last executing test programs: 8m59.521436433s ago: executing program 0 (id=36): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x40, 0x0, 0x3bd}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c80000000700000006000000000000010000000008001102020000000000000b00000000060000000000000c010000000b00000001000093050000000e000000090000008f0400000300000006000013040000000700000005000000040000000400000001000080ffff000008000000040000000100000007000000040000000000000001000000ff010000080000000300000070020000fbffffff030000000000000b040000000000000000000002030000000800000000000011010000000200000001000000000000100200000000be615f2e5f0084d6093f200894825b0e71384ce3d249e3b9b1f3d53abf80e0deb44d8c3f75edf97f0b1722748959ab574605c04747f24ba40b274a1f6cc8a1fa9aa5a1b1c39d9b2bbd1123d23ec28b1b42a52cc246ef2bc1c2dc6c"], &(0x7f00000002c0)=""/158, 0xe7, 0x9e, 0x1, 0x9e4, 0x10000, @value=r0}, 0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x180, 0x3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, r2, 0x3, 0x5, 0x8, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$vsock(0xffffff9c, &(0x7f0000000800), 0x121080, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x19, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @ldst={0x1, 0x3, 0x6, 0x2, 0xa, 0x20, 0xfffffffffffffff0}, @exit]}, &(0x7f0000000100)='GPL\x00', 0xffff, 0x7b, &(0x7f0000000140)=""/123, 0x41000, 0x10, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x4, 0x2, 0xc, 0x7}], 0x10, 0x7, @void, @value}, 0x94) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ntfs3\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES8=r1, @ANYRES16=r5], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) listen(r6, 0x4) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b"], 0xfc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8m56.06730197s ago: executing program 0 (id=46): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x402) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad4300000000000000001700"], 0x14}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) r8 = syz_open_procfs(r2, 0x0) read$FUSE(r8, &(0x7f0000000340)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0xffff, 0x6, 0x0, 0x100003, 0x8001}, 0x14) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) io_uring_setup(0x355c, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) 8m50.871558711s ago: executing program 0 (id=61): r0 = fsopen(&(0x7f00000003c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8m48.139669892s ago: executing program 0 (id=72): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x400044, &(0x7f0000000040)={[{@creator={'creator', 0x3d, "e8b6d9ad"}}, {}, {@nobarrier}, {@part={'part', 0x3d, 0x1000}}, {@gid}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp865'}}]}, 0x1, 0x632, &(0x7f0000000140)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 8m48.139395609s ago: executing program 4 (id=73): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0xfff0}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8m47.367915958s ago: executing program 0 (id=74): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x88, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x88}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 8m46.291469299s ago: executing program 0 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) setfsgid(0xee01) getitimer(0x0, 0x0) 8m45.71915249s ago: executing program 32 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) setfsgid(0xee01) getitimer(0x0, 0x0) 8m45.698589097s ago: executing program 4 (id=80): openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0xfffffffffffffda7) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 8m45.29762877s ago: executing program 4 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@multicast2, 0x0, 0x3c}, @in6=@remote, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3503, 0xa, 0x2, 0xfd, 0x2c}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[], 0x18) 8m44.18446988s ago: executing program 4 (id=86): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x400044, &(0x7f0000000040)={[{@creator={'creator', 0x3d, "e8b6d9ad"}}, {}, {@nobarrier}, {@part={'part', 0x3d, 0x1000}}, {@gid}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp865'}}]}, 0x1, 0x632, &(0x7f0000000140)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 8m41.91493465s ago: executing program 4 (id=90): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x3, 0x50d4, &(0x7f00000051c0)="$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") r0 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) 8m34.783735491s ago: executing program 4 (id=107): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000240)={{@hyper}, 0x1}) 8m34.51701599s ago: executing program 33 (id=107): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000240)={{@hyper}, 0x1}) 8m0.596949734s ago: executing program 1 (id=194): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev}}}}}}}, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x62}, 0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x160000) 7m59.645252461s ago: executing program 1 (id=196): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000090000000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000070fa9838d364ef8f"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000012}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x801, 0x6, 0x8000, 0xc, 0x59c, 0xffffffffffffffff}) 7m57.568151572s ago: executing program 1 (id=200): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1) 7m57.277864785s ago: executing program 1 (id=203): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r11, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 7m55.438029002s ago: executing program 1 (id=205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m54.185700097s ago: executing program 1 (id=210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x14507f, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000009b80), 0x0, 0x20000881) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 7m38.116288059s ago: executing program 34 (id=210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x14507f, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000009b80), 0x0, 0x20000881) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 11.727579799s ago: executing program 7 (id=2170): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x2, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x10ffff) 10.315990168s ago: executing program 7 (id=2173): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001000a00000800040001000000", 0x24) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv6_getroute={0x1c, 0x1a, 0x401, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.648099441s ago: executing program 6 (id=2178): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="e3df449b7df7e013ffe0600d748a78864a240d1859f23dd030a2f10e8c36df865cabf74d195b97a3", 0x28}, {&(0x7f00000005c0)="001f6d1e2349c8", 0x7}], 0x2}, 0x0) 9.262595004s ago: executing program 6 (id=2179): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x57, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fe800000000000000000000000000008", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000005a2600000000000000000001"], 0xb8}}, 0x4000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) 9.004830231s ago: executing program 7 (id=2181): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 8.547994704s ago: executing program 2 (id=2184): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r11, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) 8.190916985s ago: executing program 6 (id=2186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x100000000) syz_io_uring_setup(0x4097, &(0x7f0000000180)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0xf, 0x1, 0x0, 0x0, {{0xff8b, 0x3, 0x8}, {0x9, 0x5, 0x1, 0x800}}}]}]}]}}]}, 0x60}}, 0x0) 7.608776101s ago: executing program 7 (id=2187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) tkill(r5, 0xb) 7.470632152s ago: executing program 2 (id=2189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x1}, 0x2}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44094}, 0x8800) 6.745498329s ago: executing program 2 (id=2193): socket$packet(0x11, 0x2, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000ffff00"}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_pts(r0, 0x0) io_uring_setup(0x2e31, &(0x7f0000000180)={0x0, 0x0, 0x2}) socket$packet(0x11, 0x2, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r1, @ANYBLOB="080004007f00"], 0x50}}, 0x0) 4.614147361s ago: executing program 2 (id=2199): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x560}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 4.562401551s ago: executing program 8 (id=2200): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 3.53980359s ago: executing program 3 (id=2202): userfaultfd(0x801) r0 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff", @ANYRES8, @ANYRES64=r0], 0x0) 3.475217499s ago: executing program 2 (id=2203): socket$netlink(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x2, 0x20000000, 0x4) 3.453864799s ago: executing program 8 (id=2204): r0 = io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x40, 0xfffffffe, 0x2000}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x0) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.263118916s ago: executing program 5 (id=2205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x10, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.16264386s ago: executing program 8 (id=2206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d37fa121ffff128000000000", 0xc}], 0x1) 2.894953637s ago: executing program 5 (id=2207): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x3b, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 2.576199944s ago: executing program 5 (id=2208): socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.292344889s ago: executing program 6 (id=2209): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x20040000) ioctl$TUNSETNOCSUM(r1, 0x8923, 0x20000000) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000300)={@private=0xa010100, @rand_addr=0x64010100, r4}, 0xc) read$FUSE(r1, &(0x7f0000001580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee01, r7}}, './file0\x00'}) 2.215625698s ago: executing program 8 (id=2210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0) 1.463704498s ago: executing program 5 (id=2211): socket$packet(0x11, 0x2, 0x300) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x22701, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000ffff00"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_pts(r0, 0x0) io_uring_setup(0x2e31, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r1, @ANYBLOB="080004007f00"], 0x50}}, 0x0) 1.436139104s ago: executing program 3 (id=2212): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x10022, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) close(r0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.403445045s ago: executing program 7 (id=2213): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x57, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fe800000000000000000000000000008e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000005a2600000000000000000001"], 0xb8}}, 0x4000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) 1.401203428s ago: executing program 2 (id=2214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000100)={0x0, 0xd, 0x3, "401d0a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.149255255s ago: executing program 3 (id=2215): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x560}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 1.11120249s ago: executing program 8 (id=2216): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) 1.094613913s ago: executing program 6 (id=2217): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b00)="77edfdefdaac43a28ecf80d7", 0xc}, {0x0}], 0x2}, 0x8000) 1.03706979s ago: executing program 5 (id=2218): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x6, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) read$FUSE(r4, &(0x7f0000005740)={0x2020}, 0x2020) 911.640923ms ago: executing program 3 (id=2219): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x10, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 745.766183ms ago: executing program 6 (id=2220): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0xcbff9000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000b80)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0xa}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fda={0x66646185, 0xb, 0x1, 0x35}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 662.31644ms ago: executing program 7 (id=2221): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00281af1b4065523979adf17beb94280849ccc0dc1714eb222f63df0efb137cc864167ebe1152a2afc8a3e741d2278ce13c53ec35f7f6221d79689cd5b34e5357d62ae2d542b5df0c3f394ee"], 0x1, 0x442a, &(0x7f0000008940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x3000000) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000003c0), 0x0, 0xe7b, 0x0, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7045abc5860f19fa579a71dd3cede4ae216ef35a6d6785d3bc7700fcdbdf254f0000000c009900c900ec745200000085692b01cebc05166176db8b56db429e8ec63a9687512c4ae8b744d8e3f78222e6af8f7b4e7dddf28050f28a1e8bc59032ffe7cbf58133eeb1f2c0e6d500000000000000000000000079ab34f6b76d03587958ad69abc8f8d691a74396a11179a2726a2744c5fe98721bf43438ac2cadec4dbab3243b97a209212d151394988b113abb171cbdcb"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004044) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)) r4 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x14927e, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000280)=0x3, 0x4) setreuid(0xffffffffffffffff, 0xee00) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) 483.667914ms ago: executing program 3 (id=2222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d37fa121ffff128000000000", 0xc}], 0x1) 295.33499ms ago: executing program 3 (id=2223): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x402) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="ad4300000000000000001700"], 0x14}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) syz_open_procfs(r2, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0xffff, 0x6, 0x0, 0x100003, 0x8001}, 0x14) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) io_uring_setup(0x355c, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) 74.793762ms ago: executing program 8 (id=2224): socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = io_uring_setup(0x30d1, &(0x7f0000000300)={0x0, 0xd27b}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r8, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2225): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) tkill(r5, 0xb) kernel console output (not intermixed with test programs): : -EINTR [ 352.858179][ T9014] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 352.869722][ T9014] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 352.881993][ T9014] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 352.895036][ T9014] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 352.908445][ T9014] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 353.176791][ T9014] BTRFS error (device loop2): open_ctree failed [ 353.252237][ T9025] Mount JFS Failure: -5 [ 353.278897][ T9025] jfs_mount failed w/return code = -5 [ 357.901838][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 357.908127][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 357.961441][ T9113] loop7: detected capacity change from 0 to 32768 [ 358.032644][ T9113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.870 (9113) [ 358.115475][ T9113] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.171682][ T9113] BTRFS info (device loop7): using sha256 (sha256-ni) checksum algorithm [ 358.355156][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 358.361724][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 358.383124][ T9113] BTRFS info (device loop7): using free-space-tree [ 358.605415][ T9129] ceph: No mds server is up or the cluster is laggy [ 358.872945][ T8] libceph: connect (1)[c::]:6789 error -101 [ 358.881520][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 359.567766][ T9161] syzkaller0: entered promiscuous mode [ 359.591054][ T6361] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.605171][ T9161] syzkaller0: entered allmulticast mode [ 361.901731][ T9193] netlink: 'syz.7.889': attribute type 1 has an invalid length. [ 361.917886][ T9193] netlink: 224 bytes leftover after parsing attributes in process `syz.7.889'. [ 365.350496][ T9218] loop8: detected capacity change from 0 to 32768 [ 365.359472][ T9218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.896 (9218) [ 365.394807][ T9218] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.405406][ T9218] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 365.406441][ T9204] team0 (unregistering): Port device team_slave_0 removed [ 365.414119][ T9218] BTRFS info (device loop8): using free-space-tree [ 365.435108][ T9204] team0 (unregistering): Port device team_slave_1 removed [ 366.088677][ T7014] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.497180][ T29] audit: type=1326 audit(366.287:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 366.802040][ T29] audit: type=1326 audit(366.297:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 366.851203][ T29] audit: type=1326 audit(366.457:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 366.897522][ T9239] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.906678][ T9239] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.915430][ T9239] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.924271][ T9239] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.933714][ T9239] vxlan0: entered promiscuous mode [ 366.939657][ T9239] vxlan0: entered allmulticast mode [ 366.962683][ T29] audit: type=1326 audit(366.457:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 367.041395][ T29] audit: type=1326 audit(366.457:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 367.079026][ T9239] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.088448][ T9239] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.097507][ T9239] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.107089][ T9239] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.179779][ T29] audit: type=1326 audit(366.707:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 367.250694][ T29] audit: type=1326 audit(366.707:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 367.812880][ T29] audit: type=1326 audit(366.707:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 368.265183][ T29] audit: type=1326 audit(366.707:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 368.312538][ T29] audit: type=1326 audit(366.707:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9238 comm="syz.6.