last executing test programs: 4.776871191s ago: executing program 4 (id=1405): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/29, 0x1d}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0x2020) 4.66539328s ago: executing program 0 (id=1407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x27}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.65978446s ago: executing program 4 (id=1408): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 4.589177396s ago: executing program 0 (id=1409): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000005c0)}, 0x20) syz_usb_connect(0x0, 0x10e, &(0x7f0000000300)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024", @ANYRES16=r1], 0x0) socket$packet(0x11, 0x0, 0x300) 4.581614037s ago: executing program 4 (id=1410): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40) 4.53215673s ago: executing program 4 (id=1411): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.113227095s ago: executing program 4 (id=1413): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x64}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x6}, {&(0x7f0000000fc0)=""/4096, 0x110}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x41}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x38}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.993065205s ago: executing program 4 (id=1414): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = dup(r2) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x2031, 0xffffffff, "00207d2000000000241b14700c1ee7c64f000000001200000000080900"}) r5 = socket$packet(0x11, 0x3, 0x300) unshare(0x44000000) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000100)={0x9, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) setsockopt$packet_int(r5, 0x107, 0x18, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc) 3.919963721s ago: executing program 1 (id=1416): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1519, &(0x7f0000003040)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21c916, &(0x7f0000000400), 0x1b, 0x4c5, &(0x7f0000000ec0)="$eJzs3V9rW+cZAPDnHFtZ/jizw3aRBZaFJcMOWyQ7XhKzi2yDsV0FtmX3mWfLxli2jCUnsQmbwz7AYJS20Kte9abQD1Ao+QilEGjvS1taSpu0F71oo6J/qeNIsU1kKVi/HxzrPUdHfp5HQq/0nvOiE0DfOhMRFyPiUaVSOR8Rw43taWO5dywiNuv7PXxwZ6a6JFGpXP8iiaSxrbr/2Jb/2XhIHI6Iv/8l4l/J03FL6xuL04VCfrWxnisvreRK6xsXFpam5/Pz+eXJyYnLU1emLk2Nd6TOoYi4+qdPXv7fG3+++s5vbn1447OxfyeN7bGljk6rl56pPRdNgxGxuh/BemCgUU+m14kAALArze/5v4yI8zEcA7VvcwAAAMBBUvn9UHybRFQAAACAAyutzYFN0mxjHsBQpGk2W5/D+9M4mhaKpfKv54pry7P1ubIjkUnnFgr58cZc4ZHIJNX1iVr7h/WL29YnI+JERLw0fKS2np0pFmZ7ffADAAAA+sSxbeP/r4fr438AAADggBnpdQIAAADAvjP+BwAAgIPP+B8AAAAOtL9eu1ZdKs3rX8/eXF9bLN68MJsvLWaX1mayM8XVlex8sThf+82+pZ3+X6FYXPltLK/dzpXzpXKutL5xY6m4tly+sfDEJbABAACALjrxi3sfJBGx+bsjtaXqUK+TArpicC87f7x/eQDdN9DrBICe2dPnP3CgZHqdANBzyQ73t528827ncwEAAPbH6M9an/9Pdjw2sJl2KUVgnzj+B/3L+X/oX87/Q//KxEAYyEN/2//z/5XKnhICAAA6bqi2JGk2onYcYCjSNJuNOF67LEAmmVso5Mcj4scR8f5w5kfV9YnaI5MdxwwAAAAAAAAAAAAAAAAAAAAAAAAAQF2lkkQFAAAAONAi0k+TxvW/RofPDW0/PnAo+Wa4dhsRt167/srt6XJ5daK6/cvH28uvNrZf7MURDAAAAGC75ji9OY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE56+ODOTHPpZtzP/xgRI63iD8bh2u3hyETE0a+SGNzyuCQiBjoQf/NuRJxsFT+pphUjjSxaxT/Sw/hpRBzrQHzoZ/eq/c8fWr3/0jhTu239/rtc66GeX/v+L33c/w206X+O7zLGqftv5drGvxtxarB1/9OMn7SJf3aX8f/5j42NdvdVXo8Ybfn5kzwRK1deWsmV1jcuLCxNz+fn88uTkxOXp65MXZoaz80tFPKNvy1j/P/nbz96Vv1H28Qf2aH+c7us/7v7tx/8pN7MtIo/drb163+yTfy08dn3q0a7ev9os71Zb291+s33Tj+r/tk29e/0+o/tsv7zf/vvR7vcFQDogtL6xuJ0oZBf7evGcz0b1a9FL0QVGntt/OfFSOOFbPS2XwIAADrv6TEwAAAAAAAAAAAAAAAAAAAA0G3d/HW9ps3elAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EzfBwAA//+8vtTr") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @private}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0xa, 0x0, 0x0, 0x2, 0x210, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x15, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r5, 0xedbe285f9b904783, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) 2.792559752s ago: executing program 1 (id=1423): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 2.527284504s ago: executing program 3 (id=1427): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @none}, 0xe) 2.391222415s ago: executing program 2 (id=1431): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.631412787s ago: executing program 1 (id=1432): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) write$bt_hci(r0, &(0x7f00000002c0)={0x1, @set_cpb={{0x441, 0xb}}}, 0xf) 1.491981708s ago: executing program 3 (id=1433): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x27}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.486563259s ago: executing program 2 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 1.435919753s ago: executing program 2 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@tcx={@link_id}}, 0x40) 1.408687155s ago: executing program 0 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='\t'], 0xb0) getresuid(&(0x7f0000000000), &(0x7f00000002c0), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.326606242s ago: executing program 0 (id=1437): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xff}]}, 0x44}}, 0x0) 1.281252586s ago: executing program 1 (id=1438): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 1.22962243s ago: executing program 2 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)={0x40, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xfb}, @NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x78, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7e}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a7dc28fe5c3d3db882f2a2db8b5fabf39d9435efa0da12e9"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x78}}, 0x0) 1.203311682s ago: executing program 1 (id=1440): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}}) 1.173695604s ago: executing program 3 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) 972.366181ms ago: executing program 2 (id=1442): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000640)) 924.955675ms ago: executing program 3 (id=1443): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1816c3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) syncfs(r2) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 888.263898ms ago: executing program 0 (id=1444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x0, @none}, 0xe) 361.146091ms ago: executing program 1 (id=1445): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e885090acabaebf8bc1dea67de28f23b1756977a30534fc2f6abbe72b68bcd88bbf0749c72fcf19229ac72c24260838d89babf1ecf13e5908d286f71ae0c66b8c2413ae3a7a225132acfa8c3e0a9ab5f094a50786bf4fef8f096446fdeea118294957b97d958ecb028be46dd1434eb1a439218b39f8e"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 183.305475ms ago: executing program 3 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0613698c585b4ee02a1d2649e96cb937588957dc3b7a247200"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="00ad78a771e1111d90f2ea3dcc42fa3f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4056a421acc66b04"}]}]}, 0x64}}, 0x0) 127.31741ms ago: executing program 3 (id=1447): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x182000) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001f00)={0x0, 0x3f}) 65.174124ms ago: executing program 2 (id=1448): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002bc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl2\x00', r1, 0x2f, 0xfe, 0x3f, 0x1, 0x12, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x20000000, 0x3f}}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40104593, &(0x7f0000000140)=0x7) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[], 0x1, 0x1cf, &(0x7f0000000780)="$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") chdir(&(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = semget$private(0x0, 0x1, 0x0) semop(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x20040400) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x0]) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x80003, 0x0) getsockname$packet(r0, &(0x7f00000039c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003a00)=0x14) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="845009d2d844efde3b5ee50723285c97aa647543b55b13e4362b2dc1472e7e4b6dbe8dd2d6829a116a06541d11ca163c5a00e8b6e76e18a9a75a331e6be445d253987ee2aed5b5ef1aecd9558af0b6a69044e291800267464b", 0x59}, {&(0x7f0000000080)="724ef5d2b920fe638e9c808ffe0edf6a4ce14e2ec609c87d7bfcbae0a3ed322f51a616f86a8b83e579d4fd0fd7d99970d50671445f525ace19ee955ad47ed14fc6858ad888bc7d12d6d993d13738fdffe83aa2a9cf9df3880cd95515c5a333cbcd37132ef9451952e473066979d1efc1433d24c179b5fbc136ffacc35a59ccf7b75d39116f27fd0213edf815273565953e8eb4ed0ad17fa866b6b435d57dedc59a28e10c5e", 0xa5}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000180)="49b41193b156c837ce346589f2d944155705223e34e92a71f78c2c86e047baf1555bc197655ce5b407a286fcc614973968a39663b5eca5451371ab8525d7709579786446e5cbba3b625167e0f2ec7d0cea0c8c510e6639285f24b46cd676b20436c859df4b13e17e03f54746c2742b436dc9d1c2adc346f534522b90028aa29e0301bf4fa63bb768cfc3d1bc52ebec8c88b1d57b87de8b3d5d49580b274ccad2a98d7a66a48c", 0xa6}, {&(0x7f0000000240)="27a2407db4b9712ffa19faf5b3005f3e4d01e6b14f228428d4384466a09eeb27c9a942668ef0ff7d1a528bc67d3688e290d7fc3e8d6c7b4eef", 0x39}, {&(0x7f0000000280)="255f24c44163b3b5513b116d58664bb26be595cc7649be9b6f2ed0094733c7a4cc99dbaa6659ed6c49bb8006399595ec526001ead14756c5078bf3103e83120cf9ec10dc05134bc4675ea9124315f3898c8a33d0b540ade883967841fca2230233d853c25d7e022bf93d5ddb4edffc059e1cef450989308b5f26623e2c3eac2400418739f8502bb9e07ee227c2843d81afd602b62fefb8abedaded71d018ed23b5ace3b8a14969c9d8308c585ddd1c0dfa7f35b29c2ee074287d0c275b62284abef257f454", 0xc5}], 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="14000000000000000000000001000000060000000000000011000000000000000000000001000000040000000000000014000000000000000033aa0001000000010000000000000030000000000000000000000007000000008310f211295160385c6a96978064b9de8307a8ac1414bb07071a0000000000140000000000000000000000010000000800000000000000"], 0x90}}, {{&(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001580)="442b9bb46bcfa72cbcd389da8d35f84be9a86a60ecebaa4ad343520c0e74b6a46958bce55bdc588055c064a057e45b34fd1da48759d46f90773275f9f18afb18cccf68506582685474e054d77b8b7862b35b5632cdc52f7fab75ad4ff18ca4a834d3d2817937e3cd46e26449a07216681d1c8d6d0d193f0b1d0e3c407a8c1e6af188525dff7c4387f11390445026bcbd3337275869de78baff435195d33d2998576f4be615a589abec5e34095d36c19b51a9e2a6c4cbca2887ce93291cebc0c92877bf3e", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001680)="ec3367729c80c0b0918214b3f3fe3c5d2ae53ebb1b21add9b890bbf34265a458396fd7cbf0d1d8169aba6bd7e51e1483ee7bbe43ad77e9a8900dc0500a32d6130229a7935978458ad9026cb5597bdf58b2afc67a5eeb88939229952e11d9c343cf2661ff7d22a0e19e7632d9960ec23bb38f3af120595c4169c9bd8725e1b244e35257d6ae83b26534c6af4104c4a3b15d1faf521c2e4d37019826b39cc966f5b488862191fa94d5bd52c08da8d5d2d57588248522", 0xb5}, {&(0x7f0000002740)="6cd485c60779b2c1e910d35accb29163a2638c34a7c9df17c14f520108905bc844ff1654fce04dbc0d2ba4083c71c9fc760a2668e57494eb2a2a3849569a21366f923abb825ac89915dab41526e291979c4b1a59e8956a72e7ff5e0bc3cd7266a506c6d9d3337ddeaa7c8745ab659c5d00d25e52557a0683572798202f2c4100ec3eb2fa63e4acffcb488ed949e5401bd24fc6f20882c9f5b00d9d72e2a9962aa8fa90af009f7344d1f7281c5cc32aea1f2945e3833007d239e9f3db976b357fa3d57b38d8dd3014d76fa31cb40dfcfff401870cc227968d1f9d5c5dad2ff76cb96237c2f98b8a555ebcb4a07ed9", 0xee}, {&(0x7f0000002840)="4bdf20000daebd23b4b41b1bd600fd09462c3ca6675c15a8d6995f743c8f1785941cd5fd2fc97d738abe78f8980c35c71a6339aa9364410462e8d72877e7d810ba5884d45d90c9cbc1f0a22d2508bea9049ba43e5050", 0x56}, {&(0x7f00000028c0)="f925d53bc5badf3cccbe0c3e9356cb62573c23a2b20e6716e2b4ef305bcd03c7c7bcef4244baa0e2dd77e9e4c20d14b96a0e29892722155c84b88d3325e4899bd171a4befcd7fbfc2a189acc45fc8107bd35937385c96ae6a75f01a6a3b93eda06441fec733efd9ec463df93c0d82ace0f4bba0ccf003f6fce231f56269ea0c00fbd7cf0f75bbb264348c695175596bee04c8462537aa262f1a6a913d2ecd064909d22f9dbe55aabaed9985c4da4d1902b406ef70cedb0690e7ecb85c370", 0xbe}, {&(0x7f0000002980)="c0b39332dc2c8980f0990ee55e66c4e560999c84f3ae6edf37591eda7d3f48e99510c42526151d527be3a32e728dcc76f069fb28f74575eec0d06174450754fc5d212fc7d94a1ae9cd7a63ef9ce6b0fa7afc2c2a328f6402d337bfff7d669ebd23efb4065471f34b897dcf481d1d56c8cf4c4a0a88b9b636d95836a1d038b9c1a780f2859e2c3cc4692c221e500ec2e5280cc6f56c6a36b7ad7362655bd7361ce418240a2215853f8ff46c198ab99de5c91291521844", 0xb6}, {&(0x7f0000002a40)="965d726a55b113bbb15669cfd39ec2239d25da7ec638e03fe9bef1e39a6e21a72d7394e39e25982a31c57d26ca6954fa28720883f96dd77346b82483e0ea5aaf780ba01e9bfaad870399e22b17f64c92afd358fc5ae7144e2be813d6b2a8c258cdca23bccd09e1996e969b78f5367aa25fefabfa1b9ca697c50731de884de04b066df88d2f416df4ca1e4b7e432596efcd7f1f98fabc6f17", 0x98}, {&(0x7f0000003000)="d02077578f34d77997737f106eb78c44afc7ac3a0003003c73082c16b5bbfbeece6ed52df51de2104c7f052d0000eb2d56c6eb2e628d693dcf7817cb620c32ef6a8b9cf835fe0423c8bfc0cf758f169729798bd119c3e82b78ac961e1a77c1ecf5f6bed8ad5a3b473d3db549aa30d991d1fb066dcf768426048bf37f890575bdd47ff8ad5b8fe3e76fa176d43268f629", 0x90}], 