694681][ T8984] raw: 00fff00000000840 ffff888017841c80 ffffea000179d310 ffffea0000b9aa10 [ 433.703285][ T8984] raw: ffff8880265d9000 000000000010000d 00000001ffffffff 0000000000000000 [ 433.711909][ T8984] page dumped because: kasan: bad access detected [ 433.718376][ T8984] page_owner tracks the page as allocated [ 433.724131][ T8984] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2409, tgid 2409 (kworker/u4:2), ts 18587609053, free_ts 0 [ 433.744944][ T8984] post_alloc_hook+0x1cd/0x210 [ 433.749763][ T8984] get_page_from_freelist+0x195c/0x19f0 [ 433.755380][ T8984] __alloc_pages+0x1e3/0x460 [ 433.760012][ T8984] alloc_slab_page+0x5d/0x170 [ 433.764737][ T8984] new_slab+0x87/0x2e0 [ 433.768837][ T8984] ___slab_alloc+0xc6d/0x12f0 [ 433.773543][ T8984] __kmem_cache_alloc_node+0x1a2/0x260 [ 433.779032][ T8984] kmalloc_trace+0x2a/0xe0 [ 433.783494][ T8984] alloc_bprm+0x56/0x9c0 [ 433.787788][ T8984] kernel_execve+0x98/0x9c0 [ 433.792487][ T8984] call_usermodehelper_exec_async+0x20b/0x350 [ 433.798612][ T8984] ret_from_fork+0x48/0x80 [ 433.803081][ T8984] ret_from_fork_asm+0x11/0x20 [ 433.807885][ T8984] page_owner free stack trace missing [ 433.813281][ T8984] [ 433.815624][ T8984] Memory state around the buggy address: [ 433.821282][ T8984] ffff8880265d8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.829374][ T8984] ffff8880265d8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.837471][ T8984] >ffff8880265d8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.845651][ T8984] ^ [ 433.851315][ T8984] ffff8880265d8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.859410][ T8984] ffff8880265d8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.867513][ T8984] ================================================================== [ 433.875793][ T8984] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 433.883037][ T8984] CPU: 1 PID: 8984 Comm: syz.2.977 Not tainted 6.6.93-syzkaller #0 [ 433.890974][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.901153][ T8984] Call Trace: [ 433.904463][ T8984] [ 433.907422][ T8984] dump_stack_lvl+0x16c/0x230 [ 433.912301][ T8984] ? show_regs_print_info+0x20/0x20 [ 433.917562][ T8984] ? load_image+0x3b0/0x3b0 [ 433.922299][ T8984] panic+0x2c0/0x710 [ 433.926312][ T8984] ? bpf_jit_dump+0xd0/0xd0 [ 433.930866][ T8984] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 433.936902][ T8984] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 433.942868][ T8984] ? _raw_spin_unlock+0x40/0x40 [ 433.947767][ T8984] ? print_memory_metadata+0x314/0x400 [ 433.953276][ T8984] check_panic_on_warn+0x84/0xa0 [ 433.958350][ T8984] end_report+0x6f/0x140 [ 433.962658][ T8984] kasan_report+0x160/0x180 [ 433.967222][ T8984] ? rose_get_neigh+0x391/0x990 [ 433.972280][ T8984] rose_get_neigh+0x391/0x990 [ 433.977059][ T8984] rose_connect+0x417/0x10a0 [ 433.981724][ T8984] ? aa_sk_perm+0x7fc/0x930 [ 433.986414][ T8984] ? rose_bind+0x7c0/0x7c0 [ 433.990888][ T8984] ? aa_af_perm+0x200/0x2b0 [ 433.995479][ T8984] ? tomoyo_socket_connect_permission+0x164/0x290 [ 433.999921][ T9] usb 2-1: USB disconnect, device number 27 [ 434.007886][ T8984] ? __might_fault+0xaa/0x120 [ 434.012612][ T8984] ? bpf_lsm_socket_connect+0x9/0x10 [ 434.017961][ T8984] ? security_socket_connect+0x80/0xa0 [ 434.023467][ T8984] ? rose_bind+0x7c0/0x7c0 [ 434.027940][ T8984] __sys_connect+0x397/0x420 [ 434.032580][ T8984] ? __sys_connect_file+0x180/0x180 [ 434.037835][ T8984] __x64_sys_connect+0x7a/0x90 [ 434.042649][ T8984] do_syscall_64+0x55/0xb0 [ 434.047122][ T8984] ? clear_bhb_loop+0x40/0x90 [ 434.051842][ T8984] ? clear_bhb_loop+0x40/0x90 [ 434.056584][ T8984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.062557][ T8984] RIP: 0033:0x7f4fbcf8e929 [ 434.067013][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.086674][ T8984] RSP: 002b:00007f4fbcdff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 434.095153][ T8984] RAX: ffffffffffffffda RBX: 00007f4fbd1b5fa0 RCX: 00007f4fbcf8e929 [ 434.103186][ T8984] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 434.111271][ T8984] RBP: 00007f4fbd010b39 R08: 0000000000000000 R09: 0000000000000000 [ 434.119380][ T8984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.127490][ T8984] R13: 0000000000000000 R14: 00007f4fbd1b5fa0 R15: 00007ffeebb3d368 [ 434.135621][ T8984] [ 434.139003][ T8984] Kernel Offset: disabled [ 434.143435][ T8984] Rebooting in 86400 seconds..