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 372.688404][ T9288] pim6reg1: entered promiscuous mode [ 372.749330][ T9288] pim6reg1: entered allmulticast mode [ 373.432988][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 373.692580][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 373.701605][ T5890] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 373.739818][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.815308][ T5890] usb 3-1: config 0 descriptor?? [ 373.854021][ T5890] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 375.474448][ T5890] gspca_nw80x: reg_w err -71 [ 375.479679][ T5890] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 375.729299][ T5890] usb 3-1: USB disconnect, device number 3 [ 376.260930][ T9315] loop5: detected capacity change from 0 to 32768 [ 376.418093][ T9335] netlink: 64 bytes leftover after parsing attributes in process `syz.3.928'. [ 376.557737][ T9315] overlayfs: failed to resolve './file1': -2 [ 377.050178][ T5831] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 378.142619][ T1197] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 378.204960][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.072822][ T1197] usb 4-1: Using ep0 maxpacket: 16 [ 379.140490][ T1197] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 379.178509][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 379.253569][ T1197] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 379.294203][ T1197] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.337724][ T1197] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 379.365080][ T1197] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 379.613080][ T1197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.621802][ T1197] usb 4-1: Product: syz [ 379.626427][ T1197] usb 4-1: Manufacturer: syz [ 379.633929][ T1197] usb 4-1: SerialNumber: syz [ 380.178219][ T1197] usb 4-1: config 0 descriptor?? [ 380.206796][ T9347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.337446][ T1197] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 380.344506][ T1197] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 380.419002][ T9383] [U]  [ 380.563989][ T1197] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 380.608290][ T1197] usb 4-1: USB disconnect, device number 5 [ 381.104365][ T5831] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 381.114733][ T5831] Bluetooth: hci1: Injecting HCI hardware error event [ 381.124620][ T5831] Bluetooth: hci1: hardware error 0x00 [ 382.169518][ T9402] overlay: filesystem on ./bus not supported as upperdir [ 383.299153][ T5831] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 384.975969][ T9451] overlayfs: failed to resolve './file0': -2 [ 387.807501][ T9494] overlay: filesystem on ./bus not supported as upperdir [ 388.769487][ T9509] input: syz0 as /devices/virtual/input/input16 [ 390.290010][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.312205][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.322540][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.341643][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.349184][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.360316][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.368061][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.375914][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.383958][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.391386][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.398860][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.406537][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.414007][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.421414][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.428881][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.436504][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.444156][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.451562][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.459117][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.466700][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.474194][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.482538][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.489954][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.497418][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.504959][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.512508][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.520014][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.527594][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.535092][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.542567][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.550017][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.557526][ T5838] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 390.643656][ T5838] hid-generic 0000:0000:0000.0002: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 390.923907][ T5831] block nbd8: Receive control failed (result -32) [ 390.935921][ T9528] block nbd8: shutting down sockets [ 391.089989][ T9536] overlay: filesystem on ./bus not supported as upperdir [ 391.302592][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 392.281539][ T8] usb 6-1: config 0 has no interfaces? [ 392.287379][ T8] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 392.297473][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.445559][ T8] usb 6-1: config 0 descriptor?? [ 392.461393][ T9557] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1008'. [ 392.508492][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1008'. [ 392.567065][ T9557] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1008'. [ 392.611333][ T9557] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1008'. [ 392.955406][ T9572] input: syz0 as /devices/virtual/input/input17 [ 393.574769][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1010'. [ 395.086807][ T9598] overlay: filesystem on ./bus not supported as upperdir [ 395.140617][ T5890] usb 6-1: USB disconnect, device number 3 [ 395.662833][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.792704][ T1197] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 396.353229][ T1197] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.379822][ T1197] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 396.402315][ T1197] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.426170][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.468990][ T9605] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 396.500374][ T9623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1028'. [ 396.523076][ T1197] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.539415][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1028'. [ 396.612617][ T9623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1028'. [ 396.835204][ T9623] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1028'. [ 397.333390][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1031'. [ 397.478063][ T9633] input: syz0 as /devices/virtual/input/input18 [ 399.954532][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1039'. [ 400.000776][ T9647] netlink: 'syz.7.1039': attribute type 21 has an invalid length. [ 400.013120][ T9647] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.021378][ T9647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.029161][ T9647] IPv6: NLM_F_CREATE should be set when creating new route [ 400.036525][ T9647] IPv6: NLM_F_CREATE should be set when creating new route [ 400.043938][ T9647] IPv6: NLM_F_CREATE should be set when creating new route [ 401.085947][ T5838] usb 3-1: USB disconnect, device number 4 [ 401.362590][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 401.781643][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 401.814942][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.012055][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.022517][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.050802][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.870172][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.879479][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.185599][ T8] usb 4-1: can't set config #16, error -71 [ 404.213630][ T8] usb 4-1: USB disconnect, device number 6 [ 408.879639][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1068'. [ 410.348776][ T9735] loop2: detected capacity change from 0 to 32768 [ 412.164304][ T5889] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 412.258451][ T9776] netlink: 'syz.8.1082': attribute type 1 has an invalid length. [ 412.267377][ T9776] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1082'. [ 412.363093][ T5889] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 412.385071][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 412.401180][ T5889] usb 4-1: Product: syz [ 412.413316][ T5889] usb 4-1: Manufacturer: syz [ 412.424988][ T5889] usb 4-1: SerialNumber: syz [ 412.651917][ T5889] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 413.020933][ T9776] team0 (unregistering): Port device team_slave_0 removed [ 413.079378][ T5889] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 413.092961][ T5889] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 413.103712][ T9776] team0 (unregistering): Port device team_slave_1 removed [ 413.417629][ T5889] usb 4-1: USB disconnect, device number 7 [ 414.833347][ T9802] loop5: detected capacity change from 0 to 32768 [ 415.630159][ T9802] overlayfs: failed to resolve './file1': -2 [ 415.985303][ T9822] netlink: 'syz.6.1099': attribute type 1 has an invalid length. [ 416.009445][ T9822] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1099'. [ 416.532769][ T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 417.282729][ T25] usb 8-1: too many configurations: 151, using maximum allowed: 8 [ 417.674063][ T25] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 417.690882][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 417.771731][ T25] usb 8-1: Product: syz [ 417.801058][ T25] usb 8-1: Manufacturer: syz [ 417.892683][ T25] usb 8-1: SerialNumber: syz [ 417.901758][ T25] usb 8-1: config 0 descriptor?? [ 417.910905][ T25] ims_pcu 8-1:0.0: Zero length descriptor [ 417.917084][ T25] ims_pcu 8-1:0.0: probe with driver ims_pcu failed with error -22 [ 418.164510][ T25] usb 8-1: USB disconnect, device number 5 [ 418.330014][ T9822] team0 (unregistering): Port device team_slave_0 removed [ 418.355209][ T9822] team0 (unregistering): Port device team_slave_1 removed [ 419.860033][ T9860] loop6: detected capacity change from 0 to 32768 [ 419.936789][ T9860] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1109 (9860) [ 420.137307][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 420.182815][ T9860] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 420.193153][ T9860] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 420.201937][ T9860] BTRFS info (device loop6): using free-space-tree [ 420.498880][ T9887] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1115'. [ 421.184596][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 422.081021][ T9860] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 422.081608][ T9860] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 422.091939][ T9860] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 422.110472][ T9860] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 422.159123][ T9860] BTRFS error (device loop6): open_ctree failed [ 422.187082][ T5841] block nbd2: Receive control failed (result -32) [ 422.206545][ T9903] block nbd2: shutting down sockets [ 422.223117][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 422.264669][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.301388][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.322103][ T5889] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 422.338310][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.365162][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 422.382028][ T5889] usb 4-1: config 0 descriptor?? [ 422.575854][ T25] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 422.586884][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.624125][ T25] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.635368][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.669799][ T25] usb 8-1: SerialNumber: syz [ 422.829145][ T5889] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 422.837661][ T5889] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 422.874359][ T5889] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 422.881493][ T5889] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 422.918537][ T5889] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 422.937777][ T5889] appleir 0003:05AC:8241.0003: No inputs registered, leaving [ 423.008826][ T25] usb 8-1: 0:2 : does not exist [ 423.038943][ T25] usb 8-1: unit 255 not found! [ 423.092640][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 423.092662][ T29] audit: type=1326 audit(423.047:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 423.120496][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.164317][ T5889] appleir 0003:05AC:8241.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 423.181485][ T29] audit: type=1326 audit(423.057:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 423.203959][ T29] audit: type=1326 audit(423.127:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 423.225797][ T29] audit: type=1326 audit(423.127:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 423.225810][ T25] usb 8-1: USB disconnect, device number 6 [ 423.225849][ T29] audit: type=1326 audit(423.127:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9921 comm="syz.6.