0x7, &(0x7f0000002c00)=ANY=[@ANYBLOB="1400000000000000000000000200000800755c605d8b9900010000000000110000000000000000000000010000008000000000000000100000000000000000000000010000003f0000000000000014000000000000a8e7000010000002000000670e0000000000001c00000008000000", @ANYRES32=r1, @ANYBLOB="ac1414aae00000020000000014000000000000000000000002000000030000000000000090000000000000000000000007000000443c753164010100000001ffac1414aa0000000800000000000100007f000001800000016401010100000008ac1414bb00000007ac1efd010000000494040100890b21ac1e0001ffffffff070781000000008618000000020612c2103edae7dc23b631dc7b5eab39c89044141860000008000000078d0001000110dcf3020000"], 0x128}}, {{&(0x7f0000002d40)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002d80)="f1ba277ae12100ecc15010994b549e19f5f696ed6f2c689132d20b6cab2e07c08f867d1e9362fc4a8b955b66a91a5f270983e4e88d04103aab0a2c83ea831fcf7b5262f58c20a4658381b7fe086d57731a51a61f16df05a931fb94961e29a240e567402fc977a6bbf0c184737614192700c0b64bf35200239772fa1ed9cf474d0640734fa7d9a46d4b01bdc2ba56e6e543c9c588b3d33be6993de497b5a3397c0067f7befea26dc05d08b791c35439309ea98e4f3007dd3d1e9d1efb", 0xbc}, {&(0x7f0000002e40)="df13d8882a79e8dba72fe10496beb4d6e9351e8080b524cd76e4e69f834873aec4cbe38575ce0223f233e45335cd8d4afae5ffa80bbe3db0011cfa35bbc1d604e83df14f41a6b37428974a4383cad899196288802fabc0aa4dcc0c577e91d984df87e9c0b438ed6f8e2721a08b8c4328c330a7bba04a638373a11bca32df418ddf37783a712c3ccbbd74ab0d2cbf5d8b44e6310d5ddf5a8e7992799e990f55ec5ca00b98db42322318e43c327c968abccc9cd433c9e1f91a6f9bf47c01eb", 0xbe}], 0x2, &(0x7f0000004c00)=[@ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x48, 0x3, [{0x0, 0xd, "75c046c63f8219129ca67a"}, {0x1, 0x8, "18d51bd4a6ce"}, {0x2, 0x10, "c6f93c3dabd0387dcdc517ae607b"}, {0x1, 0xb, "74e61ce7a2c4d91091"}, {0x6, 0x12, "3fba61f54c708582cfc20612d69c2c7e"}]}, @ssrr={0x89, 0x1f, 0x7f, [@rand_addr=0x64010102, @broadcast, @multicast2, @loopback, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}]}, @rr={0x7, 0xb, 0xc0, [@broadcast, @local]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0x7, [{@rand_addr=0x68, 0x4}]}, @noop, @timestamp_addr={0x44, 0x24, 0xed, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@multicast2, 0x1}, {@rand_addr=0x64010102, 0x5b}, {@private=0xa010100, 0x7f}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x184f}}, @ip_retopts={{0x104, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0xa7, [@loopback, @empty, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010103, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x22}, @loopback]}, @cipso={0x86, 0x4c, 0x2, [{0x0, 0x5, "ef79fd"}, {0xc70d8dc581d42829, 0xd, "e20e23a58d5b724ef2ec30"}, {0x1, 0xe, "e89436ed32a872af66290979"}, {0x7, 0x9, "f6967f082a28f6"}, {0x7, 0x7, "fb88a8a71f"}, {0x5, 0xa, "11cdb200bb52ee59"}, {0x0, 0xc, "376d730cbcf5d436aca2"}]}, @generic={0x7, 0x10, "777bb292fa058feb2e295755ee48"}, @cipso={0x86, 0x47, 0x2, [{0x1, 0x12, "fffbf53d6ab420a6e6358f490323c65a"}, {0x7, 0x2}, {0x2, 0xe, "59d7e17e52cf66a51968685e"}, {0x0, 0x4, "efca"}, {0xc, 0xf, "61786427dc699769414d5c99ee"}, {0x7, 0x3, "86"}, {0x6, 0x9, "5e43617ba06994"}]}, @timestamp={0x44, 0x24, 0x9d, 0x0, 0x3, [0x0, 0x2, 0xffffffff, 0x0, 0x4, 0x80000001, 0x1, 0x1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x270}}, {{&(0x7f0000003340)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000003640)=[{&(0x7f0000003380)="740cc1516facac4c2d1ba29c75ff54ff7c84210a67ec7b54eee6413b29d3b6", 0x1f}, {&(0x7f00000033c0)="f1227e14d6324644918cd4dcf3326f7abb6e30858c2f5890a885c3f43cc5f66cffa1df67fb515481bb353a892009b1fe5f313c95b90a3b732929099a8cd6c56a58c28615170ff7503f61cbe9699e1a8cb3262a63d1edaf87227e98ca21f648916484248760b89f54feb4e0bbac0b586055018f30c44a56243ad7c6cfd5cabcfa1d494b5e1ad1207f97575b18f5cb8fa471cdb36e918e59507e560238ce02d80b825b678af87bb7052bb12214570dfa34f0e5944d2f3142564be20cecd767d011ccccdbfe22abd8ecf9e642467301bceeaa6e6c7ec60012a303a90ddb7134a6bd1cfaf1fedc07e51042acf9248f", 0xed}, {&(0x7f00000034c0)="a174e713aeb3d4f50b1c9ab8be2d1341c02ed601ce8a7793749cad77c5a3511f6d8a4d754e161bdb7a7fbf7c4fa399998435a6a19c41def72a9f1c42fd66edec7720875e2d1cc764397d80e8467bf48bf9e8d9e4b55963c96d34cb61ab5a89c526aab0e0b7c1bc5d1c77ce3ff62594eec260c8faaa02468f70f7", 0x7a}, {&(0x7f0000003540)="d4894296f46f52b1b70e8d9ccaf05fd7e626341fe33b5d15894a521978427bef7cb1f18a674c6f25749a46600a357efd5faa5453e191e7e1ed00860387a8ce46f8bd31e263", 0x45}, {&(0x7f00000035c0)="5f20d16d940fbdce1151c103e6d45f89a57e790c0cfbdf20b11d68715d95eba484243c14d54fd9afb54f1988996bb489a81c1ad08a7472a6b90229c67b3e537a7c7079da7b91474fce4be867f0822b45ced3bb8d3be3c643bb", 0x59}], 0x5, &(0x7f00000036c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x3, [@dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast]}, @cipso={0x86, 0x11, 0x3, [{0x7, 0x7, "fc737b2213"}, {0x5, 0x4, '|c'}]}, @cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @rr={0x7, 0x23, 0xf2, [@dev={0xac, 0x14, 0x14, 0x35}, @remote, @multicast2, @local, @broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x2c, 0x8f, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x5}, {@multicast2, 0xff}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@private=0xa010102, 0x7ff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @empty}}}], 0x128}}, {{&(0x7f0000003800)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003980)=[{&(0x7f0000003840)="efe9fc11eedbaa74e913be310b665b41690c8cec152325fa7be77e5043859a683b02fb05c0446c62a3dfaf37b442b20dcc25d4dab504351a0e9e2ed980cda96ca4650bff24850394819607fabc8f3177e94dc328b8a96bd489876b6a734743bf9a8c5d14de6d3f3f2e4ecb1b6aa84684be28da7a0db464f134253a7ae152766ceac4b106aebd4377", 0x88}, {&(0x7f0000003900)="20e519afac979e4ed1201625599cf2818650e975ad27a3ef5b918a", 0x1b}, {&(0x7f0000003940)="22f432e331934ecb4e5bcf37a2fe2ce024580b64c5c9eeeba34f93ada27923e9e9436afc2219a1093b32afa7e8", 0x2d}], 0x3, &(0x7f0000003a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x5, [{@private=0xa010102, 0xee}]}, @generic={0x88, 0x10, "5752998a72e0a0a02fa8ec25d869"}, @generic={0x1c, 0x12, "fe2d96e97a896331f99a04e8b1780df0"}, @timestamp={0x44, 0x10, 0xf8, 0x0, 0x2, [0x0, 0x9, 0x9]}, @generic={0x82, 0x12, "a65d8b73aa3f429477d18e701f01afc9"}, @generic={0x82, 0x2}, @timestamp={0x44, 0xc, 0x67, 0x0, 0x8, [0x10000, 0xffff8984]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @private=0xa010101}}}], 0xf0}}, {{&(0x7f0000003c40)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000003c80)="016648d5958b9af088fd34025a058bff1ba2624bb816a1e574270843b2d10f7ceeda53265a98cd838a330dab560e3e4b9fe9508a876736242ea8edb59a6791eee345fb9880206bfc186a0d9e928de6d71274c367e2002c3140239a8910f48a038a7bfa431ae8395387e678cb852afda52dbd093d6a51a2d8421399437e1e440b82b469e56b8b08708cdddf9bf8fdeaa69b72e0fdd8cc89675dfbda04c6e653d0ba7ef550292d2af107d0c4eb54c2414d6c07abd77cb36c40e468a5485514e5ad1e485d14590aefcee8bb22d74f9dc474dc9de6", 0xd3}, {0x0}], 0x2, &(0x7f0000004000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x88, 0x8, "7900afc9084e"}, @end]}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f00000040c0)="547eae8cd5e502f9d9989209fa8b992c7d85c9d616d7face4bea3a58d5b502adcd6938087951814c788028f066fe98d7cd1be842a11665ae7cdfef6d8aa0029b2845156a492083791579cf35c0ea72a11a9c9c6cfbbb0e162d74f071c03eeb6025bb40", 0x63}, {&(0x7f0000004140)="f974c2e9a42c8d80cd347540367ceab45c55e3b6ac2f5489c9ad218d20275c5ee4844b0b9df147780c9c7503f241ece2d8331dcd3fbe4c6d400aa2d9569b3767", 0x40}], 0x2, &(0x7f00000041c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf2, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x78}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xe3}, {@loopback, 0xffff}, {@multicast1, 0x2}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0xe8}}, {{&(0x7f00000042c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004840)=[{&(0x7f0000004300)="1b9ce6ef12d71b921287ac061d5a1a7998be63c5b42a2c3d23f34eb2edb6e5faf57527db2266", 0x26}, {&(0x7f0000004340)="da173486ef29628d292331a1c276f09a2cc61fa589b98d48da7329c001cb713089ec3b0fc7b3a2d907148f32138cb4fa543f06fe66f2b6aedc2ba2c91d711e544fcaa931b08347d97c077b73120971", 0x4f}, {&(0x7f00000043c0)="234bde84836a8ee7d49f744842b938e19b19cbc7450f9e05d638bc79f3e68c969fe9032994f02d50b5122907e94abad0e74a1766651e67", 0x37}, {&(0x7f0000004400)="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", 0xfd}, {&(0x7f0000004500)="9cf3b50bd8dbf843a9", 0x9}, {&(0x7f0000004540)="2904ca667618196e437b5fcfc29e5e8fb4d0193bd7dff8416ed95361588c15e9e1b7424d6feae85ab42ac37e0cea2f03bebdcb09990dff7baaf36b5a1c407147f7d36f145b5303be0fe4f594bbcb9989ed9b1ee5011878940ce81b8e0ef566456cefc0373c1364617221fc1625396da5cd243a72b36cc77c589f27ac6cc1b7288051cb9e3de3111e9d107bcd09d4d62d8296b4b39064f062ec315071dec673a15e724521fa56c021876fafc0a70aace985", 0xb1}, {&(0x7f0000004600)="b9090e4d1e958397025d0ae5bd796c1cd0f008757a9d3f04f318b7c1e4da528adcd64e50d470dcbc98e63e8d6b84c0a9defc05f7ea35e90a38fc9e441c887545f06c8501a82cc1797c540d5ba349a39c7bba4704d5810da9c6f1d567b8a578dc6fe7cde3a566c63d544508ed76886f8d841a98312309f21f289e9bb3efb8efffc763d075f05414c6a7a0da5c5374d0f5108258ba4c923e82c0815ed82015d07c", 0xa0}, {&(0x7f00000046c0)}, {&(0x7f0000004700)="2ae4dc06bdd4a0acfb4c35d84dc63dfd823776ff5e669c223923707154ea6aba6635a3bb47a0730a0b4e9aab0be672842d0f61bde8e5ea235cd9a0960c4108f332a33e0a971a02a5ae3821893f80794699987d81639d53ba4bfbb9c3ff4198fd4457b294af9a84775b473a09184e5e88ba342b170fe7b39205dc67b7c8edf712d7f403978d79d14bb252b1677c149c5ec0c1b463845878d86e8951c17b1e631e9f3c961641304b3c68988949248debeaaca5", 0xb2}, {&(0x7f00000047c0)="55161eb1bdea4cc3d35fb27e18800a5e9093f51d1bd8452033073d63ed1e9bfb62f218920c668e4ce465a695f6211ca88974ccf73803ddb12526188236d37e6ce9c58d309544d5e87eab3288ddea7b4695a9c3d6083ac2865a1ebc66fafd18dd9ccce11ad5a09731dadb26de397ac46e", 0x70}], 0xa, &(0x7f0000004900)=[@ip_ttl={{0x14}}], 0x18}}], 0x9, 0x0) 0s ago: executing program 0 (id=1449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x38, 0x0, &(0x7f00000010c0)) kernel console output (not intermixed with test programs): usb 5-1: USB disconnect, device number 12 [ 241.257957][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 241.608582][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 241.974944][ T3560] Bluetooth: hci7: command tx timeout [ 242.391457][ T6816] netlink: 'syz.1.791': attribute type 1 has an invalid length. [ 242.400524][ T6816] netlink: 'syz.1.791': attribute type 3 has an invalid length. [ 242.434739][ T4010] device hsr_slave_0 left promiscuous mode [ 242.445186][ T4010] device hsr_slave_1 left promiscuous mode [ 242.493450][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.546727][ T6816] netlink: 76 bytes leftover after parsing attributes in process `syz.1.791'. [ 242.564946][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.592806][ T6824] loop2: detected capacity change from 0 to 4096 [ 242.617372][ T6824] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 242.643692][ T4010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.685747][ T4010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.691939][ T6824] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 242.706625][ T6824] ntfs3: loop2: Failed to load $Extend. [ 242.750014][ T4010] device bridge_slave_1 left promiscuous mode [ 242.765093][ T4010] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.910409][ T4010] device bridge_slave_0 left promiscuous mode [ 242.944888][ T4010] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.727264][ T4010] device veth1_macvtap left promiscuous mode [ 243.737425][ T4010] device veth0_macvtap left promiscuous mode [ 243.743998][ T4010] device veth1_vlan left promiscuous mode [ 243.750982][ T4010] device veth0_vlan left promiscuous mode [ 244.055036][ T3557] Bluetooth: hci7: command tx timeout [ 244.224673][ T3703] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 244.644999][ T3703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.678502][ T3703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.697222][ T3703] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 244.714168][ T3703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.742886][ T3703] usb 3-1: config 0 descriptor?? [ 245.207588][ T4010] team0 (unregistering): Port device team_slave_1 removed [ 245.242753][ T3703] sony 0003:1345:3008.0014: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 245.255701][ T3703] sony 0003:1345:3008.0014: failed to claim input [ 245.275556][ T4010] team0 (unregistering): Port device team_slave_0 removed [ 245.339065][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.391179][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.453785][ T3703] usb 3-1: USB disconnect, device number 21 [ 246.012708][ T4010] bond0 (unregistering): Released all slaves [ 246.110193][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 246.135727][ T3557] Bluetooth: hci7: command tx timeout [ 246.320105][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 246.700953][ T6848] loop2: detected capacity change from 0 to 32768 [ 246.845654][ T6848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.799 (6848) [ 247.366041][ T6848] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.413811][ T6848] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 247.469179][ T6848] BTRFS info (device loop2): using free space tree [ 247.524250][ T6869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.975036][ T14] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 247.986149][ T6724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.094307][ T6724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.193544][ T6724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.298141][ T6724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.465814][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 248.530099][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 248.663191][ T14] usb 5-1: New USB device found, idVendor=045e, idProduct=2297, bcdDevice= 0.00 [ 248.718603][ T6881] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 248.725268][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.735382][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 248.742293][ T6883] vhci_hcd: connection closed [ 248.746806][ T4012] vhci_hcd: stop threads [ 248.797223][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.820417][ T4012] vhci_hcd: release socket [ 248.872373][ T6848] BTRFS info (device loop2): enabling ssd optimizations [ 248.872419][ T4012] vhci_hcd: disconnect device [ 248.894264][ T14] usb 5-1: config 0 descriptor?? [ 248.905762][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.934688][ T5058] vhci_hcd: vhci_device speed not set [ 248.982175][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.997603][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.073078][ T6724] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.236914][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.260652][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.320564][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.327822][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.889358][ T3555] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.924098][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.977476][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.037933][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.049418][ T14] hid-generic 0003:045E:2297.0015: unknown main item tag 0x0 [ 250.115260][ T14] hid-generic 0003:045E:2297.0015: hidraw0: USB HID v0.00 Device [HID 045e:2297] on usb-dummy_hcd.4-1/input0 [ 250.138805][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.146011][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.414165][ T3859] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 250.805668][ T3859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 250.928889][ T3859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 251.035830][ T6724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.085482][ T3859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.104719][ T6724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.143748][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.144698][ T3859] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.206657][ T3859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.245630][ T3859] usb 4-1: config 0 descriptor?? [ 251.264227][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.265083][ T6917] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.275611][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.306516][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.345752][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.367546][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.397516][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.436097][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.445204][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.453813][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.483188][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.504264][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.555590][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.563705][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.756540][ T3859] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x3 [ 251.764007][ T3859] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x7 [ 251.806024][ T3859] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 251.828854][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.843727][ T6936] loop1: detected capacity change from 0 to 512 [ 251.868526][ T3867] usb 5-1: USB disconnect, device number 13 [ 251.892413][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.908168][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.916280][ T3859] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 251.960156][ T6936] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 251.981793][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.991472][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.018873][ T6946] loop2: detected capacity change from 0 to 128 [ 252.053448][ T6936] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 252.105354][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.115449][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.127864][ T6724] device veth0_vlan entered promiscuous mode [ 252.148832][ T6946] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 252.155407][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.175855][ T3867] usb 4-1: USB disconnect, device number 17 [ 252.187477][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.222902][ T6724] device veth1_vlan entered promiscuous mode [ 252.265196][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.293857][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.348016][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.383152][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.418170][ T6724] device veth0_macvtap entered promiscuous mode [ 252.437987][ T5103] EXT4-fs (loop1): unmounting filesystem. [ 252.495296][ T6724] device veth1_macvtap entered promiscuous mode [ 252.584068][ T6956] loop4: detected capacity change from 0 to 512 [ 252.605246][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.653548][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.688201][ T6956] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 252.746939][ T6956] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.765381][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.786672][ T6956] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 252.819041][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.865572][ T6956] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 252.880703][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.933013][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.936545][ T6956] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 252.950120][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.967409][ T6956] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.816: bg 0: block 40: padding at end of block bitmap is not set [ 252.984620][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.999585][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.007486][ T6956] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 253.011261][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.034136][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.055055][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.055376][ T6956] EXT4-fs (loop4): 1 truncate cleaned up [ 253.065260][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.081460][ T3777] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 253.089741][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.089801][ T6956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 253.102298][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.123867][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.141884][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.165971][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.195752][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.203977][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.221082][ T3776] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 253.242366][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.255785][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.283582][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.303626][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.334443][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.354869][ T3777] usb 3-1: Using ep0 maxpacket: 8 [ 253.367188][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.390711][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.410799][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.426457][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.438291][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.449890][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.465813][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.476696][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.487299][ T3777] usb 3-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 253.496964][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.507935][ T3777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.516483][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.528652][ T3777] usb 3-1: config 0 descriptor?? [ 253.537608][ T6724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.548976][ T6724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.560511][ T6200] EXT4-fs (loop4): unmounting filesystem. [ 253.586943][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.616213][ T3776] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.634854][ T3776] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 253.670841][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.680709][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.689559][ T3776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.711202][ T6724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.726122][ T3776] usb 4-1: config 0 descriptor?? [ 253.741440][ T6724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.762732][ T6724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.779284][ T6959] loop1: detected capacity change from 0 to 40427 [ 253.784942][ T6724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.810159][ T5058] usb 3-1: USB disconnect, device number 22 [ 253.844163][ T6959] F2FS-fs (loop1): invalid crc value [ 253.875966][ T6959] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.005843][ T3778] usb 4-1: USB disconnect, device number 18 [ 254.013204][ T6959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.123846][ T3962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.162995][ T3962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.195910][ T4012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.202053][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.204243][ T4012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.266750][ T6959] overlayfs: failed to resolve './file0': -2 [ 254.280906][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.412442][ T5103] syz-executor: attempt to access beyond end of device [ 254.412442][ T5103] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.894640][ T5058] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 255.434966][ T5058] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 255.470970][ T5058] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.510389][ T5058] usb 3-1: config 0 has no interface number 0 [ 255.533078][ T5058] usb 3-1: config 0 interface 31 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 255.562181][ T7001] loop4: detected capacity change from 0 to 4096 [ 255.600659][ T5058] usb 3-1: config 0 interface 31 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 255.780097][ T5058] usb 3-1: New USB device found, idVendor=04f2, idProduct=b071, bcdDevice=40.e6 [ 255.805064][ T7001] ntfs: volume version 3.1. [ 255.850012][ T5058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.921926][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.937106][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.937848][ T5058] usb 3-1: config 0 descriptor?? [ 255.994846][ T7007] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 256.001511][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 256.009262][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 256.009562][ T7011] vhci_hcd: connection closed [ 256.026088][ T3961] vhci_hcd: stop threads [ 256.037982][ T5058] usb 3-1: Found UVC 0.00 device (04f2:b071) [ 256.064612][ T3961] vhci_hcd: release socket [ 256.069100][ T3961] vhci_hcd: disconnect device [ 256.084633][ T5058] usb 3-1: No valid video chain found. [ 256.465743][ T5058] usb 3-1: USB disconnect, device number 23 [ 257.067457][ T7029] netlink: 'syz.4.829': attribute type 25 has an invalid length. [ 257.145827][ T7029] netlink: 'syz.4.829': attribute type 7 has an invalid length. [ 257.710778][ T7010] loop1: detected capacity change from 0 to 32768 [ 257.854192][ T7010] XFS (loop1): Mounting V5 Filesystem [ 257.942704][ T7010] XFS (loop1): Starting recovery (logdev: internal) [ 258.012638][ T7010] XFS (loop1): Ending recovery (logdev: internal) [ 258.095702][ T5103] XFS (loop1): Unmounting Filesystem [ 258.114763][ T5008] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 258.509207][ T5008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.330293][ T5008] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 259.356889][ T5008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.379862][ T5008] usb 3-1: config 0 descriptor?? [ 259.743312][ T3866] usb 3-1: USB disconnect, device number 24 [ 260.359446][ T7068] netlink: 6 