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 423.323050][ T5889] usb 4-1: USB disconnect, device number 8 [ 424.030700][ T9943] net_ratelimit: 10 callbacks suppressed [ 424.030721][ T9943] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.033345][ T5925] IPVS: starting estimator thread 0... [ 424.232690][ T9951] IPVS: using max 19 ests per chain, 45600 per kthread [ 424.249111][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 424.761577][ T9957] loop6: detected capacity change from 0 to 524287999 [ 424.773790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.783212][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.828627][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.866397][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.968120][ T11] loop: Write error at byte offset 1, length 4096. [ 424.975896][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 424.985360][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 424.995050][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.004241][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 425.039556][ T5978] Dev loop6: unable to read RDB block 8 [ 425.046045][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.055384][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 425.063424][ T5978] loop6: unable to read partition table [ 425.081089][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 425.169077][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.179007][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 425.580610][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.589887][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.648394][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 425.657675][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.666317][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.676119][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.686175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.710666][ T9957] ldm_validate_partition_table(): Disk read failed. [ 425.731349][ T5831] Bluetooth: hci6: command 0x0405 tx timeout [ 425.732632][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 425.743102][ T9957] Dev loop6: unable to read RDB block 0 [ 425.776571][ T9957] loop6: unable to read partition table [ 425.784990][ T9957] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 425.800545][ T5197] ldm_validate_partition_table(): Disk read failed. [ 425.816852][ T5197] Dev loop6: unable to read RDB block 0 [ 425.828027][ T5197] loop6: unable to read partition table [ 425.922674][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 425.929674][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.941211][ T25] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 425.954321][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 425.960970][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 425.970231][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.090063][ T25] usb 6-1: config 0 descriptor?? [ 426.645523][ T25] hid (null): invalid report_size 25453 [ 426.693094][ T25] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input20 [ 426.858711][ T25] input: HID 0458:5013 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input21 [ 426.876129][ T25] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.5-1/input0 [ 426.989925][ T25] usb 6-1: USB disconnect, device number 4 [ 428.622612][ T1197] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 428.886686][ T1197] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 428.915693][ T1197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.969623][ T1197] usb 3-1: config 0 has no interface number 0 [ 429.038465][ T1197] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=61.bd [ 429.058485][ T1197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.072541][ T1197] usb 3-1: Product: syz [ 429.076749][ T1197] usb 3-1: Manufacturer: syz [ 429.091626][ T1197] usb 3-1: SerialNumber: syz [ 429.122367][ T1197] usb 3-1: config 0 descriptor?? [ 429.144791][ T1197] usb 3-1: selecting invalid altsetting 3 [ 429.150750][ T1197] comedi comedi0: could not set alternate setting 3 in high speed [ 429.159085][ T1197] usbdux 3-1:0.24: driver 'usbdux' failed to auto-configure device. [ 429.251667][ T1197] usbdux 3-1:0.24: probe with driver usbdux failed with error -22 [ 429.569734][ T5890] usb 3-1: USB disconnect, device number 5 [ 430.024275][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 431.595214][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'. [ 432.531089][ T1197] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 432.731122][ T1197] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 433.040156][ T1197] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.048892][ T1197] usb 7-1: Product: syz [ 433.053180][ T1197] usb 7-1: Manufacturer: syz [ 433.057904][ T1197] usb 7-1: SerialNumber: syz [ 433.067735][ T1197] usb 7-1: config 0 descriptor?? [ 434.128458][ T1197] usb 7-1: Firmware version (0.0) predates our first public release. [ 434.143735][ T1197] usb 7-1: Please update to version 0.2 or newer [ 434.757405][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1198'. [ 435.231410][ T5925] usb 7-1: USB disconnect, device number 2 [ 435.560393][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 436.027477][T10146] vivid-007: disconnect [ 436.579857][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1212'. [ 438.435473][T10157] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1215'. [ 438.799391][T10145] vivid-007: reconnect [ 439.726758][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.521950][T10200] netlink: 16410 bytes leftover after parsing attributes in process `syz.7.1230'. [ 444.043459][ T5925] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 444.179230][T10233] loop6: detected capacity change from 0 to 32768 [ 444.413401][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.424499][T10233] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1243 (10233) [ 444.537304][T10233] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 444.598630][T10233] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 444.862862][T10233] BTRFS info (device loop6): using free-space-tree [ 445.266048][T10233] BTRFS info (device loop6): rebuilding free space tree [ 445.438565][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.448526][ T5925] usb 6-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 445.457834][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.478063][ T5925] usb 6-1: config 0 descriptor?? [ 445.646351][ T6205] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 445.796513][ T5925] usbhid 6-1:0.0: can't add hid device: -71 [ 445.802797][ T5925] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 445.839041][ T5925] usb 6-1: USB disconnect, device number 5 [ 446.842696][ T25] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 446.995187][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 447.013958][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.194790][ T25] usb 7-1: config 0 descriptor?? [ 447.217967][ T25] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 447.854995][T10319] loop3: detected capacity change from 0 to 32768 [ 447.891205][T10319] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1273 (10319) [ 447.981859][ T25] gspca_sn9c20x: Write register 1001 failed -71 [ 447.990958][ T25] gspca_sn9c20x: Device initialization failed [ 448.015714][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 448.025064][ T25] gspca_sn9c20x 7-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 448.034759][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 448.078885][ T25] usb 7-1: USB disconnect, device number 3 [ 448.285958][T10308] loop8: detected capacity change from 0 to 32768 [ 448.323837][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 448.330623][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 448.369307][T10308] overlayfs: failed to resolve './file1': -2 [ 448.537375][T10319] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 448.560553][T10319] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 448.572364][T10319] BTRFS info (device loop3): using free-space-tree [ 448.702619][T10325] ceph: No mds server is up or the cluster is laggy [ 448.864180][ T25] libceph: connect (1)[c::]:6789 error -101 [ 448.870306][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 449.213702][T10319] BTRFS info (device loop3): rebuilding free space tree [ 449.222829][ T1197] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 449.388454][ T1197] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 449.502855][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.512408][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.523731][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 449.689471][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.699291][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.711062][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 449.844044][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.872518][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.892505][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 449.904343][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.913432][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.934603][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 449.953058][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.993281][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.029389][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 450.043712][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.064145][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.082866][ T5925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 450.112867][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 450.191226][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.222893][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.234829][ T5826] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 450.245301][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 450.272699][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 450.282724][ T5925] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 450.302138][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.319811][ T1197] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 450.355810][ T5925] usb 7-1: config 0 descriptor?? [ 450.359128][ T1197] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 450.392088][ T1197] usb 8-1: config 0 interface 0 has no altsetting 0 [ 450.839491][ T1197] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 450.911799][ T1197] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 450.947464][ T1197] usb 8-1: Product: syz [ 450.951944][ T1197] usb 8-1: Manufacturer: syz [ 450.972648][ T1197] usb 8-1: SerialNumber: syz [ 451.016742][ T1197] usb 8-1: config 0 descriptor?? [ 451.018808][ T5925] glorious 0003:258A:0033.0005: unknown main item tag 0x1 [ 451.028919][ T5925] glorious 0003:258A:0033.0005: item fetching failed at offset 3/7 [ 451.049034][ T5925] glorious 0003:258A:0033.0005: probe with driver glorious failed with error -22 [ 451.068419][ T1197] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 451.148933][ T5838] usb 7-1: USB disconnect, device number 4 [ 451.275221][ T5841] Bluetooth: hci3: unexpected event for opcode 0x6605 [ 451.436371][ C1] usb 8-1: yurex_control_callback - control failed: -71 [ 451.455802][ T5889] usb 8-1: USB disconnect, device number 7 [ 451.471711][ T5889] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 452.905368][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 452.954981][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 453.282992][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 453.289194][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 453.615233][T10405] ceph: No mds server is up or the cluster is laggy [ 453.833844][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 453.840048][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 454.659339][T10409] loop8: detected capacity change from 0 to 32768 [ 454.740834][T10409] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1301 (10409) [ 454.937311][T10409] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 454.969625][T10409] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 454.997037][T10409] BTRFS info (device loop8): using free-space-tree [ 455.396132][T10409] BTRFS info (device loop8): rebuilding free space tree [ 455.538223][ T5841] Bluetooth: hci5: unexpected event for opcode 0x6605 [ 455.798878][ T7014] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 455.883758][T10453] overlayfs: failed to resolve './file1': -2 [ 456.453625][ T5838] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 456.705393][ T5838] usb 4-1: Using ep0 maxpacket: 8 [ 456.878442][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 456.982006][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 457.092977][ T25] libceph: connect (1)[c::]:6789 error -101 [ 457.099159][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 457.172616][ T5838] usb 4-1: config 252 has an invalid interface number: 217 but max is 0 [ 457.212088][ T5838] usb 4-1: config 252 has no interface number 0 [ 457.227695][ T5838] usb 4-1: config 252 interface 217 has no altsetting 0 [ 457.251855][ T5838] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 457.261260][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.274636][T10467] ceph: No mds server is up or the cluster is laggy [ 457.307712][ T5838] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 457.318544][ T5838] dvb-usb: bulk message failed: -22 (2/0) [ 457.324965][ T5838] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 457.347348][ T5838] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 457.357923][ T5838] usb 4-1: media controller created [ 457.364547][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.395108][ T5838] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 457.448892][ T5838] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 457.584201][ T29] audit: type=1326 audit(457.557:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10479 comm="syz.6.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 457.633249][ T5925] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 457.642659][ T5838] rc_core: IR keymap rc-dtt200u not found [ 457.645785][ T5841] Bluetooth: hci3: unexpected event for opcode 0x6605 [ 457.651142][ T5838] Registered IR keymap rc-empty [ 457.798163][ T29] audit: type=1326 audit(457.567:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10479 comm="syz.6.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63eb85d29 code=0x7ffc0000 [ 457.891743][ T5838] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 457.904944][ T5838] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input22 [ 457.951928][ T5838] dvb-usb: schedule remote query interval to 300 msecs. [ 457.972180][ T5838] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 458.048679][ T5925] usb 8-1: Using ep0 maxpacket: 16 [ 458.084951][ T5925] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 458.225446][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.256039][ T5925] usb 8-1: config 0 descriptor?? [ 458.280633][T10497] netlink: 'syz.5.1324': attribute type 1 has an invalid length. [ 458.289942][T10497] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1324'. [ 458.302527][ T5838] usb 4-1: USB disconnect, device number 9 [ 458.311388][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 458.317501][ T5906] dvb-usb: error -22 while querying for an remote control event. [ 458.366843][ T5925] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 458.411535][ T5838] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 458.980081][T10514] fuse: Bad value for 'fd' [ 459.244213][ T5838] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 459.782910][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 459.812578][ T5838] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 459.821730][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.893566][ T5838] usb 4-1: config 0 descriptor?? [ 459.946861][ T5838] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 459.950165][T10500] loop6: detected capacity change from 0 to 32768 [ 460.078842][T10500] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1325 (10500) [ 460.242594][ T5182] bcm5974 4-1:0.0: could not read from device [ 460.261068][ T5182] bcm5974 4-1:0.0: could not read from device [ 460.342647][ T1197] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 460.366730][ T5838] usb 4-1: USB disconnect, device number 10 [ 460.456651][ T5182] bcm5974 4-1:0.0: could not read from device [ 460.532997][T10500] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 460.562688][ T1197] usb 9-1: Using ep0 maxpacket: 8 [ 460.589696][ T1197] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 460.609743][T10500] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 460.635890][ T1197] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.656307][T10500] BTRFS info (device loop6): using free-space-tree [ 460.899078][ T1197] usb 9-1: Product: syz [ 460.903894][ T1197] usb 9-1: Manufacturer: syz [ 460.908527][ T1197] usb 9-1: SerialNumber: syz [ 460.921090][ T1197] usb 9-1: config 0 descriptor?? [ 461.035451][T10500] BTRFS info (device loop6): rebuilding free space tree [ 461.102628][ T5925] gspca_sonixj: reg_w1 err -71 [ 461.107506][ T5925] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 461.123325][ T5925] usb 8-1: USB disconnect, device number 8 [ 461.238393][ T1197] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 461.355873][ T6205] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 464.015637][ T1197] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 464.285757][ T1197] usb 9-1: USB disconnect, device number 2 [ 464.547221][T10591] bridge0: port 4(vlan2) entered blocking state [ 464.579669][T10591] bridge0: port 4(vlan2) entered disabled state [ 464.711451][T10591] vlan2: entered allmulticast mode [ 464.728984][T10591] vlan2: left allmulticast mode [ 466.323913][ T5925] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 466.482532][ T5925] usb 9-1: Using ep0 maxpacket: 32 [ 466.508926][ T5925] usb 9-1: unable to get BOS descriptor or descriptor too short [ 466.552689][ T5925] usb 9-1: no configurations [ 466.557352][ T5925] usb 9-1: can't read configurations, error -22 [ 468.802088][ T1197] IPVS: starting estimator thread 0... [ 468.902948][T10665] IPVS: using max 19 ests per chain, 45600 per kthread [ 469.119028][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1383'. [ 469.706622][T10690] overlayfs: failed to resolve './file1': -2 [ 471.490413][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1400'. [ 