bytes leftover after parsing attributes in process `syz.1.837'. [ 260.920028][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.847'. [ 260.974822][ T3867] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 261.394978][ T3867] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 261.432135][ T3867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.662510][ T3867] usb 2-1: config 0 has no interface number 0 [ 261.669830][ T3867] usb 2-1: config 0 interface 31 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 261.681327][ T3867] usb 2-1: config 0 interface 31 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 261.704774][ T3867] usb 2-1: New USB device found, idVendor=04f2, idProduct=b071, bcdDevice=40.e6 [ 261.728512][ T3867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.780163][ T3867] usb 2-1: config 0 descriptor?? [ 262.105409][ T3867] usb 2-1: Found UVC 0.00 device (04f2:b071) [ 262.185913][ T3867] usb 2-1: No valid video chain found. [ 262.305071][ T3867] usb 2-1: USB disconnect, device number 15 [ 262.661300][ T3778] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 262.748265][ T7102] loop2: detected capacity change from 0 to 4096 [ 263.223517][ T7102] NILFS (loop2): invalid segment: Checksum error in segment payload [ 263.350191][ T7102] NILFS (loop2): trying rollback from an earlier position [ 263.616127][ T7102] NILFS (loop2): recovery complete [ 263.654841][ T7107] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.674955][ T3778] usb 5-1: Using ep0 maxpacket: 8 [ 263.814856][ T3778] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.864930][ T3778] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 263.900640][ T3778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.936477][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.859'. [ 263.957407][ T3778] usb 5-1: config 0 descriptor?? [ 265.779695][ T3867] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 265.782171][ T3778] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 265.988434][ T3778] usb 5-1: USB disconnect, device number 14 [ 266.224910][ T3867] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 266.247861][ T7111] loop1: detected capacity change from 0 to 40427 [ 266.262468][ T3867] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 266.281859][ T3867] usb 4-1: config 0 has no interface number 0 [ 266.302121][ T3867] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 266.309087][ T7111] F2FS-fs (loop1): invalid crc value [ 266.344741][ T3867] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.355428][ T3867] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 266.364504][ T3867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.376849][ T3867] usb 4-1: config 0 descriptor?? [ 266.383381][ T7111] F2FS-fs (loop1): Found nat_bits in checkpoint [ 266.469928][ T7153] loop2: detected capacity change from 0 to 4096 [ 266.517947][ T7153] NILFS (loop2): invalid segment: Checksum error in segment payload [ 266.527892][ T7111] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 266.546198][ T7153] NILFS (loop2): trying rollback from an earlier position [ 266.578779][ T7111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 266.590967][ T7153] NILFS (loop2): recovery complete [ 266.643713][ T3867] usb 4-1: USB disconnect, device number 19 [ 266.645550][ T7155] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.766551][ T5103] syz-executor: attempt to access beyond end of device [ 266.766551][ T5103] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.899271][ T7162] loop2: detected capacity change from 0 to 512 [ 267.411330][ T7166] tipc: Started in network mode [ 267.442721][ T7166] tipc: Node identity ff000000, cluster identity 4711 [ 267.594840][ T7166] tipc: Node number set to 4278190080 [ 267.742355][ T7165] dccp_close: ABORT with 13976 bytes unread [ 268.083873][ T7182] loop2: detected capacity change from 0 to 256 [ 268.181963][ T7184] loop1: detected capacity change from 0 to 16 [ 268.226577][ T7184] erofs: (device loop1): mounted with root inode @ nid 36. [ 268.267736][ T7188] capability: warning: `syz.2.880' uses 32-bit capabilities (legacy support in use) [ 268.754854][ T3778] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 268.759729][ T7177] overlayfs: failed to resolve './file0': -2 [ 268.910881][ T34] tipc: Subscription rejected, illegal request [ 269.145096][ T3778] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 269.167987][ T3778] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 269.177523][ T3778] usb 2-1: config 0 has no interface number 0 [ 269.185778][ T3778] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 269.214630][ T3778] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.234410][ T3778] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 269.244039][ T3778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.257529][ T3778] usb 2-1: config 0 descriptor?? [ 269.537409][ T3778] usb 2-1: USB disconnect, device number 16 [ 270.774716][ T3777] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 270.877393][ T7253] netlink: 'syz.0.904': attribute type 21 has an invalid length. [ 270.895481][ T7253] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 271.187390][ T3777] usb 3-1: Using ep0 maxpacket: 8 [ 271.449060][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.522322][ T3777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.562937][ T3777] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 271.604952][ T3777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.636796][ T3777] usb 3-1: config 0 descriptor?? [ 272.084635][ T5059] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 272.116760][ T3777] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 272.154775][ T3777] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 272.169381][ T3777] a4tech 0003:09DA:022B.0017: unknown main item tag 0x0 [ 272.177174][ T7271] netlink: 'syz.4.912': attribute type 7 has an invalid length. [ 272.211059][ T3777] a4tech 0003:09DA:022B.0017: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.2-1/input0 [ 272.214848][ T7271] netlink: 'syz.4.912': attribute type 39 has an invalid length. [ 272.305796][ T7272] netlink: 'syz.4.912': attribute type 7 has an invalid length. [ 272.318696][ T3777] usb 3-1: USB disconnect, device number 25 [ 272.345443][ T5059] usb 1-1: Using ep0 maxpacket: 32 [ 272.351380][ T7272] netlink: 'syz.4.912': attribute type 39 has an invalid length. [ 272.464192][ T7256] loop1: detected capacity change from 0 to 40427 [ 272.464811][ T5059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 272.508099][ T5059] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 272.523002][ T7256] F2FS-fs (loop1): Found nat_bits in checkpoint [ 272.537929][ T5059] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 272.578031][ T5059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.599266][ T5059] usb 1-1: config 0 descriptor?? [ 272.610788][ T7256] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 272.617804][ T7256] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 272.624993][ T7265] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 272.632417][ T7256] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.645818][ T5059] hub 1-1:0.0: USB hub found [ 273.084690][ T5059] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 273.247022][ T3557] Bluetooth: hci2: command 0x0406 tx timeout [ 273.458124][ T5059] hid-generic 0003:046D:C314.0018: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 273.591041][ T5103] syz-executor: attempt to access beyond end of device [ 273.591041][ T5103] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.482909][ T7308] loop2: detected capacity change from 0 to 16 [ 274.577446][ T7310] loop4: detected capacity change from 0 to 64 [ 274.602426][ T7308] erofs: (device loop2): mounted with root inode @ nid 36. [ 274.624862][ T7] usb 1-1: USB disconnect, device number 8 [ 274.766193][ T6200] hfs: node 4:3 still has 1 user(s)! [ 274.901121][ T7316] netlink: 'syz.4.925': attribute type 3 has an invalid length. [ 275.006541][ T7312] loop2: detected capacity change from 0 to 8192 [ 275.024505][ T7312] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 275.037874][ T7320] netlink: 18 bytes leftover after parsing attributes in process `syz.4.927'. [ 275.047120][ T7312] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 275.065859][ T7312] REISERFS (device loop2): using ordered data mode [ 275.085729][ T7312] reiserfs: using flush barriers [ 275.096088][ T7320] device bridge0 entered promiscuous mode [ 275.105835][ T7320] device bridge0 left promiscuous mode [ 275.111080][ T7312] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.144670][ T7] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 275.151029][ T7312] REISERFS (device loop2): checking transaction log (loop2) [ 275.180398][ T7312] REISERFS (device loop2): Using r5 hash to sort names [ 275.468981][ T7312] reiserfs: enabling write barrier flush mode [ 275.912708][ T7312] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 276.125365][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 276.145561][ T26] audit: type=1804 audit(2000000142.619:16): pid=7340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.924" name="/newroot/234/file0/file1" dev="loop2" ino=2 res=1 errno=0 [ 276.167311][ T7342] loop1: detected capacity change from 0 to 256 [ 276.176688][ T7341] loop4: detected capacity change from 0 to 16 [ 276.203479][ T7341] erofs: (device loop4): mounted with root inode @ nid 36. [ 276.255036][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.285127][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.319273][ T7] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 276.343600][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.381841][ T7] usb 4-1: config 0 descriptor?? [ 276.409929][ T7348] loop4: detected capacity change from 0 to 128 [ 276.681343][ T9] tipc: Subscription rejected, illegal request [ 276.728713][ T5059] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 276.995228][ T5059] usb 2-1: Using ep0 maxpacket: 8 [ 277.155186][ T5059] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.243176][ T5059] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 277.384864][ T5059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.560758][ T7] a4tech 0003:09DA:022B.0019: unknown main item tag 0x0 [ 277.572356][ T7] a4tech 0003:09DA:022B.0019: unknown main item tag 0x0 [ 277.579715][ T7] a4tech 0003:09DA:022B.0019: unknown main item tag 0x0 [ 277.611532][ T5059] usb 2-1: config 0 descriptor?? [ 277.629766][ T7] a4tech 0003:09DA:022B.0019: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.3-1/input0 [ 277.661212][ T7] usb 4-1: USB disconnect, device number 20 [ 277.863826][ T5059] usb 2-1: USB disconnect, device number 17 [ 277.914184][ T7372] loop2: detected capacity change from 0 to 512 [ 277.949150][ T7372] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 278.023850][ T7377] loop4: detected capacity change from 0 to 256 [ 278.104048][ T7372] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.947: iget: bad extended attribute block 19 [ 278.134360][ T7372] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.947: couldn't read orphan inode 15 (err -117) [ 278.176207][ T7372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 278.273462][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 278.539272][ T3962] tipc: Subscription rejected, illegal request [ 279.424272][ T7399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.940'. [ 280.584639][ T3859] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 280.789557][ T7375] device batadv0 entered promiscuous mode [ 280.824726][ T3859] usb 2-1: Using ep0 maxpacket: 8 [ 280.944800][ T3859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.979764][ T3859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.011756][ T3859] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 281.062886][ T3859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.078202][ T3777] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.090740][ T3859] usb 2-1: config 0 descriptor?? [ 281.102552][ T7373] device batadv0 left promiscuous mode [ 281.334680][ T3777] usb 5-1: Using ep0 maxpacket: 8 [ 281.465045][ T3777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.492232][ T3777] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 281.513766][ T3777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.531887][ T3777] usb 5-1: config 0 descriptor?? [ 281.609216][ T3859] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 281.733561][ T3859] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 281.869681][ T3859] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 282.094421][ T3859] a4tech 0003:09DA:022B.001A: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 282.358535][ T3777] usb 5-1: USB disconnect, device number 15 [ 282.377332][ T3859] usb 2-1: USB disconnect, device number 18 [ 282.672328][ T7438] mmap: syz.1.970 (7438) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 282.914976][ T7436] loop4: detected capacity change from 0 to 8192 [ 282.971905][ T7436] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 283.054650][ T7436] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 283.099190][ T7436] REISERFS (device loop4): using ordered data mode [ 283.123493][ T7436] reiserfs: using flush barriers [ 283.158999][ T7436] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 283.189423][ T7454] loop2: detected capacity change from 0 to 512 [ 283.212430][ T7436] REISERFS (device loop4): checking transaction log (loop4) [ 283.245957][ T7436] REISERFS (device loop4): Using r5 hash to sort names [ 283.256563][ T7454] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.977: iget: bad extended attribute block 1 [ 283.315435][ T7454] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.977: couldn't read orphan inode 15 (err -117) [ 283.383932][ T7436] reiserfs: enabling write barrier flush mode [ 283.403818][ T7454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 283.418126][ T7436] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 283.468426][ T7454] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz.2.977: lblock 0 mapped to illegal pblock 13 (length 1) [ 283.540195][ T7454] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.2.977: error -117 reading directory block [ 284.107899][ T26] audit: type=1804 audit(2000000150.589:17): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.971" name="/newroot/76/file0/file1" dev="loop4" ino=2 res=1 errno=0 [ 284.129798][ T7457] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 284.205721][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 284.234817][ T3777] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 284.509613][ T3777] usb 1-1: Using ep0 maxpacket: 8 [ 284.624853][ T3778] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 284.644851][ T3777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.664638][ T3777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.694827][ T3777] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 284.704010][ T3777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.734123][ T3777] usb 1-1: config 0 descriptor?? [ 284.890799][ T3778] usb 3-1: Using ep0 maxpacket: 8 [ 285.015033][ T3778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.034631][ T3778] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 285.044468][ T3778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.083136][ T3778] usb 3-1: config 0 descriptor?? [ 285.206511][ T3777] a4tech 0003:09DA:022B.001B: unknown main item tag 0x0 [ 285.218213][ T3777] a4tech 0003:09DA:022B.001B: unknown main item tag 0x0 [ 285.228852][ T3777] a4tech 0003:09DA:022B.001B: unknown main item tag 0x0 [ 285.276451][ T3777] a4tech 0003:09DA:022B.001B: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.0-1/input0 [ 285.354363][ T3777] usb 3-1: USB disconnect, device number 26 [ 285.419906][ T3778] usb 1-1: USB disconnect, device number 9 [ 285.657958][ T7490] loop1: detected capacity change from 0 to 512 [ 285.703895][ T7490] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.992: iget: bad extended attribute block 1 [ 285.724707][ T3776] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 285.733081][ T7490] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.992: couldn't read orphan inode 15 (err -117) [ 285.755236][ T7490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 285.792191][ T7490] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 13: comm syz.1.992: lblock 0 mapped to illegal pblock 13 (length 1) [ 285.850610][ T7490] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.1.992: error -117 reading directory block [ 285.920783][ T5103] EXT4-fs (loop1): unmounting filesystem. [ 285.966901][ T3776] usb 5-1: Using ep0 maxpacket: 32 [ 286.094815][ T3776] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.142004][ T3776] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 286.172704][ T3776] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ad.dc [ 286.223035][ T3776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.268750][ T3776] usb 5-1: config 0 descriptor?? [ 286.302892][ T7498] loop1: detected capacity change from 0 to 8192 [ 286.353873][ T7498] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 286.410643][ T7498] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 286.439897][ T7498] REISERFS (device loop1): using ordered data mode [ 286.464997][ T7498] reiserfs: using flush barriers [ 286.481036][ T7498] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.509799][ T7498] REISERFS (device loop1): checking transaction log (loop1) [ 286.522895][ T7498] REISERFS (device loop1): Using r5 hash to sort names [ 286.574127][ T7498] reiserfs: enabling write barrier flush mode [ 286.584717][ T3776] usb 5-1: string descriptor 0 read error: -71 [ 286.596000][ T3776] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 286.628363][ T7498] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 286.646072][ T3776] usb 5-1: qt2_attach - failed to power on unit: -71 [ 286.669823][ T3776] quatech2: probe of 5-1:0.0 failed with error -71 [ 286.711698][ T3776] usb 5-1: USB disconnect, device number 16 [ 286.739347][ T26] audit: type=1804 audit(2000000153.219:18): pid=7498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.995" name="/newroot/114/file0/file1" dev="loop1" ino=2 res=1 errno=0 [ 286.771464][ T7521] loop2: detected capacity change from 0 to 512 [ 286.791906][ T7521] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1004: iget: bad extended attribute block 1 [ 286.826458][ T7521] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1004: couldn't read orphan inode 15 (err -117) [ 286.849583][ T7521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 286.909421][ T7521] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz.2.1004: lblock 0 mapped to illegal pblock 13 (length 1) [ 286.942077][ T7521] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz.2.1004: error -117 reading directory block [ 286.988463][ T3555] EXT4-fs (loop2): unmounting filesystem. [ 287.095518][ T7528] loop2: detected capacity change from 0 to 4096 [ 287.142571][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 287.151890][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 287.185811][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 287.193715][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 287.214785][ T3859] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 287.234839][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 287.249227][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 287.272778][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 287.284049][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 287.302704][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 287.317756][ T7528] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 287.454618][ T3859] usb 2-1: Using ep0 maxpacket: 8 [ 287.574927][ T3859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.595252][ T3859] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 287.625157][ T3859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.653090][ T3859] usb 2-1: config 0 descriptor?? [ 287.908925][ T3590] usb 2-1: USB disconnect, device number 19 [ 288.214645][ T3859] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 288.775216][ T3859] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.74 [ 288.822244][ T3859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.924376][ T3859] usb 3-1: Product: syz [ 288.986660][ T3859] usb 3-1: Manufacturer: syz [ 289.080709][ T3859] usb 3-1: SerialNumber: syz [ 289.180047][ T3859] usb 3-1: config 0 descriptor?? [ 289.264955][ T3859] as10x_usb: device has been detected [ 289.296091][ T7571] loop1: detected capacity change from 0 to 512 [ 289.296614][ T3859] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 289.423757][ T3859] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 289.476545][ T4499] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.553723][ T3859] as10x_usb: error during firmware upload part1 [ 289.566328][ T3859] Registered device PCTV Systems picoStick (74e) [ 289.592654][ T3859] usb 3-1: USB disconnect, device number 27 [ 289.659268][ T3859] Unregistered device PCTV Systems picoStick (74e) [ 289.664132][ T3859] as10x_usb: device has been disconnected [ 290.090807][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1032'. [ 290.777478][ T4101] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 292.574743][ T4101] usb 2-1: Using ep0 maxpacket: 8 [ 292.694951][ T4101] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.724945][ T4101] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 292.754285][ T4101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.784779][ T4101] usb 2-1: config 0 descriptor?? [ 293.042219][ T4101] usb 2-1: USB disconnect, device number 20 [ 293.414727][ T3778] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 293.476198][ T6137] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 293.571532][ T7637] loop4: detected capacity change from 0 to 512 [ 293.629036][ T3563] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.718936][ T7643] Zero length message leads to an empty skb [ 293.734961][ T6137] usb 1-1: Using ep0 maxpacket: 16 [ 293.855097][ T6137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.883975][ T6137] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.897134][ T6137] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.911585][ T6137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.921737][ T6137] usb 1-1: config 0 descriptor?? [ 294.135713][ T3767] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.149138][ T3767] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.395163][ T6137] usbhid 1-1:0.0: can't add hid device: -71 [ 294.446041][ T6137] usbhid: probe of 1-1:0.0 failed with error -71 [ 294.479482][ T6137] usb 1-1: USB disconnect, device number 10 [ 295.387126][ T3778] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.74 [ 295.434720][ T3778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.452980][ T3778] usb 3-1: Product: syz [ 295.457293][ T3778] usb 3-1: Manufacturer: syz [ 295.461908][ T3778] usb 3-1: SerialNumber: syz [ 295.490845][ T3778] usb 3-1: config 0 descriptor?? [ 295.547474][ T3778] as10x_usb: device has been detected [ 295.572600][ T3778] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 295.656058][ T3778] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 295.676686][ T3778] as10x_usb: error during firmware upload part1 [ 295.691937][ T3778] Registered device PCTV Systems picoStick (74e) [ 295.799691][ T3859] usb 3-1: USB disconnect, device number 28 [ 295.848797][ T3859] Unregistered device PCTV Systems picoStick (74e) [ 295.850277][ T3859] as10x_usb: device has been disconnected [ 296.124950][ T3557] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 296.670612][ T7678] loop4: detected capacity change from 0 to 8192 [ 296.682622][ T7678] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 296.706580][ T7678] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 296.716044][ T7678] REISERFS (device loop4): using ordered data mode [ 296.723012][ T7678] reiserfs: using flush barriers [ 296.729421][ T7678] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.747814][ T7678] REISERFS (device loop4): checking transaction log (loop4) [ 296.756445][ T7678] REISERFS (device loop4): Using r5 hash to sort names [ 296.763544][ T7678] REISERFS (device loop4): using 3.5.x disk format [ 296.771258][ T7678] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 297.164786][ T3859] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 297.284743][ T5008] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 297.532330][ T5008] usb 5-1: Using ep0 maxpacket: 32 [ 297.534857][ T3859] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.555269][ T3859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.645274][ T3859] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.664988][ T3859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.683378][ T3859] usb 1-1: SerialNumber: syz [ 298.015185][ T3859] usb 1-1: invalid UAC_HEADER (v1) [ 298.049172][ T3767] Bluetooth: hci5: Frame reassembly failed (-90) [ 298.308477][ T5008] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 298.317794][ T5008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.328009][ T5008] usb 5-1: config 0 has no interface number 0 [ 298.334702][ T5008] usb 5-1: config 0 interface 169 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.336692][ T3859] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 298.394665][ T3859] usb 1-1: USB disconnect, device number 11 [ 298.397289][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.534882][ T5008] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=58.19 [ 298.560634][ T5008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.572555][ T5008] usb 5-1: Product: syz [ 298.580567][ T5008] usb 5-1: Manufacturer: syz [ 298.586048][ T5008] usb 5-1: SerialNumber: syz [ 298.592858][ T5008] usb 5-1: config 0 descriptor?? [ 298.807868][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'. [ 298.863546][ T5008] usb 5-1: USB disconnect, device number 17 [ 299.884814][ T3557] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 299.984790][ T3777] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 300.244897][ T3777] usb 2-1: Using ep0 maxpacket: 16 [ 300.365926][ T3777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.403968][ T3777] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 300.468710][ T3777] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 300.489560][ T3777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.527894][ T3777] usb 2-1: config 0 descriptor?? [ 300.620207][ T7743] could not allocate digest TFM handle rmd128-generic [ 300.723882][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1085'. [ 300.724738][ T3590] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 301.640779][ T56] Bluetooth: hci5: Frame reassembly failed (-90) [ 301.774807][ T3590] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 301.796980][ T3590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.872341][ T3590] usb 1-1: config 0 descriptor?? [ 301.935774][ T3590] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 302.142029][ T3590] usb 1-1: USB disconnect, device number 12 [ 302.274840][ T3777] usbhid 2-1:0.0: can't add hid device: -71 [ 302.284047][ T3777] usbhid: probe of 2-1:0.0 failed with error -71 [ 302.318728][ T3777] usb 2-1: USB disconnect, device number 21 [ 302.360937][ T7788] loop1: detected capacity change from 0 to 256 [ 302.400877][ T7788] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 302.413852][ T7788] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 302.519715][ T7778] loop2: detected capacity change from 0 to 40427 [ 302.530383][ T7778] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 302.538947][ T7778] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 302.571164][ T7778] F2FS-fs (loop2): invalid crc value [ 302.580409][ T7778] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.622015][ T7778] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 302.629440][ T7778] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.872505][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 303.021225][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1092'. [ 303.489983][ T3777] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 303.503378][ T3960] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 303.520382][ T3960] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 303.614669][ T3859] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 303.644922][ T3557] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 303.892395][ T3777] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.904040][ T3777] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.924125][ T3777] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.933554][ T3777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.984809][ T3859] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 303.984887][ T7790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.002250][ T3859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.022361][ T3859] usb 1-1: config 0 descriptor?? [ 304.184614][ T3590] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 304.288787][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.302359][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.392105][ T6137] usb 2-1: USB disconnect, device number 22 [ 304.545080][ T3859] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 304.564756][ T3859] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 304.575277][ T3867] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 304.585403][ T3859] [drm:udl_init] *ERROR* Selecting channel failed [ 304.619618][ T3859] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 304.629841][ T3859] [drm] Initialized udl on minor 2 [ 304.661401][ T3859] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.683558][ T3859] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 304.704725][ T3590] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=3b.74 [ 304.713814][ T3590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.734669][ T3859] usb 1-1: USB disconnect, device number 13 [ 304.751855][ T3590] usb 5-1: Product: syz [ 304.761567][ T3590] usb 5-1: Manufacturer: syz [ 304.773985][ T3590] usb 5-1: SerialNumber: syz [ 304.790043][ T3590] usb 5-1: config 0 descriptor?? [ 304.815010][ T3867] usb 3-1: Using ep0 maxpacket: 16 [ 304.839131][ T3590] as10x_usb: device has been detected [ 304.855548][ T3590] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 304.877343][ T3590] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 304.891754][ T3590] as10x_usb: error during firmware upload part1 [ 304.899266][ T3590] Registered device PCTV Systems picoStick (74e) [ 304.934852][ T3867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.965992][ T3867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 304.979981][ T3867] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 304.989905][ T3867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.008061][ T3867] usb 3-1: config 0 descriptor?? [ 305.064109][ T3776] usb 5-1: USB disconnect, device number 18 [ 305.089937][ T3776] Unregistered device PCTV Systems picoStick (74e) [ 305.095006][ T3776] as10x_usb: device has been disconnected [ 305.364785][ T3867] usbhid 3-1:0.0: can't add hid device: -71 [ 305.382546][ T3867] usbhid: probe of 3-1:0.0 failed with error -71 [ 305.405381][ T3867] usb 3-1: USB disconnect, device number 29 [ 305.574683][ T3777] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 305.615797][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 305.852780][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1121'. [ 306.002649][ T3777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.034234][ T3777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.061097][ T3777] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 306.080270][ T3777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.109122][ T3777] usb 2-1: config 0 descriptor?? [ 306.154641][ T3590] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 306.194845][ T3867] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 306.350550][ T7836] netlink: 'syz.1.1112': attribute type 4 has an invalid length. [ 306.399720][ T7836] netlink: 'syz.1.1112': attribute type 4 has an invalid length. [ 306.515021][ T3590] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 306.526033][ T3590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.537476][ T3590] usb 1-1: config 0 descriptor?? [ 306.555251][ T3867] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.566842][ T3867] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.579992][ T3867] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.589998][ T3867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.615495][ T7861] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 306.625809][ T7871] loop2: detected capacity change from 0 to 40427 [ 306.633949][ T7871] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 306.646455][ T3777] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 306.656309][ T7871] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 306.665911][ T3777] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 306.695119][ T3777] arvo 0003:1E7D:30D4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 306.716457][ T7871] F2FS-fs (loop2): invalid crc value [ 306.733776][ T7871] F2FS-fs (loop2): Found nat_bits in checkpoint [ 306.774748][ T6137] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 306.778739][ T7871] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 306.792564][ T7871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 306.836402][ T3555] syz-executor: attempt to access beyond end of device [ 306.836402][ T3555] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 306.854958][ T3777] arvo 0003:1E7D:30D4.001C: couldn't init struct arvo_device [ 306.862460][ T3777] arvo 0003:1E7D:30D4.001C: couldn't install keyboard [ 306.903182][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.912768][ T3777] arvo: probe of 0003:1E7D:30D4.001C failed with error -71 [ 306.914144][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.932028][ T3777] usb 2-1: USB disconnect, device number 23 [ 307.031658][ T5008] usb 5-1: USB disconnect, device number 19 [ 307.064725][ T6137] usb 4-1: Using ep0 maxpacket: 8 [ 307.124936][ T3590] [drm] vendor descriptor length:b9 data:20 30 c4 a4 1b 38 94 62 92 09 29 [ 307.143730][ T3590] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 307.165969][ T3590] [drm:udl_init] *ERROR* Selecting channel failed [ 307.184815][ T6137] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 307.213775][ T3590] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 307.221866][ T6137] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 307.232897][ T3590] [drm] Initialized udl on minor 2 [ 307.238804][ T6137] usb 4-1: config 135 has no interface number 0 [ 307.246412][ T6137] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.264789][ T3590] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 307.273871][ T3590] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 307.284730][ T3590] usb 1-1: USB disconnect, device number 14 [ 307.414768][ T6137] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 307.430428][ T6137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.446190][ T6137] usb 4-1: Product: syz [ 307.450627][ T6137] usb 4-1: Manufacturer: syz [ 307.455704][ T6137] usb 4-1: SerialNumber: syz [ 307.497168][ T6137] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 307.507385][ T6137] usb 4-1: No valid video chain found. [ 307.705485][ T3590] usb 4-1: USB disconnect, device number 21 [ 308.084859][ T6137] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 308.254677][ T3590] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 308.467923][ T7914] kvm [7913]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x2 [ 308.468752][ T6137] usb 2-1: Using ep0 maxpacket: 16 [ 308.657541][ T4012] Bluetooth: hci5: Frame reassembly failed (-90) [ 308.730984][ T4012] Bluetooth: hci5: Frame reassembly failed (-84) [ 309.004721][ T3553] Bluetooth: hci1: command 0x0406 tx timeout [ 309.174697][ T6137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 309.186091][ T3590] usb 1-1: Using ep0 maxpacket: 16 [ 309.191502][ T6137] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 309.210915][ T6137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.240702][ T6137] usb 2-1: config 0 descriptor?? [ 309.282296][ T7929] loop2: detected capacity change from 0 to 16 [ 309.301819][ T7929] erofs: (device loop2): mounted with root inode @ nid 36. [ 309.309695][ T3590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.336088][ T3590] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.360617][ T3590] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.379085][ T7929] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 309.391112][ T3590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.399194][ T7929] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 309.412949][ T3590] usb 1-1: config 0 descriptor?? [ 309.422221][ T7929] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 309.635032][ T5008] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 309.774718][ T3590] usbhid 1-1:0.0: can't add hid device: -71 [ 309.781195][ T3590] usbhid: probe of 1-1:0.0 failed with error -71 [ 309.789391][ T3590] usb 1-1: USB disconnect, device number 15 [ 309.822876][ T7899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.831882][ T7899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.846897][ T6137] hid (null): unknown global tag 0xc [ 309.860902][ T6137] hid-generic 0003:0158:0100.001D: unknown main item tag 0x1 [ 309.869408][ T6137] hid-generic 0003:0158:0100.001D: unexpected long global item [ 309.884404][ T6137] hid-generic: probe of 0003:0158:0100.001D failed with error -22 [ 310.024835][ T5008] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.036094][ T5008] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.054674][ T5008] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.067455][ T5008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.077965][ T3776] usb 2-1: USB disconnect, device number 24 [ 310.105648][ T7931] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 310.367445][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.376528][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.451502][ T3777] usb 5-1: USB disconnect, device number 20 [ 310.584643][ T3590] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 310.684804][ T3560] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 310.791220][ T7948] kvm [7947]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x2 [ 310.864738][ T3867] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 310.914747][ T3590] usb 1-1: Using ep0 maxpacket: 8 [ 311.034788][ T3590] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 311.043196][ T3590] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 311.063060][ T3590] usb 1-1: config 135 has no interface number 0 [ 311.075523][ T3590] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.124770][ T3867] usb 3-1: Using ep0 maxpacket: 32 [ 311.183082][ T7965] loop1: detected capacity change from 0 to 512 [ 311.191528][ T7965] EXT4-fs: Ignoring removed bh option [ 311.210180][ T7965] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.1164: invalid block [ 311.231329][ T7965] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1164: couldn't read orphan inode 12 (err -117) [ 311.244489][ T7965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 