472.955183][T10740] overlayfs: failed to resolve './file1': -2 [ 473.282633][ T5925] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 473.444841][ T5925] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 473.488085][ T5925] usb 7-1: config 0 has no interface number 0 [ 473.512822][ T5925] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 473.524273][ T5925] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 473.538020][ T5925] usb 7-1: config 0 interface 255 has no altsetting 0 [ 473.545527][ T5925] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 473.554838][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.565355][ T5925] usb 7-1: config 0 descriptor?? [ 473.573634][ T5925] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 473.796443][ T5925] usb 7-1: USB disconnect, device number 5 [ 473.862264][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1415'. [ 474.234194][T10764] netlink: 16386 bytes leftover after parsing attributes in process `syz.7.1417'. [ 474.524822][T10774] overlayfs: failed to resolve './file1': -2 [ 475.236473][T10799] netlink: 16386 bytes leftover after parsing attributes in process `syz.5.1434'. [ 475.654546][ T5838] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 476.625709][ T5838] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 476.663043][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.213692][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.224757][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.234869][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.243979][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.269038][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.305783][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.345827][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.373242][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.384573][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1443'. [ 477.395960][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.422738][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.440062][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1443'. [ 477.461184][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.483837][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.509066][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.520507][ T5906] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 477.562586][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.594285][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.627043][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.677586][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.692589][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 477.719785][ T5906] usb 7-1: config 252 has an invalid interface number: 217 but max is 0 [ 477.903267][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.912934][ T5906] usb 7-1: config 252 has no interface number 0 [ 477.919270][ T5906] usb 7-1: config 252 interface 217 has no altsetting 0 [ 477.926530][ T5838] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.937812][ T5906] usb 7-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 477.947159][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.954884][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.967709][ T5838] usb 4-1: unable to read config index 7 descriptor/all [ 478.975095][ T5838] usb 4-1: can't read configurations, error -71 [ 478.986241][ T5906] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 478.996089][ T5906] dvb-usb: bulk message failed: -22 (2/0) [ 479.001928][ T5906] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 479.070513][ T5906] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 479.080848][ T5906] usb 7-1: media controller created [ 479.087504][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 479.244766][ T5906] usb 7-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 479.255958][ T5906] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 480.797615][ T5906] rc_core: IR keymap rc-dtt200u not found [ 480.821480][ T5906] Registered IR keymap rc-empty [ 480.850721][ T5906] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 480.909074][ T5906] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input24 [ 481.012773][ T5906] dvb-usb: schedule remote query interval to 300 msecs. [ 481.020292][ T5906] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 481.079193][ T5906] usb 7-1: USB disconnect, device number 6 [ 481.308330][ T5906] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 482.949710][T10901] vivid-007: disconnect [ 483.696417][T10895] vivid-007: reconnect [ 484.402035][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1478'. [ 484.552628][T10921] fuse: Bad value for 'fd' [ 484.993563][ T5890] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 485.802798][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 485.823074][ T5890] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 485.842582][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.883644][ T5890] usb 4-1: config 0 descriptor?? [ 485.932283][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 486.425996][ T5182] bcm5974 4-1:0.0: could not read from device [ 486.494441][ T5890] usb 4-1: USB disconnect, device number 13 [ 486.558373][T10944] vivid-007: disconnect [ 487.445229][T10943] vivid-007: reconnect [ 489.372678][ T5890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 489.588639][ T5890] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 489.604362][ T5890] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 489.642635][ T5890] usb 7-1: can't read configurations, error -61 [ 489.792643][ T5890] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 490.003905][ T5890] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 490.114369][T10988] fuse: Bad value for 'fd' [ 490.172702][ T5890] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 490.180517][ T5890] usb 7-1: can't read configurations, error -61 [ 490.188883][ T5890] usb usb7-port1: attempt power cycle [ 490.422576][ T5889] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 490.471825][T10997] vivid-007: disconnect [ 490.552954][ T5890] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 490.621906][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 490.631364][ T29] audit: type=1326 audit(490.557:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.5.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1eb385d29 code=0x7ffc0000 [ 490.662340][ T29] audit: type=1326 audit(490.557:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.5.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1eb385d29 code=0x7ffc0000 [ 490.679362][ T29] audit: type=1326 audit(490.647:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.5.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fe1eb385d29 code=0x7ffc0000 [ 490.679460][ T29] audit: type=1326 audit(490.647:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.5.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1eb385d29 code=0x7ffc0000 [ 490.680723][ T5890] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 490.714025][ T5889] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 490.802392][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.859256][ T5889] usb 4-1: config 0 descriptor?? [ 490.943162][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 491.011748][ T5890] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 491.023784][ T5890] usb 7-1: can't read configurations, error -61 [ 491.242406][ T5182] bcm5974 4-1:0.0: could not read from device [ 491.253657][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 491.274079][ T5182] bcm5974 4-1:0.0: could not read from device [ 491.287073][T10995] vivid-007: reconnect [ 491.494507][ T5838] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 491.519448][ T5838] usb 6-1: config 0 has no interface number 0 [ 491.559171][ T5838] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 491.581470][ T5890] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 491.593955][ T5889] usb 4-1: USB disconnect, device number 14 [ 491.603644][ T5890] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 491.613383][ T5890] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 491.620229][T11014] input: syz0 as /devices/virtual/input/input27 [ 491.621038][ T5890] usb 7-1: can't read configurations, error -61 [ 491.621571][ T5890] usb usb7-port1: unable to enumerate USB device [ 491.628730][ T5838] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 491.970358][T11014] input: failed to attach handler leds to device input27, error: -6 [ 492.317743][ T5838] usb 6-1: config 0 interface 255 has no altsetting 0 [ 492.324689][ T5838] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 492.333924][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.348036][ T5838] usb 6-1: config 0 descriptor?? [ 492.354950][ T5838] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 492.557890][ T5906] usb 6-1: USB disconnect, device number 6 [ 493.585820][ T5838] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 493.756207][ T5838] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 494.300749][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.322192][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.385706][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.416839][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.441927][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.462998][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.480914][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.491216][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.502236][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.514291][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.523967][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.535249][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.551365][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.560479][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.571480][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.607189][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.616352][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.627684][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.646873][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.658140][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.669212][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.782625][ T5889] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 494.868085][T11061] input: syz0 as /devices/virtual/input/input28 [ 494.924421][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.933845][ T5838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 494.939273][T11061] input: failed to attach handler leds to device input28, error: -6 [ 494.944973][ T5838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.996159][ T5889] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 495.014191][ T5838] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 495.031234][ T5838] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 495.050566][ T5838] usb 7-1: Product: syz [ 495.070073][ T5838] usb 7-1: Manufacturer: syz [ 495.114469][ T5838] usb 7-1: SerialNumber: syz [ 495.148339][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 495.150813][ T5838] usb 7-1: config 0 descriptor?? [ 495.156436][ T5889] usb 4-1: can't read configurations, error -61 [ 495.235567][ T5838] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 495.372595][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 495.523358][ T5889] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 495.534845][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 495.544258][ T5889] usb 4-1: can't read configurations, error -61 [ 495.553088][ T5889] usb usb4-port1: attempt power cycle [ 495.913306][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 496.014618][ T5889] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 496.542736][ C0] usb 7-1: yurex_control_callback - control failed: -2 [ 496.553425][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 496.563316][ T5889] usb 4-1: can't read configurations, error -61 [ 496.745570][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 496.828195][ T5889] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 496.876223][T11082] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 497.277970][ T5889] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 497.346032][T11088] syz_tun: left allmulticast mode [ 497.351226][T11088] syz_tun: left promiscuous mode [ 497.356680][T11088] bridge0: port 3(syz_tun) entered disabled state [ 497.364397][ T5906] usb 7-1: USB disconnect, device number 11 [ 497.393357][ T5889] usb 4-1: can't read configurations, error -61 [ 497.401275][ T5906] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 497.422079][ T5889] usb usb4-port1: unable to enumerate USB device [ 497.440511][T11088] bridge_slave_1: left allmulticast mode [ 497.447229][T11088] bridge_slave_1: left promiscuous mode [ 497.456136][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.503384][T11088] bridge_slave_0: left allmulticast mode [ 497.515751][T11088] bridge_slave_0: left promiscuous mode [ 497.526358][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.699191][T11098] fuse: Bad value for 'fd' [ 497.916208][T11100] batadv0: entered promiscuous mode [ 498.106378][T11108] input: syz0 as /devices/virtual/input/input29 [ 498.112822][T11108] input: failed to attach handler leds to device input29, error: -6 [ 498.887668][T11120] ceph: No mds server is up or the cluster is laggy [ 498.901258][ T25] libceph: connect (1)[c::]:6789 error -101 [ 498.916227][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 500.002820][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 500.068672][T11148] input: syz0 as /devices/virtual/input/input30 [ 500.077895][T11148] input: failed to attach handler leds to device input30, error: -6 [ 500.159672][ T25] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 500.168361][ T25] usb 3-1: config 0 has no interface number 0 [ 500.194883][ T25] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 500.245254][ T25] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 500.281331][ T25] usb 3-1: config 0 interface 255 has no altsetting 0 [ 500.304813][ T25] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 500.330278][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.378682][ T25] usb 3-1: config 0 descriptor?? [ 500.392224][ T25] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 500.739674][ T25] usb 3-1: USB disconnect, device number 6 [ 501.437453][T11166] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 501.458300][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.139609][T11187] input: syz0 as /devices/virtual/input/input31 [ 502.172858][T11187] input: failed to attach handler leds to device input31, error: -6 [ 502.952818][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 503.142659][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 503.174443][ T5890] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.220060][T11207] ceph: No mds server is up or the cluster is laggy [ 503.590029][ T5890] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 503.618164][ T25] libceph: connect (1)[c::]:6789 error -101 [ 503.624334][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 503.635585][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 503.645146][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.653411][ T5890] usb 3-1: Product: syz [ 503.657594][ T5890] usb 3-1: Manufacturer: syz [ 503.662212][ T5890] usb 3-1: SerialNumber: syz [ 504.012710][ T5890] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 504.139699][T11223] syz_tun: left allmulticast mode [ 504.150870][T11223] syz_tun: left promiscuous mode [ 504.176494][T11223] bridge0: port 3(syz_tun) entered disabled state [ 504.227967][T11223] bridge_slave_1: left allmulticast mode [ 504.241878][ T8] usb 3-1: USB disconnect, device number 7 [ 504.247796][T11223] bridge_slave_1: left promiscuous mode [ 504.254379][ T5906] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 504.293001][T11223] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.313944][ T8] usblp0: removed [ 504.349813][T11223] bridge_slave_0: left allmulticast mode [ 504.357545][T11223] bridge_slave_0: left promiscuous mode [ 504.372606][T11223] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.412888][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 504.432933][ T5906] usb 7-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=73.af [ 504.453623][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.474800][ T5906] usb 7-1: Product: syz [ 504.489510][ T5906] usb 7-1: Manufacturer: syz [ 504.558309][ T5906] usb 7-1: SerialNumber: syz [ 504.636284][ T5906] usb 7-1: config 0 descriptor?? [ 504.659842][ T5906] HFC-S_USB 7-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 505.465646][T11234] tty tty36: ldisc open failed (-12), clearing slot 35 [ 505.507532][ T25] usb 7-1: USB disconnect, device number 12 [ 507.528554][ T5890] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 