311.252185][ T3867] usb 3-1: config 0 has an invalid interface number: 169 but max is 0 [ 311.269834][ T3590] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 311.281423][ T3590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.304808][ T3867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.315190][ T3590] usb 1-1: Product: syz [ 311.320183][ T3590] usb 1-1: Manufacturer: syz [ 311.344682][ T3590] usb 1-1: SerialNumber: syz [ 311.351956][ T3867] usb 3-1: config 0 has no interface number 0 [ 311.359694][ T3867] usb 3-1: config 0 interface 169 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.398284][ T3590] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 311.405068][ T3590] usb 1-1: No valid video chain found. [ 311.504003][ T5103] EXT4-fs (loop1): unmounting filesystem. [ 311.622302][ T3777] usb 1-1: USB disconnect, device number 16 [ 311.680062][ T3867] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=58.19 [ 311.697237][ T3867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.705346][ T3867] usb 3-1: Product: syz [ 311.709538][ T3867] usb 3-1: Manufacturer: syz [ 311.714174][ T3867] usb 3-1: SerialNumber: syz [ 311.735679][ T3867] usb 3-1: config 0 descriptor?? [ 311.876658][ T4012] Bluetooth: hci5: Frame reassembly failed (-90) [ 311.907391][ T4012] Bluetooth: hci5: Frame reassembly failed (-84) [ 312.389487][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 312.425254][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 312.445483][ T7978] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1167'. [ 312.623721][ T3776] usb 3-1: USB disconnect, device number 30 [ 312.630960][ T7986] kvm [7985]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x2 [ 313.161570][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 313.171007][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 313.181414][ T8006] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1181'. [ 313.234640][ T3776] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 313.441155][ T8017] kvm [8015]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x2 [ 313.607887][ T8020] loop0: detected capacity change from 32768 to 11 [ 313.620299][ T8022] loop2: detected capacity change from 0 to 256 [ 313.638605][ T3776] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.648631][ T8022] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 313.661318][ T3776] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.688033][ T3776] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.718953][ T3776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.765149][ T7998] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.884992][ T3560] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 314.082225][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.115223][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.156501][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 314.274220][ T3590] usb 4-1: USB disconnect, device number 22 [ 314.525058][ T3867] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 314.605220][ T8044] kvm [8043]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x2 [ 314.784673][ T3867] usb 3-1: Using ep0 maxpacket: 32 [ 314.852570][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b6d800: rx timeout, send abort [ 314.910048][ T3867] usb 3-1: config 0 has an invalid interface number: 169 but max is 0 [ 314.919364][ T3867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.930995][ T3867] usb 3-1: config 0 has no interface number 0 [ 314.940318][ T3867] usb 3-1: config 0 interface 169 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.124759][ T3867] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=58.19 [ 315.143324][ T3867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.151969][ T3867] usb 3-1: Product: syz [ 315.163700][ T3867] usb 3-1: Manufacturer: syz [ 315.168879][ T3867] usb 3-1: SerialNumber: syz [ 315.204337][ T3867] usb 3-1: config 0 descriptor?? [ 315.306029][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 315.363378][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021b6d800: abort rx timeout. Force session deactivation [ 315.496253][ T7] usb 3-1: USB disconnect, device number 31 [ 317.171672][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.178091][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.195681][ T3553] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 317.208189][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 317.208199][ T3553] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 317.227639][ T3553] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 317.238082][ T3553] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 317.247921][ T3553] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 317.251755][ T8080] input: syz1 as /devices/virtual/input/input10 [ 317.273990][ T3553] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 317.312667][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 317.610124][ T8086] loop2: detected capacity change from 0 to 256 [ 318.334932][ T22] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 318.766406][ T6819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.844733][ T3560] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 318.844887][ T3557] Bluetooth: hci5: command 0xfc11 tx timeout [ 318.952243][ T22] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 318.977763][ T22] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 318.988519][ T22] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 318.999306][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.044934][ T8098] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.150947][ T6819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.214619][ T3867] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 319.323663][ T6819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.334171][ T3560] Bluetooth: hci8: command tx timeout [ 319.384406][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 319.472494][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.489641][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.537363][ T6819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.575457][ T4101] usb 1-1: USB disconnect, device number 17 [ 319.594787][ T3867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.623139][ T8125] loop4: detected capacity change from 0 to 16 [ 319.628741][ T3867] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.665917][ T8125] erofs: (device loop4): mounted with root inode @ nid 36. [ 319.669235][ T3867] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.704677][ T3867] usb 3-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 235 [ 319.712561][ T8125] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 320.122309][ T8125] syz.4.1225: attempt to access beyond end of device [ 320.122309][ T8125] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 320.217349][ T8125] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 320.229216][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.244658][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.263801][ T8077] device bridge_slave_0 entered promiscuous mode [ 320.276441][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.283685][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.304926][ T8077] device bridge_slave_1 entered promiscuous mode [ 320.385199][ T3867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.403257][ T3867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.412166][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.463933][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.466951][ T3867] usb 3-1: Product: syz [ 320.522416][ T6819] tipc: Left network mode [ 320.534718][ T3867] usb 3-1: Manufacturer: syz [ 320.543321][ T8132] loop4: detected capacity change from 0 to 64 [ 320.561610][ T3867] usb 3-1: SerialNumber: syz [ 320.595533][ T8077] team0: Port device team_slave_0 added [ 320.626353][ T8132] hfs: get root inode failed [ 320.836359][ T8077] team0: Port device team_slave_1 added [ 320.970472][ T3867] usb 3-1: USB disconnect, device number 32 [ 321.047195][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.054185][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.149798][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.246920][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.263810][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.282023][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.308594][ T3778] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 321.323228][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.404673][ T3557] Bluetooth: hci8: command tx timeout [ 321.807106][ T56] Bluetooth: hci5: Frame reassembly failed (-90) [ 321.851796][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 322.184855][ T8155] loop4: detected capacity change from 0 to 4096 [ 322.263835][ T8155] ntfs: volume version 3.1. [ 322.356062][ T3778] usb 1-1: Using ep0 maxpacket: 8 [ 322.398592][ T8155] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 322.435601][ T8077] device hsr_slave_0 entered promiscuous mode [ 322.453875][ T8155] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 322.477612][ T8155] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to map page. [ 322.486214][ T8077] device hsr_slave_1 entered promiscuous mode [ 322.501361][ T8077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.512714][ T8155] ntfs: (device loop4): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 322.519811][ T8077] Cannot create hsr debugfs directory [ 322.528846][ T3778] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 322.544606][ T3778] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 322.572667][ T3778] usb 1-1: config 135 has no interface number 0 [ 322.588427][ T3778] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.783993][ T3778] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 322.797134][ T3778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.805983][ T3778] usb 1-1: Product: syz [ 322.810464][ T3778] usb 1-1: Manufacturer: syz [ 322.815479][ T3778] usb 1-1: SerialNumber: syz [ 322.835868][ T8175] loop4: detected capacity change from 0 to 16 [ 322.856886][ T3778] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 322.863292][ T3778] usb 1-1: No valid video chain found. [ 322.891427][ T8175] erofs: (device loop4): mounted with root inode @ nid 36. [ 322.946725][ T8175] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 322.975062][ T8175] syz.4.1235: attempt to access beyond end of device [ 322.975062][ T8175] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 323.001590][ T8175] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 323.103643][ T3778] usb 1-1: USB disconnect, device number 18 [ 323.444719][ T22] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 323.485015][ T3557] Bluetooth: hci8: command tx timeout [ 323.488193][ T8174] loop2: detected capacity change from 0 to 40427 [ 323.548665][ T8174] F2FS-fs (loop2): invalid crc value [ 323.585806][ T8174] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.691114][ T6819] device hsr_slave_0 left promiscuous mode [ 323.706761][ T8174] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 323.724896][ T3560] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 323.731596][ T8174] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 323.735853][ T3557] Bluetooth: hci5: command 0xfc11 tx timeout [ 323.750141][ T6819] device hsr_slave_1 left promiscuous mode [ 323.782667][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.844720][ T22] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.864595][ T22] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.874492][ T22] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.879214][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.904603][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.910814][ T26] audit: type=1800 audit(2000000190.389:19): pid=8174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 323.943999][ T8178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.947342][ T8197] loop1: detected capacity change from 0 to 512 [ 323.964051][ T8197] EXT4-fs: Ignoring removed bh option [ 323.971145][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.043509][ T3555] syz-executor: attempt to access beyond end of device [ 324.043509][ T3555] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.095262][ T8197] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.1240: invalid block [ 324.116009][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.155671][ T6819] device bridge_slave_1 left promiscuous mode [ 324.174747][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.212148][ T6819] device bridge_slave_0 left promiscuous mode [ 324.221932][ T8197] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1240: couldn't read orphan inode 12 (err -117) [ 324.236444][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.430378][ T8197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 324.977523][ T6819] device veth1_macvtap left promiscuous mode [ 324.983632][ T6819] device veth0_macvtap left promiscuous mode [ 325.005503][ T6819] device veth1_vlan left promiscuous mode [ 325.011368][ T6819] device veth0_vlan left promiscuous mode [ 