507.536301][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 507.585366][T11254] ceph: No mds server is up or the cluster is laggy [ 507.595230][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 507.601269][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 507.751308][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 507.771097][ T25] usb 6-1: config 129 has an invalid interface number: 32 but max is 2 [ 507.915440][ T5890] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 507.940473][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.949729][ T25] usb 6-1: config 129 has an invalid interface number: 32 but max is 2 [ 508.004063][ T5890] usb 8-1: Product: syz [ 508.008297][ T5890] usb 8-1: Manufacturer: syz [ 508.013363][ T25] usb 6-1: config 129 has an invalid interface number: 235 but max is 2 [ 508.135297][ T5890] usb 8-1: SerialNumber: syz [ 508.142756][ T5831] Bluetooth: hci6: command 0x0405 tx timeout [ 508.623737][ T25] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 3 [ 508.633044][ T25] usb 6-1: config 129 has no interface number 0 [ 508.639716][ T25] usb 6-1: config 129 has no interface number 1 [ 508.646090][ T25] usb 6-1: config 129 interface 32 has no altsetting 0 [ 508.653481][ T25] usb 6-1: config 129 interface 32 has no altsetting 1 [ 508.663227][ T25] usb 6-1: config 129 interface 235 has no altsetting 0 [ 508.846762][ T5890] usb 8-1: config 0 descriptor?? [ 508.868650][ T5890] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 508.881916][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 508.892121][ T25] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=74.d5 [ 508.901798][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.910132][ T25] usb 6-1: Product: syz [ 508.914780][ T25] usb 6-1: Manufacturer: syz [ 508.919395][ T25] usb 6-1: SerialNumber: syz [ 508.925478][ T5890] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 508.937249][ T5890] usb 8-1: media controller created [ 508.964196][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.376720][ T5890] DVB: Unable to find symbol mt352_attach() [ 509.619931][ T25] usb 6-1: USB disconnect, device number 7 [ 509.667612][ T5890] DVB: Unable to find symbol nxt6000_attach() [ 509.675059][ T5890] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 509.698327][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 510.006669][ T5890] dvb-usb: schedule remote query interval to 1000 msecs. [ 510.021882][ T5890] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 510.134654][ T5890] dvb-usb: bulk message failed: -22 (7/0) [ 510.145452][ T5890] dvb-usb: bulk message failed: -22 (7/0) [ 510.228282][ T5890] usb 8-1: USB disconnect, device number 9 [ 511.399960][ T5890] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 511.772325][T11315] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1617'. [ 511.821513][T11311] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1617'. [ 515.612664][ T5925] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 515.772609][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 515.795249][ T5925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 515.809411][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.841012][ T5925] usb 4-1: Product: syz [ 515.892617][ T5925] usb 4-1: Manufacturer: syz [ 515.912612][ T5925] usb 4-1: SerialNumber: syz [ 516.081936][ T5925] usb 4-1: config 0 descriptor?? [ 516.363396][ T5925] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 516.878392][T11376] : renamed from bond0 (while UP) [ 516.917760][T11399] syz_tun: left allmulticast mode [ 516.927889][T11399] syz_tun: left promiscuous mode [ 516.948487][T11399] bridge0: port 3(syz_tun) entered disabled state [ 517.006532][T11399] bridge_slave_1: left allmulticast mode [ 517.013254][T11399] bridge_slave_1: left promiscuous mode [ 517.037755][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1649'. [ 517.042925][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.095027][T11399] bridge_slave_0: left allmulticast mode [ 517.103360][T11399] bridge_slave_0: left promiscuous mode [ 517.132079][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.389832][T11407] binder: 11406:11407 ioctl 4018620d 0 returned -22 [ 517.399802][T11407] binder: 11406:11407 ioctl c0306201 20000540 returned -22 [ 518.218669][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1661'. [ 518.366253][T11430] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1661'. [ 518.448204][ T5925] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 518.467932][ T5925] usb 4-1: USB disconnect, device number 19 [ 518.623260][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1663'. [ 518.653306][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1663'. [ 519.196678][T11459] ptrace attach of "./syz-executor exec"[11461] was attempted by "./syz-executor exec"[11459] [ 519.252702][ T5925] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 519.402935][ T5906] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 519.434233][ T5925] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 519.442826][ T5925] usb 7-1: config 0 has no interface number 0 [ 519.461518][ T5925] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 519.496541][ T5925] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 519.536962][ T5925] usb 7-1: config 0 interface 255 has no altsetting 0 [ 519.553538][ T5925] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 519.578346][ T5906] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 519.598516][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.616899][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.636435][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.649937][ T5925] usb 7-1: config 0 descriptor?? [ 519.667336][ T5925] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 519.675504][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 519.692224][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.708345][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.742544][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 519.774506][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.802540][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.864221][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 519.877183][ T5925] usb 7-1: USB disconnect, device number 13 [ 519.916504][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 519.938210][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 519.992816][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 520.019121][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 520.032657][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 520.052688][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 520.067057][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 520.626212][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 520.638458][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 520.647371][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 520.705543][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 520.822606][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 520.855415][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 520.872877][ T5906] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 520.886322][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 520.901100][ T5906] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 520.910859][ T5906] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 520.921328][ T5906] usb 3-1: Product: syz [ 520.925860][ T5906] usb 3-1: Manufacturer: syz [ 520.930475][ T5906] usb 3-1: SerialNumber: syz [ 520.938612][ T5906] usb 3-1: config 0 descriptor?? [ 520.990746][ T5906] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 521.469298][ T5906] usb 3-1: USB disconnect, device number 8 [ 521.522694][ T5906] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 523.367636][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 523.388994][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 525.035868][T11547] fuse: Bad value for 'fd' [ 525.353785][ T5889] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 525.514506][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 525.528989][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 525.573506][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.669804][ T5889] usb 3-1: config 0 descriptor?? [ 525.826479][ T5889] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 526.171530][ T5182] bcm5974 3-1:0.0: could not read from device [ 527.051606][ T8418] bcm5974 3-1:0.0: could not read from device [ 527.215997][ T5890] usb 3-1: USB disconnect, device number 9 [ 527.307412][ T5182] bcm5974 3-1:0.0: could not read from device [ 527.736368][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1719'. [ 527.780628][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1719'. [ 528.562776][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 529.445994][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 529.500814][ T5889] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 529.531444][ T5889] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 529.577226][ T5889] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.797410][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.755760][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 530.889737][ T5889] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 531.074402][ T6226] udevd[6226]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.156137][T11622] fuse: Bad value for 'fd' [ 531.582620][ T5906] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 531.765200][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 531.782755][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 531.792219][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.822016][ T5906] usb 6-1: config 0 descriptor?? [ 531.864651][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input34 [ 532.093944][ T5182] bcm5974 6-1:0.0: could not read from device [ 532.152593][ T5925] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 532.228802][ T5182] bcm5974 6-1:0.0: could not read from device [ 532.253955][ T5182] bcm5974 6-1:0.0: could not read from device [ 532.264053][ T5906] usb 6-1: USB disconnect, device number 8 [ 532.382682][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 532.409944][ T5925] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 532.459984][ T5925] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 532.480778][ T5925] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 532.492029][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 532.515817][ T5925] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 532.550682][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 532.587900][ T5925] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 532.656290][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.727034][ T5925] usb 7-1: config 0 descriptor?? [ 532.983868][ T5925] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 533.342787][ T5925] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 533.472153][ T5838] usb 7-1: USB disconnect, device number 14 [ 533.515378][ T25] usb 4-1: USB disconnect, device number 20 [ 533.557454][ T5838] usblp0: removed [ 533.618760][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.659743][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.704655][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 533.726310][ T5925] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 533.766004][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 533.766043][ T5925] usb 3-1: SerialNumber: syz [ 533.807687][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 534.009310][ T5925] usb 3-1: 0:2 : does not exist [ 534.048093][ T5925] usb 3-1: USB disconnect, device number 10 [ 534.511857][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.513004][T11674] fuse: Bad value for 'fd' [ 535.784594][ T5925] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 535.852643][ T5906] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 535.860426][ T5838] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 535.943919][ T5925] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 535.997626][ T5925] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 536.007177][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 536.015681][ T5925] usb 7-1: Product: syz [ 536.019976][ T5925] usb 7-1: Manufacturer: syz [ 536.024721][ T5925] usb 7-1: SerialNumber: syz [ 536.031747][ T5925] usb 7-1: config 0 descriptor?? [ 536.038209][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 536.051303][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 536.072650][ T5838] usb 6-1: Using ep0 maxpacket: 16 [ 536.082153][ T5838] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.096310][ T5838] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.109931][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.120293][ T5838] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.129880][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.138057][ T5838] usb 6-1: Product: syz [ 536.151249][ T5906] usb 3-1: config 0 descriptor?? [ 536.156435][ T5838] usb 6-1: Manufacturer: syz [ 536.161242][ T5838] usb 6-1: SerialNumber: syz [ 536.171936][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 536.412646][ T25] usb 7-1: USB disconnect, device number 15 [ 536.640102][ T5182] bcm5974 3-1:0.0: could not read from device [ 536.646751][ T5906] usb 3-1: USB disconnect, device number 11 [ 536.723822][ T8419] bcm5974 3-1:0.0: could not read from device [ 536.837768][ T5838] usb 6-1: cannot find UAC_HEADER [ 536.857430][ T5838] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 536.896133][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.068639][ T5906] usb 6-1: USB disconnect, device number 9 [ 537.110232][T11698] syz_tun: left allmulticast mode [ 537.139451][T11698] syz_tun: left promiscuous mode [ 537.144737][T11700] fuse: Bad value for 'user_id' [ 537.151365][T11698] bridge0: port 3(syz_tun) entered disabled state [ 537.157518][T11700] fuse: Bad value for 'user_id' [ 537.227565][T11702] netlink: 'syz.3.1762': attribute type 1 has an invalid length. [ 537.228166][T11698] bridge_slave_1: left allmulticast mode [ 537.241256][T11698] bridge_slave_1: left promiscuous mode [ 537.259901][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.276292][T11702] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1762'. [ 537.317082][T11698] bridge_slave_0: left allmulticast mode [ 537.332848][T11698] bridge_slave_0: left promiscuous mode [ 537.344110][T11706] overlayfs: missing 'workdir' [ 537.352689][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.288576][T11707] team0 (unregistering): Port device team_slave_0 removed [ 538.317614][T11707] team0 (unregistering): Port device team_slave_1 removed [ 538.668511][T11737] : renamed from bond0 (while UP) [ 539.162630][ T5971] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 539.503669][ T5971] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.509023][T11757] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 539.524580][T11757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 539.552625][ T5971] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.601314][ T5971] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.637418][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.809631][T11743] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 539.822971][ T5971] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.449301][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 540.612755][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 540.894962][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.118792][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.259015][T11777] binder: BINDER_SET_CONTEXT_MGR already set [ 541.282766][T11777] binder: 11776:11777 ioctl 4018620d 20000040 returned -16 [ 541.318126][T11777] binder: 11776:11777 ioctl c0306201 20000540 returned -22 [ 541.372876][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.409057][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 541.538770][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 541.599531][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.656601][T11783] pim6reg1: entered promiscuous mode [ 541.673018][T11783] pim6reg1: entered allmulticast mode [ 541.693177][ T25] usb 3-1: config 0 descriptor?? [ 542.145805][ T25] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 542.155430][ T25] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 542.162354][ T25] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 542.169960][ T25] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 542.177511][ T25] ntrig 0003:1B96:000A.0006: unknown main item tag 0x0 [ 542.216897][ T25] ntrig 0003:1B96:000A.0006: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 542.982804][ T25] usb 3-1: USB disconnect, device number 12 [ 543.403838][T11797] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 543.479168][T11797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 544.566800][ T5906] usb 4-1: USB disconnect, device number 21 [ 544.692780][ T5838] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 544.901519][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short [ 544.938336][ T5838] usb 6-1: config 129 has an invalid interface number: 32 but max is 1 [ 545.000605][ T5838] usb 6-1: config 129 has an invalid interface number: 32 but max is 1 [ 545.050099][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 545.060798][ T5838] usb 6-1: config 129 has 1 interface, different from the descriptor's value: 2 [ 545.093781][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 545.127639][ T5838] usb 6-1: config 129 has no interface number 0 [ 545.134410][ T5838] usb 6-1: config 129 interface 32 has no altsetting 0 [ 545.141519][ T5838] usb 6-1: config 129 interface 32 has no altsetting 1 [ 545.179677][ T5838] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=74.d5 [ 545.196558][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.209931][ T5838] usb 6-1: Product: syz [ 545.214724][ T5838] usb 6-1: Manufacturer: syz [ 545.219632][ T5838] usb 6-1: SerialNumber: syz [ 545.357039][T11828] vivid-007: disconnect [ 545.362146][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1809'. [ 545.477321][T11679] libceph: connect (1)[c::]:6789 error -101 [ 545.483584][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 545.643386][ T5838] usb 6-1: USB disconnect, device number 10 [ 545.703867][T11836] input: syz0 as /devices/virtual/input/input36 [ 545.710349][T11836] input: failed to attach handler leds to device input36, error: -6 [ 545.875427][T11816] ceph: No mds server is up or the cluster is laggy [ 546.219815][T11827] vivid-007: reconnect [ 547.042914][ T5838] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 547.326413][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 547.335154][ T5838] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 547.343692][ T5838] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 547.352429][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 547.362021][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 547.372115][ T5838] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 547.382062][ T5838] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 547.395228][ T5838] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 547.404772][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.416444][ T5838] usb 7-1: config 0 descriptor?? [ 547.644350][ T5838] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 547.864512][ T5838] usb 7-1: USB disconnect, device number 16 [ 547.895977][ T5838] usblp0: removed [ 548.056159][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1823'. [ 548.282152][T11854] loop2: detected capacity change from 0 to 32768 [ 548.331431][T11854] overlayfs: failed to resolve './file1': -2 [ 548.526500][T11871] input: syz0 as /devices/virtual/input/input37 [ 548.548340][T11871] input: failed to attach handler leds to device input37, error: -6 [ 548.577447][T11873] vivid-007: disconnect [ 548.693376][ T25] libceph: connect (1)[c::]:6789 error -101 [ 548.699603][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 549.047348][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 549.093237][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 549.381223][T11872] vivid-007: reconnect [ 549.412866][ T5838] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 549.448759][T11876] ceph: No mds server is up or the cluster is laggy [ 549.702057][ T5838] usb 4-1: device descriptor read/64, error -71 [ 550.148610][ T5838] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 551.072598][ T5906] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 551.081007][ T5838] usb 4-1: device descriptor read/64, error -71 [ 551.194596][ T5838] usb usb4-port1: attempt power cycle [ 551.232566][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 551.250264][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.262151][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.294927][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 551.314384][ T5906] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 551.337301][ T5906] usb 6-1: Product: syz [ 551.341529][ T5906] usb 6-1: Manufacturer: syz [ 551.360375][ T5906] hub 6-1:4.0: USB hub found [ 551.552758][ T5838] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 551.577286][ T5906] hub 6-1:4.0: 2 ports detected [ 551.615402][ T5838] usb 4-1: device descriptor read/8, error -71 [ 551.778389][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.812564][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.868497][ T5838] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 551.976121][ T5838] usb 4-1: device descriptor read/8, error -71 [ 552.033135][T11938] vivid-007: disconnect [ 552.084411][ T5838] usb usb4-port1: unable to enumerate USB device [ 552.308105][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 552.315672][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 552.603570][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 552.611767][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 552.619069][ T5906] hub 6-1:4.0: hub_hub_status failed (err = -32) [ 552.648620][ T5906] hub 6-1:4.0: config failed, can't get hub status (err -32) [ 552.851370][ T5906] usb 6-1: USB disconnect, device number 11 [ 552.918042][T11937] vivid-007: reconnect [ 553.345162][T11941] ceph: No mds server is up or the cluster is laggy [ 553.482946][T11679] libceph: connect (1)[c::]:6789 error -101 [ 553.489055][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 553.949150][ T5838] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 555.038562][ T5838] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.052637][ T5838] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 555.212185][ T5838] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.312544][ T5838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.493676][T11956] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 556.651358][ T5838] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.754129][T11983] vivid-007: disconnect [ 556.880243][ T5838] usb 9-1: USB disconnect, device number 5 [ 558.876699][T11980] vivid-007: reconnect [ 558.946717][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 558.952995][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 559.127830][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.236259][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 559.242374][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 559.255844][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 560.020611][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 560.083773][T11999] ceph: No mds server is up or the cluster is laggy [ 560.103143][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 561.102924][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 563.264467][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 563.887947][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.897326][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 563.955168][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 563.993006][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.217518][ T25] usb 4-1: can't set config #27, error -71 [ 564.264653][T12066] syz_tun: left allmulticast mode [ 564.270043][T12066] syz_tun: left promiscuous mode [ 564.275759][T12066] bridge0: port 3(syz_tun) entered disabled state [ 564.309558][ T25] usb 4-1: USB disconnect, device number 26 [ 564.536144][T11679] libceph: connect (1)[c::]:6789 error -101 [ 564.546008][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 564.613311][T12066] bridge_slave_1: left allmulticast mode [ 564.621163][T12066] bridge_slave_1: left promiscuous mode [ 564.692828][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.528828][T11679] libceph: connect (1)[c::]:6789 error -101 [ 565.535152][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 565.557063][T12074] ceph: No mds server is up or the cluster is laggy [ 565.586400][T12066] bridge_slave_0: left allmulticast mode [ 565.594610][T12066] bridge_slave_0: left promiscuous mode [ 565.600767][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.234193][T12097] Unknown status report in ack skb [ 566.277573][T12096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1902'. [ 568.783720][T11679] libceph: connect (1)[c::]:6789 error -101 [ 568.789835][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 569.089223][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 569.145484][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 569.484887][T12120] ceph: No mds server is up or the cluster is laggy [ 569.522726][ T5838] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 569.642649][ T5906] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 569.793239][ T5838] usb 8-1: no configurations [ 569.798019][ T5838] usb 8-1: can't read configurations, error -22 [ 569.843290][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 569.856653][ T5906] usb 7-1: config 0 has too many interfaces: 42, using maximum allowed: 32 [ 569.868563][ T5906] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 42 [ 570.023015][ T5838] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 570.031000][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.287555][ T5838] usb 8-1: no configurations [ 570.305838][ T5838] usb 8-1: can't read configurations, error -22 [ 570.362540][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 570.387210][ T5838] usb usb8-port1: attempt power cycle [ 570.417426][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 570.451094][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 570.461074][T12148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1922'. [ 570.478367][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1921'. [ 570.484810][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.733815][ T5906] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57 [ 570.743098][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.776376][ T5906] usb 7-1: config 0 descriptor?? [ 570.787737][ T5906] kobil_sct 7-1:0.0: KOBIL USB smart card terminal converter detected [ 570.812913][ T5838] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 570.821530][ T5906] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 570.860579][ T5838] usb 8-1: no configurations [ 570.867137][ T5838] usb 8-1: can't read configurations, error -22 [ 570.883652][ T5925] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 571.012667][ T5889] usb 7-1: USB disconnect, device number 17 [ 571.012667][ T5838] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 571.759476][ T5889] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 571.780205][ T5889] kobil_sct 7-1:0.0: device disconnected [ 571.903353][ T5838] usb 8-1: no configurations [ 571.908152][ T5838] usb 8-1: can't read configurations, error -22 [ 571.916130][ T5838] usb usb8-port1: unable to enumerate USB device [ 571.923333][ T5925] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 571.932031][ T5925] usb 9-1: config 0 has no interface number 0 [ 571.938472][ T5925] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 571.951766][ T5925] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 571.988718][ T5925] usb 9-1: config 0 interface 255 has no altsetting 0 [ 572.032792][ T5925] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 572.057630][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.085742][ T5925] usb 9-1: config 0 descriptor?? [ 572.094638][ T5925] ums-realtek 9-1:0.255: USB Mass Storage device detected [ 572.453010][ T5890] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 573.125341][T11679] usb 9-1: USB disconnect, device number 6 [ 573.490803][T11679] libceph: connect (1)[c::]:6789 error -101 [ 573.501702][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 573.707642][ T5890] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.719178][ T5890] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 573.740399][ T5890] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 573.752155][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.883772][T12173] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 573.895132][ T5890] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 573.933934][T11679] libceph: connect (1)[c::]:6789 error -101 [ 573.940059][T11679] libceph: mon0 (1)[c::]:6789 connect error [ 574.043496][ T5889] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 574.140626][T12183] ceph: No mds server is up or the cluster is laggy [ 574.232716][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 574.246701][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.300128][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.433212][ T5889] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.469791][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.485298][ T5889] usb 7-1: config 0 descriptor?? [ 574.501389][ T5889] hub 7-1:0.0: bad descriptor, ignoring hub [ 574.540759][ T5889] hub 7-1:0.0: probe with driver hub failed with error -5 [ 574.566556][ T5889] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 574.997359][T12214] fuse: Bad value for 'fd' [ 575.242990][ T5925] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 575.283025][T11679] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 575.360338][T12223] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 575.404908][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 575.439224][T11679] usb 8-1: no configurations [ 575.446294][T11679] usb 8-1: can't read configurations, error -22 [ 575.524745][ T5925] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 575.562039][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.606809][ T5925] usb 3-1: config 0 descriptor?? [ 575.625798][ T5925] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 575.673007][T11679] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 575.805660][T12234] tipc: Started in network mode [ 575.810775][T12234] tipc: Node identity 7, cluster identity 4711 [ 575.818911][T12234] tipc: Node number set to 7 [ 575.833633][T11679] usb 8-1: no configurations [ 575.839026][T11679] usb 8-1: can't read configurations, error -22 [ 575.850904][ T5182] bcm5974 3-1:0.0: could not read from device [ 575.860219][ T5182] bcm5974 3-1:0.0: could not read from device [ 575.875965][T11679] usb usb8-port1: attempt power cycle [ 575.887800][ T5182] bcm5974 3-1:0.0: could not read from device [ 575.890989][ T5925] usb 3-1: USB disconnect, device number 13 [ 575.931491][ T5182] bcm5974 3-1:0.0: could not read from device [ 576.252943][T11679] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 576.293715][T11679] usb 8-1: no configurations [ 576.301348][T11679] usb 8-1: can't read configurations, error -22 [ 576.442748][T11679] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 576.504666][T11679] usb 8-1: no configurations [ 576.509369][T11679] usb 8-1: can't read configurations, error -22 [ 576.527855][T11679] usb usb8-port1: unable to enumerate USB device [ 576.731439][ T5925] usb 6-1: USB disconnect, device number 12 [ 576.993772][ T5889] usb 7-1: USB disconnect, device number 18 [ 577.277654][T12254] netlink: 'syz.6.1957': attribute type 1 has an invalid length. [ 577.287979][T12254] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1957'. [ 578.387947][T12285] netlink: 'syz.8.1965': attribute type 4 has an invalid length. [ 578.412015][T12285] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1965'. [ 578.595250][T12288] fuse: Bad value for 'fd' [ 578.619441][T12279] loop2: detected capacity change from 0 to 32768 [ 578.715668][T12291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1968'. [ 578.727610][T12291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1968'. [ 578.912904][T12279] overlayfs: failed to resolve './file1': -2 [ 578.992979][T11679] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 579.174283][T11679] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 579.189434][T11679] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 579.198893][T11679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.209268][T11679] usb 6-1: config 0 descriptor?? [ 579.215863][T12304] overlay: ./file0 is not a directory [ 579.225806][T11679] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 579.472792][ T5182] bcm5974 6-1:0.0: could not read from device [ 579.484854][ T5182] bcm5974 6-1:0.0: could not read from device [ 579.549163][T11679] usb 6-1: USB disconnect, device number 13 [ 579.606474][ T5182] bcm5974 6-1:0.0: could not read from device [ 580.264860][T12320] netlink: 'syz.8.1977': attribute type 1 has an invalid length. [ 580.482763][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 580.656689][ T5925] usb 3-1: config index 0 descriptor too short (expected 63506, got 18) [ 580.666524][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.694248][ T5925] usb 3-1: config 0 has no interfaces? [ 580.708534][ T5925] usb 3-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 580.764408][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.799183][ T5925] usb 3-1: Product: syz [ 580.814766][ T5925] usb 3-1: Manufacturer: syz [ 580.848305][ T5925] usb 3-1: SerialNumber: syz [ 580.905811][ T5925] usb 3-1: config 0 descriptor?? [ 581.802353][T12341] overlayfs: failed to resolve './file1': -2 [ 582.244485][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 582.370441][T12345] pim6reg1: entered promiscuous mode [ 582.382661][T12345] pim6reg1: entered allmulticast mode [ 583.361138][ T25] usb 3-1: USB disconnect, device number 14 [ 584.424628][T12398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2003'. [ 584.652914][ T25] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 584.835539][ T25] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 584.886405][T12403] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2007'. [ 584.926524][ T25] usb 8-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 585.025334][ T25] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 585.103631][ T25] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 585.168206][ T25] usb 8-1: Product: syz [ 585.224019][ T25] usb 8-1: Manufacturer: syz [ 585.276195][ T25] usb 8-1: SerialNumber: syz [ 585.486995][T12410] fuse: Unknown parameter 'user_i00000000000000000000' [ 587.161825][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 588.005138][T11679] usb 8-1: USB disconnect, device number 18 [ 588.612722][ T5889] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 588.812963][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 588.834097][ T5889] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 588.855454][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2031'. [ 588.864673][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 588.885649][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.974371][ T5889] usb 7-1: config 0 descriptor?? [ 589.013894][ T5889] gspca_main: sq930x-2.14.0 probing 041e:403c [ 589.022166][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2032'. [ 589.623471][T12485] tipc: Started in network mode [ 589.628414][T12485] tipc: Node identity ac14140f, cluster identity 4711 [ 590.424163][T12485] tipc: New replicast peer: 255.255.255.255 [ 590.430731][T12485] tipc: Enabled bearer , priority 10 [ 590.503504][ T5889] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 590.509504][ T5889] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 590.968882][T12498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2039'. [ 591.416087][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2040'. [ 591.430934][ T5971] tipc: Node number set to 2886997007 [ 591.536512][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2040'. [ 591.577033][ T5925] usb 7-1: USB disconnect, device number 19 [ 591.718086][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2044'. [ 591.766513][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2044'. [ 592.568193][T12507] pim6reg1: entered promiscuous mode [ 592.592022][T12507] pim6reg1: entered allmulticast mode [ 592.852645][T11679] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 593.071948][T11679] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.157009][T11679] usb 7-1: config 129 has an invalid interface number: 32 but max is 1 [ 593.282298][T11679] usb 7-1: config 129 has an invalid interface number: 32 but max is 1 [ 593.472875][T11679] usb 7-1: config 129 has 1 interface, different from the descriptor's value: 2 [ 593.517616][T12537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2053'. [ 593.563171][T11679] usb 7-1: config 129 has no interface number 0 [ 593.569980][T11679] usb 7-1: config 129 interface 32 has no altsetting 0 [ 593.628466][T11679] usb 7-1: config 129 interface 32 has no altsetting 1 [ 594.700409][T11679] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=74.d5 [ 594.709953][T11679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.718041][T11679] usb 7-1: Product: syz [ 594.722219][T11679] usb 7-1: Manufacturer: syz [ 594.727216][T11679] usb 7-1: SerialNumber: syz [ 595.757885][T11679] usb 7-1: USB disconnect, device number 20 [ 596.026886][T12567] pim6reg1: entered promiscuous mode [ 596.048529][T12567] pim6reg1: entered allmulticast mode [ 596.093154][ T5889] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 596.222623][ T5889] usb 9-1: device descriptor read/64, error -71 [ 596.462681][ T5889] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 596.592631][ T5889] usb 9-1: device descriptor read/64, error -71 [ 596.737226][ T5889] usb usb9-port1: attempt power cycle [ 597.234679][T12584] binder: BINDER_SET_CONTEXT_MGR already set [ 597.252973][T12584] binder: 12579:12584 ioctl 4018620d 200001c0 returned -16 [ 597.422890][ T5889] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 597.557314][ T5889] usb 9-1: device descriptor read/8, error -71 [ 597.803994][ T5889] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 597.853788][ T5889] usb 9-1: device descriptor read/8, error -71 [ 597.973076][ T5889] usb usb9-port1: unable to enumerate USB device [ 598.117745][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2074'. [ 598.279822][T12595] bridge0: port 3(syz_tun) entered disabled state [ 598.315369][T12595] syz_tun (unregistering): left allmulticast mode [ 598.322002][T12595] syz_tun (unregistering): left promiscuous mode [ 598.328903][T12595] bridge0: port 3(syz_tun) entered disabled state [ 599.372266][T12612] Cannot find del_set index 3 as target [ 599.521929][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2081'. [ 600.088009][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 600.224873][ T5971] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 600.679006][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2089'. [ 600.832589][ T5971] usb 7-1: device descriptor read/64, error -71 [ 600.885072][T12630] : renamed from bond0 (while UP) [ 601.072786][ T5971] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 601.262587][ T5971] usb 7-1: device descriptor read/64, error -71 [ 601.324486][T12660] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 601.354838][T12658] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2094'. [ 601.375783][ T5971] usb usb7-port1: attempt power cycle [ 601.414330][T12667] fuse: Bad value for 'fd' [ 601.506085][T12669] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2096'. [ 601.641423][T12671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2097'. [ 601.712951][T11679] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 601.762845][ T5971] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 601.793488][ T5971] usb 7-1: device descriptor read/8, error -71 [ 601.896291][T11679] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 601.909411][T11679] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 601.919618][T11679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.929804][T11679] usb 3-1: config 0 descriptor?? [ 601.948689][T11679] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 602.042912][ T5971] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 602.134684][ T5971] usb 7-1: device descriptor read/8, error -71 [ 602.153544][ T5182] bcm5974 3-1:0.0: could not read from device [ 602.240581][T11679] usb 3-1: USB disconnect, device number 15 [ 602.247139][ T5182] bcm5974 3-1:0.0: could not read from device [ 602.315023][ T5971] usb usb7-port1: unable to enumerate USB device [ 603.645999][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2113'. [ 603.696163][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2113'. [ 604.033993][T12722] fuse: Bad value for 'fd' [ 604.312655][T11679] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 604.432626][ T5838] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 604.497720][T11679] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 604.512208][T11679] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 604.540546][T11679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.572932][ T5838] usb 7-1: device descriptor read/64, error -71 [ 604.587880][T11679] usb 4-1: config 0 descriptor?? [ 604.624489][T11679] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 604.823246][ T5838] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 604.853673][ T5182] bcm5974 4-1:0.0: could not read from device [ 604.858317][T11679] usb 4-1: USB disconnect, device number 27 [ 604.900661][ T8418] bcm5974 4-1:0.0: could not read from device [ 604.977231][ T5838] usb 7-1: device descriptor read/64, error -71 [ 605.027321][T12748] capability: warning: `syz.8.2130' uses 32-bit capabilities (legacy support in use) [ 605.092895][ T5838] usb usb7-port1: attempt power cycle [ 606.010398][ T5838] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 606.113920][ T5838] usb 7-1: device descriptor read/8, error -71 [ 606.616208][ T5838] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 606.703669][ T5838] usb 7-1: device descriptor read/8, error -71 [ 606.813318][ T5838] usb usb7-port1: unable to enumerate USB device [ 607.198829][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 607.252736][T12782] ceph: No mds server is up or the cluster is laggy [ 607.811304][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 607.823743][ T5838] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 607.991242][T12787] fuse: Bad value for 'fd' [ 608.001931][ T5838] usb 9-1: config index 0 descriptor too short (expected 63506, got 18) [ 608.021213][ T5838] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.101997][ T5838] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 608.138579][ T5838] usb 9-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 608.163039][ T5838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.182199][ T5838] usb 9-1: Product: syz [ 608.186994][ T5838] usb 9-1: Manufacturer: syz [ 608.191614][ T5838] usb 9-1: SerialNumber: syz [ 608.222815][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2147'. [ 608.243035][ T5890] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 608.403698][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 608.457893][ T5890] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 608.504493][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.530885][ T5890] usb 4-1: config 0 descriptor?? [ 608.566766][T12803] netlink: 2100 bytes leftover after parsing attributes in process `syz.6.2151'. [ 608.584854][ T5890] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 608.830467][T11679] usb 4-1: USB disconnect, device number 28 [ 608.832531][ T5182] bcm5974 4-1:0.0: could not read from device [ 608.963638][ T8418] bcm5974 4-1:0.0: could not read from device [ 609.124878][T12791] loop2: detected capacity change from 0 to 32768 [ 609.134577][T12791] btrfs: Deprecated parameter 'usebackuproot' [ 609.140944][T12791] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 609.161347][T12791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2146 (12791) [ 609.192939][T12791] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 609.204979][T12791] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 609.224858][T12791] BTRFS info (device loop2): using free-space-tree [ 609.386429][T12791] BTRFS info (device loop2): rebuilding free space tree [ 609.416670][ T5890] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 609.536570][ T29] audit: type=1800 audit(609.507:144): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2146" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 609.552572][ T5890] usb 8-1: device descriptor read/64, error -71 [ 609.593301][ T29] audit: type=1804 audit(609.547:145): pid=12833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2146" name="/newroot/386/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=263 res=1 errno=0 [ 609.731036][ T5836] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 609.803241][ T5890] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 611.459050][ T5890] usb 8-1: device descriptor read/64, error -71 [ 611.459651][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2160'. [ 611.752776][ T5890] usb usb8-port1: attempt power cycle [ 611.854690][ T5906] usb 9-1: USB disconnect, device number 11 [ 612.152697][ T5890] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 612.189026][ T5890] usb 8-1: device descriptor read/8, error -71 [ 612.229532][T12864] binder: 12863:12864 ioctl c0306201 0 returned -14 [ 612.294732][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 612.300833][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 612.342011][T12853] ceph: No mds server is up or the cluster is laggy [ 612.380946][ T5841] Bluetooth: hci5: unexpected event for opcode 0x043d [ 613.562576][ T5906] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 613.591702][T12881] loop2: detected capacity change from 0 to 512 [ 613.658353][T12877] loop8: detected capacity change from 0 to 4096 [ 614.087798][T12885] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 614.154346][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 614.171914][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.184542][T12881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.190383][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.269791][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 614.279340][ T5906] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 614.287921][ T5906] usb 6-1: Product: syz [ 614.292276][ T5906] usb 6-1: Manufacturer: syz [ 614.316450][ T5906] hub 6-1:4.0: USB hub found [ 614.393047][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 614.420898][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.564263][ T5889] usb 4-1: config index 0 descriptor too short (expected 63506, got 18) [ 614.573578][ T5889] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 614.691075][ T5889] usb 4-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 614.731077][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.786470][ T5889] usb 4-1: Product: syz [ 614.828095][ T5889] usb 4-1: Manufacturer: syz [ 614.852835][ T5889] usb 4-1: SerialNumber: syz [ 615.023251][ T5906] hub 6-1:4.0: 2 ports detected [ 615.335908][T12900] loop8: detected capacity change from 0 to 32768 [ 615.360920][T12900] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2176 (12900) [ 615.399222][T12900] BTRFS info (device loop8): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 615.413393][T12900] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 615.431091][T12900] BTRFS info (device loop8): using free-space-tree [ 615.474569][ T5906] usb 6-1: USB disconnect, device number 14 [ 616.157917][ T7014] BTRFS info (device loop8): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 616.867606][T12944] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2188'. [ 617.154985][T11679] usb 4-1: USB disconnect, device number 29 [ 618.004313][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 618.012900][T12965] loop3: detected capacity change from 0 to 256 [ 618.014305][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 619.317152][T12975] loop3: detected capacity change from 0 to 256 [ 619.611017][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 619.617610][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 619.715755][T12982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2197'. [ 619.770351][T12976] ceph: No mds server is up or the cluster is laggy [ 619.888947][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 619.925750][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 620.725511][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 620.912775][ T5906] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 620.952789][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2205'. [ 621.071169][ T5906] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 621.088457][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 621.123888][ T5906] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 621.153483][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 621.185891][ T5906] usb 4-1: SerialNumber: syz [ 621.490258][ T5906] usb 4-1: 0:2 : does not exist [ 621.574878][ T5906] usb 4-1: USB disconnect, device number 30 [ 622.486415][T13010] netlink: 'syz.6.2209': attribute type 1 has an invalid length. [ 622.572028][T13010] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2209'. [ 622.586945][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.693844][T13015] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2210'. [ 622.776790][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2211'. [ 622.815284][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2211'. [ 623.012594][T11679] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 623.162803][T11679] usb 3-1: Using ep0 maxpacket: 8 [ 623.208122][T11679] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 623.228930][T11679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.319932][T11679] usb 3-1: Product: syz [ 623.346880][T11679] usb 3-1: Manufacturer: syz [ 623.362629][T11679] usb 3-1: SerialNumber: syz [ 623.389088][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2219'. [ 623.400792][T11679] usb 3-1: config 0 descriptor?? [ 623.636683][T11679] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 623.885617][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.002209][T13044] loop7: detected capacity change from 0 to 32768 [ 624.120970][T13044] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 624.221536][T13044] [ 624.223915][T13044] ====================================================== [ 624.230944][T13044] WARNING: possible circular locking dependency detected [ 624.237971][T13044] 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 Not tainted [ 624.245086][T13044] ------------------------------------------------------ [ 624.252109][T13044] syz.7.2221/13044 is trying to acquire lock: [ 624.258197][T13044] ffff88804ae387e8 (&oi->ip_io_mutex){+.+.}-{4:4}, at: ocfs2_read_blocks+0x23e/0x1600 [ 624.267992][T13044] [ 624.267992][T13044] but task is already holding lock: [ 624.275462][T13044] ffff88802d094958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 624.284753][T13044] [ 624.284753][T13044] which lock already depends on the new lock. [ 624.284753][T13044] [ 624.295194][T13044] [ 624.295194][T13044] the existing dependency chain (in reverse order) is: [ 624.304218][T13044] [ 624.304218][T13044] -> #6 (jbd2_handle){++++}-{0:0}: [ 624.311561][T13044] lock_acquire+0x1ed/0x550 [ 624.316614][T13044] start_this_handle+0x1eb4/0x2110 [ 624.322358][T13044] jbd2__journal_start+0x2da/0x5d0 [ 624.328197][T13044] __ext4_journal_start_sb+0x239/0x600 [ 624.334219][T13044] ext4_dirty_inode+0x92/0x110 [ 624.339535][T13044] __mark_inode_dirty+0x2f0/0xe90 [ 624.345110][T13044] touch_atime+0x413/0x690 [ 624.350082][T13044] ext4_file_mmap+0x18c/0x540 [ 624.355306][T13044] __mmap_region+0x2206/0x2cd0 [ 624.360617][T13044] mmap_region+0x226/0x2c0 [ 624.365588][T13044] do_mmap+0x8f0/0x1000 [ 624.370285][T13044] vm_mmap_pgoff+0x1dd/0x3d0 [ 624.375399][T13044] ksys_mmap_pgoff+0x4eb/0x720 [ 624.380699][T13044] do_syscall_64+0xf3/0x230 [ 624.385740][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.392171][T13044] [ 624.392171][T13044] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 624.399847][T13044] lock_acquire+0x1ed/0x550 [ 624.404887][T13044] __might_fault+0xc6/0x120 [ 624.409930][T13044] _copy_from_user+0x2a/0xc0 [ 624.415056][T13044] blk_trace_setup+0xd2/0x1e0 [ 624.420261][T13044] sg_ioctl+0xa46/0x2e80 [ 624.425032][T13044] __se_sys_ioctl+0xf7/0x170 [ 624.430141][T13044] do_syscall_64+0xf3/0x230 [ 624.435180][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.441604][T13044] [ 624.441604][T13044] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 624.449448][T13044] lock_acquire+0x1ed/0x550 [ 624.454480][T13044] __mutex_lock+0x1ac/0xee0 [ 624.459518][T13044] blk_mq_init_sched+0x3fa/0x830 [ 624.464983][T13044] elevator_init_mq+0x20e/0x320 [ 624.470362][T13044] add_disk_fwnode+0x10d/0xf80 [ 624.475686][T13044] sd_probe+0xba6/0x1100 [ 624.480468][T13044] really_probe+0x2ba/0xad0 [ 624.485506][T13044] __driver_probe_device+0x1a2/0x390 [ 624.491410][T13044] driver_probe_device+0x50/0x430 [ 624.496986][T13044] __device_attach_driver+0x2d6/0x530 [ 624.502904][T13044] bus_for_each_drv+0x250/0x2e0 [ 624.508471][T13044] __device_attach_async_helper+0x22d/0x300 [ 624.514895][T13044] async_run_entry_fn+0xaa/0x420 [ 624.520358][T13044] process_scheduled_works+0xa68/0x1840 [ 624.526431][T13044] worker_thread+0x870/0xd30 [ 624.531548][T13044] kthread+0x2f2/0x390 [ 624.536146][T13044] ret_from_fork+0x4d/0x80 [ 624.541176][T13044] ret_from_fork_asm+0x1a/0x30 [ 624.546548][T13044] [ 624.546548][T13044] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 624.555453][T13044] lock_acquire+0x1ed/0x550 [ 624.560487][T13044] blk_queue_enter+0xe1/0x600 [ 624.565705][T13044] blk_mq_alloc_request+0x4fa/0xaa0 [ 624.571449][T13044] scsi_execute_cmd+0x177/0x1090 [ 624.576919][T13044] read_capacity_16+0x2b4/0x1450 [ 624.582395][T13044] sd_revalidate_disk+0x1013/0xbce0 [ 624.588135][T13044] sd_probe+0x9fa/0x1100 [ 624.592914][T13044] really_probe+0x2ba/0xad0 [ 624.597945][T13044] __driver_probe_device+0x1a2/0x390 [ 624.603769][T13044] driver_probe_device+0x50/0x430 [ 624.609325][T13044] __device_attach_driver+0x2d6/0x530 [ 624.615226][T13044] bus_for_each_drv+0x250/0x2e0 [ 624.620615][T13044] __device_attach_async_helper+0x22d/0x300 [ 624.627037][T13044] async_run_entry_fn+0xaa/0x420 [ 624.632514][T13044] process_scheduled_works+0xa68/0x1840 [ 624.638586][T13044] worker_thread+0x870/0xd30 [ 624.643702][T13044] kthread+0x2f2/0x390 [ 624.648297][T13044] ret_from_fork+0x4d/0x80 [ 624.653241][T13044] ret_from_fork_asm+0x1a/0x30 [ 624.658527][T13044] [ 624.658527][T13044] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 624.666196][T13044] lock_acquire+0x1ed/0x550 [ 624.671230][T13044] __mutex_lock+0x1ac/0xee0 [ 624.676266][T13044] loop_reconfigure_limits+0x43f/0x900 [ 624.682249][T13044] lo_ioctl+0x1351/0x1f50 [ 624.687112][T13044] blkdev_ioctl+0x57f/0x6a0 [ 624.692136][T13044] __se_sys_ioctl+0xf7/0x170 [ 624.697245][T13044] do_syscall_64+0xf3/0x230 [ 624.702282][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.708716][T13044] [ 624.708716][T13044] -> #1 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 624.717348][T13044] lock_acquire+0x1ed/0x550 [ 624.722378][T13044] blk_mq_submit_bio+0x1536/0x2390 [ 624.728018][T13044] __submit_bio+0x2c6/0x560 [ 624.733047][T13044] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 624.739200][T13044] ocfs2_read_blocks+0x8d9/0x1600 [ 624.744791][T13044] ocfs2_read_inode_block+0x106/0x1e0 [ 624.750686][T13044] ocfs2_get_clusters+0x3d2/0xbd0 [ 624.756240][T13044] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 624.762577][T13044] ocfs2_read_virt_blocks+0x313/0xb10 [ 624.768479][T13044] ocfs2_find_entry+0x43b/0x2730 [ 624.773949][T13044] ocfs2_find_files_on_disk+0xff/0x360 [ 624.779939][T13044] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 624.786105][T13044] ocfs2_get_system_file_inode+0x305/0x7b0 [ 624.792457][T13044] ocfs2_init_global_system_inodes+0x32c/0x730 [ 624.799142][T13044] ocfs2_fill_super+0x2f5b/0x5760 [ 624.804693][T13044] mount_bdev+0x20c/0x2d0 [ 624.809545][T13044] legacy_get_tree+0xf0/0x190 [ 624.814771][T13044] vfs_get_tree+0x92/0x2b0 [ 624.819710][T13044] do_new_mount+0x2be/0xb40 [ 624.824742][T13044] __se_sys_mount+0x2d6/0x3c0 [ 624.829949][T13044] do_syscall_64+0xf3/0x230 [ 624.834988][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.841421][T13044] [ 624.841421][T13044] -> #0 (&oi->ip_io_mutex){+.+.}-{4:4}: [ 624.849383][T13044] validate_chain+0x18ef/0x5920 [ 624.854779][T13044] __lock_acquire+0x1397/0x2100 [ 624.860158][T13044] lock_acquire+0x1ed/0x550 [ 624.865186][T13044] __mutex_lock+0x1ac/0xee0 [ 624.870222][T13044] ocfs2_read_blocks+0x23e/0x1600 [ 624.875772][T13044] ocfs2_search_chain+0x2d3/0x26c0 [ 624.881407][T13044] ocfs2_claim_suballoc_bits+0x11ef/0x2560 [ 624.887740][T13044] ocfs2_claim_new_inode+0x338/0x870 [ 624.893545][T13044] ocfs2_mknod_locked+0x17a/0x3b0 [ 624.899102][T13044] ocfs2_mknod+0x17d4/0x2b30 [ 624.904224][T13044] ocfs2_mkdir+0x1ab/0x470 [ 624.909172][T13044] vfs_mkdir+0x2fb/0x4f0 [ 624.913966][T13044] do_mkdirat+0x264/0x3a0 [ 624.918817][T13044] __x64_sys_mkdirat+0x87/0xa0 [ 624.924100][T13044] do_syscall_64+0xf3/0x230 [ 624.929140][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.935569][T13044] [ 624.935569][T13044] other info that might help us debug this: [ 624.935569][T13044] [ 624.945792][T13044] Chain exists of: [ 624.945792][T13044] &oi->ip_io_mutex --> &mm->mmap_lock --> jbd2_handle [ 624.945792][T13044] [ 624.958509][T13044] Possible unsafe locking scenario: [ 624.958509][T13044] [ 624.965948][T13044] CPU0 CPU1 [ 624.971306][T13044] ---- ---- [ 624.976661][T13044] rlock(jbd2_handle); [ 624.980912][T13044] lock(&mm->mmap_lock); [ 624.987769][T13044] lock(jbd2_handle); [ 624.994366][T13044] lock(&oi->ip_io_mutex); [ 624.998874][T13044] [ 624.998874][T13044] *** DEADLOCK *** [ 624.998874][T13044] [ 625.007012][T13044] 8 locks held by syz.7.2221/13044: [ 625.012204][T13044] #0: ffff88805b5f6420 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 625.021495][T13044] #1: ffff88804ac509c0 (&type->i_mutex_dir_key#15/1){+.+.}-{4:4}, at: filename_create+0x260/0x540 [ 625.032263][T13044] #2: ffff88804ae389c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x192/0x4e70 [ 625.045980][T13044] #3: ffff88804ac56d80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x192/0x4e70 [ 625.059694][T13044] #4: ffff88804ae3a640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x132/0x2840 [ 625.073690][T13044] #5: ffff88805b5f6610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0x150c/0x2b30 [ 625.083057][T13044] #6: ffff888027a6a8e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3be/0x700 [ 625.093792][T13044] #7: ffff88802d094958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 625.103660][T13044] [ 625.103660][T13044] stack backtrace: [ 625.109544][T13044] CPU: 0 UID: 0 PID: 13044 Comm: syz.7.2221 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 625.120306][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 625.130362][T13044] Call Trace: [ 625.133638][T13044] [ 625.136582][T13044] dump_stack_lvl+0x241/0x360 [ 625.141279][T13044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.146491][T13044] ? __pfx__printk+0x10/0x10 [ 625.151096][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.156737][T13044] print_circular_bug+0x13a/0x1b0 [ 625.161779][T13044] check_noncircular+0x36a/0x4a0 [ 625.166732][T13044] ? __pfx_check_noncircular+0x10/0x10 [ 625.172204][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.177847][T13044] ? lockdep_lock+0x123/0x2b0 [ 625.182535][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.188185][T13044] ? deref_stack_reg+0x17c/0x210 [ 625.193132][T13044] ? __pfx_lock_release+0x10/0x10 [ 625.198165][T13044] validate_chain+0x18ef/0x5920 [ 625.203035][T13044] ? kernel_text_address+0xa7/0xe0 [ 625.208164][T13044] ? __pfx_validate_chain+0x10/0x10 [ 625.213375][T13044] ? arch_stack_walk+0xfd/0x150 [ 625.218240][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.223874][T13044] ? hlock_conflict+0x59/0x1e0 [ 625.228648][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.234288][T13044] ? __bfs+0x36a/0x6f0 [ 625.238397][T13044] ? __pfx_hlock_conflict+0x10/0x10 [ 625.243614][T13044] ? __pfx___bfs+0x10/0x10 [ 625.248037][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.253678][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.259316][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.265036][T13044] ? mark_lock+0x9a/0x360 [ 625.269428][T13044] __lock_acquire+0x1397/0x2100 [ 625.274320][T13044] lock_acquire+0x1ed/0x550 [ 625.278839][T13044] ? ocfs2_read_blocks+0x23e/0x1600 [ 625.284057][T13044] ? __pfx_lock_acquire+0x10/0x10 [ 625.289100][T13044] ? __pfx___might_resched+0x10/0x10 [ 625.294398][T13044] ? rcu_is_watching+0x15/0xb0 [ 625.299184][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.304823][T13044] ? lock_release+0xbf/0xa30 [ 625.309596][T13044] ? __pfx_lock_acquire+0x10/0x10 [ 625.314716][T13044] ? unwind_get_return_address+0x4d/0x90 [ 625.320356][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.325998][T13044] __mutex_lock+0x1ac/0xee0 [ 625.330518][T13044] ? ocfs2_read_blocks+0x23e/0x1600 [ 625.335725][T13044] ? deref_stack_reg+0x17c/0x210 [ 625.340675][T13044] ? 0xffffffffa0004400 [ 625.344828][T13044] ? ocfs2_read_blocks+0x23e/0x1600 [ 625.350035][T13044] ? __pfx___mutex_lock+0x10/0x10 [ 625.355083][T13044] ? __kernel_text_address+0xd/0x40 [ 625.360296][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.365933][T13044] ? unwind_get_return_address+0x4d/0x90 [ 625.371574][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.377212][T13044] ? arch_stack_walk+0xfd/0x150 [ 625.382077][T13044] ocfs2_read_blocks+0x23e/0x1600 [ 625.387131][T13044] ? __pfx_ocfs2_validate_group_descriptor+0x10/0x10 [ 625.393838][T13044] ? __pfx_stack_trace_save+0x10/0x10 [ 625.399221][T13044] ? __pfx_ocfs2_read_blocks+0x10/0x10 [ 625.404688][T13044] ? __pfx_check_noncircular+0x10/0x10 [ 625.410171][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.415896][T13044] ? lockdep_unlock+0x16a/0x300 [ 625.420808][T13044] ? __pfx_lockdep_unlock+0x10/0x10 [ 625.426031][T13044] ocfs2_search_chain+0x2d3/0x26c0 [ 625.431242][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.436878][T13044] ? validate_chain+0x15c0/0x5920 [ 625.441916][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.447562][T13044] ? __pfx_ocfs2_search_chain+0x10/0x10 [ 625.453117][T13044] ? __pfx_validate_chain+0x10/0x10 [ 625.458328][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.463961][T13044] ? mark_lock+0x9a/0x360 [ 625.468301][T13044] ? __lock_acquire+0x1397/0x2100 [ 625.473344][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.478981][T13044] ocfs2_claim_suballoc_bits+0x11ef/0x2560 [ 625.484793][T13044] ? mark_lock+0x9a/0x360 [ 625.489137][T13044] ? __lock_acquire+0x1397/0x2100 [ 625.494177][T13044] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 625.500421][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.506066][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.511708][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.517346][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.522982][T13044] ? mark_lock+0x9a/0x360 [ 625.527322][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.532956][T13044] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 625.538947][T13044] ocfs2_claim_new_inode+0x338/0x870 [ 625.544331][T13044] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 625.550139][T13044] ? __set_current_blocked+0x310/0x380 [ 625.555619][T13044] ? __pfx___set_current_blocked+0x10/0x10 [ 625.561444][T13044] ? rcu_is_watching+0x15/0xb0 [ 625.566225][T13044] ocfs2_mknod_locked+0x17a/0x3b0 [ 625.571268][T13044] ? __pfx_sigprocmask+0x10/0x10 [ 625.576225][T13044] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 625.581786][T13044] ? ocfs2_start_trans+0x4e3/0x700 [ 625.586901][T13044] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 625.592556][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.598206][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.603846][T13044] ocfs2_mknod+0x17d4/0x2b30 [ 625.608452][T13044] ? __pfx_validate_chain+0x10/0x10 [ 625.613757][T13044] ? __pfx_ocfs2_mknod+0x10/0x10 [ 625.618881][T13044] ? __lock_acquire+0x1397/0x2100 [ 625.623916][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.629640][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.635276][T13044] ? __lock_acquire+0x1397/0x2100 [ 625.640314][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.645952][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.651588][T13044] ? __pfx_lock_acquire+0x10/0x10 [ 625.656621][T13044] ? ocfs2_inode_unlock_tracker+0x23e/0x2b0 [ 625.662532][T13044] ? __pfx_lock_release+0x10/0x10 [ 625.667560][T13044] ? do_raw_spin_lock+0x14f/0x370 [ 625.672588][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.678223][T13044] ? do_raw_spin_unlock+0x13c/0x8b0 [ 625.683419][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.689061][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.694698][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.700332][T13044] ? put_pid+0xdf/0x120 [ 625.704494][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.710134][T13044] ? ocfs2_permission+0x103/0x1c0 [ 625.715175][T13044] ? __pfx_ocfs2_permission+0x10/0x10 [ 625.720557][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.726212][T13044] ocfs2_mkdir+0x1ab/0x470 [ 625.730644][T13044] ? __pfx_ocfs2_mkdir+0x10/0x10 [ 625.735595][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.741231][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.746865][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.752504][T13044] ? security_inode_mkdir+0xbe/0x340 [ 625.757801][T13044] vfs_mkdir+0x2fb/0x4f0 [ 625.762052][T13044] do_mkdirat+0x264/0x3a0 [ 625.766385][T13044] ? __check_object_size+0x47a/0x730 [ 625.771692][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.777330][T13044] ? __pfx_do_mkdirat+0x10/0x10 [ 625.782187][T13044] ? srso_alias_return_thunk+0x5/0xfbef5 [ 625.787825][T13044] ? getname_flags+0x1e3/0x540 [ 625.792604][T13044] __x64_sys_mkdirat+0x87/0xa0 [ 625.797374][T13044] do_syscall_64+0xf3/0x230 [ 625.801898][T13044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.807805][T13044] RIP: 0033:0x7f4dc7f85d29 [ 625.812352][T13044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.832079][T13044] RSP: 002b:00007f4dc8d14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 625.840512][T13044] RAX: ffffffffffffffda RBX: 00007f4dc8175fa0 RCX: 00007f4dc7f85d29 [ 625.848507][T13044] RDX: 0000000000000000 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 625.856481][T13044] RBP: 00007f4dc8001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 625.864479][T13044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.872476][T13044] R13: 0000000000000000 R14: 00007f4dc8175fa0 R15: 00007ffd06b02ee8 [ 625.880472][T13044] [ 625.901065][T11679] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 626.477873][T11679] usb 3-1: USB disconnect, device number 16 [ 626.766413][ T5971] libceph: connect (1)[c::]:6789 error -101 [ 626.772605][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 626.843533][T13061] ceph: No mds server is up or the cluster is laggy [ 627.531398][ T6361] ocfs2: Unmounting device (7,7) on (node local)