325.071093][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.088917][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.147420][ T5103] EXT4-fs (loop1): unmounting filesystem. [ 325.209804][ T8208] program syz.0.1243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.323236][ T6137] usb 5-1: USB disconnect, device number 21 [ 325.564720][ T3557] Bluetooth: hci8: command tx timeout [ 326.126254][ T3289] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 326.257374][ T6819] team0 (unregistering): Port device team_slave_1 removed [ 326.357610][ T6819] team0 (unregistering): Port device team_slave_0 removed [ 326.394011][ T3289] usb 1-1: Using ep0 maxpacket: 32 [ 326.450507][ T6819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.535056][ T3289] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 326.545207][ T3289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.569328][ T3289] usb 1-1: config 0 descriptor?? [ 326.577506][ T6819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.621454][ T3289] gspca_main: sunplus-2.14.0 probing 041e:400b [ 327.692819][ T26] audit: type=1326 audit(2000000194.169:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8220 comm="syz.0.1248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f46975bd9 code=0x0 [ 327.824718][ T3289] gspca_sunplus: reg_r err -110 [ 327.829970][ T3289] sunplus: probe of 1-1:0.0 failed with error -110 [ 328.340437][ T8243] loop4: detected capacity change from 0 to 40427 [ 328.350359][ T8243] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 328.358287][ T8243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 328.385397][ T8243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 328.412157][ T6819] bond0 (unregistering): Released all slaves [ 328.432684][ T8243] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 328.439949][ T8243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 328.638069][ T26] audit: type=1804 audit(2000000195.119:21): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1253" name="/newroot/138/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 328.918377][ T8248] syz.4.1253: attempt to access beyond end of device [ 328.918377][ T8248] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.306384][ T3960] kworker/u4:9: attempt to access beyond end of device [ 329.306384][ T3960] loop4: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 329.487888][ T3557] Bluetooth: hci0: command 0x0406 tx timeout [ 329.567265][ T8257] loop2: detected capacity change from 0 to 2048 [ 329.678210][ T8259] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.682873][ T8255] loop1: detected capacity change from 0 to 4096 [ 329.694665][ T8257] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 329.736328][ T8257] Remounting filesystem read-only [ 329.898891][ T8255] ntfs: volume version 3.1. [ 329.947077][ T3776] usb 1-1: USB disconnect, device number 19 [ 329.995801][ T8255] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 330.078572][ T8255] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 330.111078][ T8077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.148947][ T8077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.198115][ T8255] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to map page. [ 330.211136][ T8077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.238997][ T8077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.254760][ T8255] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 330.627624][ T8077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.634666][ T3859] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 330.693713][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.710082][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.753510][ T8077] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.014944][ T3859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.084816][ T3859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.122571][ T8077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.184668][ T3859] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 331.235278][ T8077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.336668][ T3859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.626068][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.650078][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.673092][ T3859] usb 5-1: config 0 descriptor?? [ 331.687100][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.694367][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.743892][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.763618][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.776452][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.783641][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.791948][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.801042][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.823228][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.842941][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.880464][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.895798][ T8304] loop2: detected capacity change from 0 to 16 [ 331.903896][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.926542][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.932867][ T8304] erofs: (device loop2): mounted with root inode @ nid 36. [ 331.935719][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.972220][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.992805][ T8304] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 332.009569][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.028806][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.041964][ T8304] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 332.055974][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.072366][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.083603][ T8304] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 332.126880][ T8280] netlink: 'syz.4.1254': attribute type 4 has an invalid length. [ 332.281642][ T8305] netlink: 'syz.4.1254': attribute type 4 has an invalid length. [ 332.823669][ T3859] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 332.984701][ T3859] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 333.273199][ T3859] arvo 0003:1E7D:30D4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 333.391418][ T3859] arvo 0003:1E7D:30D4.001E: couldn't init struct arvo_device [ 333.409310][ T3859] arvo 0003:1E7D:30D4.001E: couldn't install keyboard [ 333.458541][ T3859] arvo: probe of 0003:1E7D:30D4.001E failed with error -71 [ 333.490387][ T8331] loop1: detected capacity change from 0 to 16 [ 333.511476][ T3859] usb 5-1: USB disconnect, device number 22 [ 333.545060][ T8331] erofs: (device loop1): mounted with root inode @ nid 36. [ 333.593842][ T8331] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 333.618941][ T8331] syz.1.1271: attempt to access beyond end of device [ 333.618941][ T8331] loop1: rw=0, sector=296, nr_sectors = 8 limit=16 [ 333.684168][ T8331] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 333.740121][ T8280] syz.4.1254 (8280) used greatest stack depth: 19096 bytes left [ 333.864113][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.880499][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.930394][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.949346][ T8344] loop4: detected capacity change from 0 to 16 [ 334.018847][ T8344] erofs: (device loop4): mounted with root inode @ nid 36. [ 334.026584][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.047837][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.291419][ T8344] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 334.644828][ T3557] Bluetooth: hci3: command 0x0406 tx timeout [ 334.693282][ T8344] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 334.832455][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.867002][ T8344] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 334.892320][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.939560][ T8077] device veth0_vlan entered promiscuous mode [ 334.965836][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.973902][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.031356][ T8077] device veth1_vlan entered promiscuous mode [ 335.152698][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.165933][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.208851][ T8077] device veth0_macvtap entered promiscuous mode [ 335.247460][ T8077] device veth1_macvtap entered promiscuous mode [ 335.312165][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.353463][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.399033][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.441017][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.489516][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.524932][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.565143][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.604733][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.652439][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.718697][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.784330][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.824371][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.853629][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.878084][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.902103][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.913222][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.928212][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.945039][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.953392][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.988079][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.016985][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.047636][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.080033][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.119642][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.153348][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.175355][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.194563][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.204423][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.253557][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.290329][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.380672][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.402774][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.452212][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.523265][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.614644][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.616227][ T8397] loop4: detected capacity change from 0 to 40427 [ 336.632239][ T8397] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 336.640136][ T8397] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 336.651475][ T8077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.662135][ T8077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.675415][ T8077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.691202][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.700783][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.725304][ T8077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.787294][ T8397] F2FS-fs (loop4): Found nat_bits in checkpoint [ 336.814551][ T8077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.833844][ T8409] loop2: detected capacity change from 0 to 16 [ 336.867515][ T8397] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 336.874699][ T8397] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 336.884016][ T8409] erofs: (device loop2): mounted with root inode @ nid 36. [ 336.891436][ T8077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.914590][ T8077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.041172][ T26] audit: type=1804 audit(2000000203.509:22): pid=8414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1292" name="/newroot/146/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 337.117356][ T8409] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 337.145089][ T8414] syz.4.1292: attempt to access beyond end of device [ 337.145089][ T8414] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.163988][ T8409] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 337.189244][ T8409] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 337.216933][ T8415] syz.4.1292: attempt to access beyond end of device [ 337.216933][ T8415] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 337.236264][ T8415] syz.4.1292: attempt to access beyond end of device [ 337.236264][ T8415] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 337.635861][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.725956][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.768134][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.820751][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.824552][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.913743][ T5416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.914640][ T5058] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 338.944828][ T7] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 339.154801][ T5058] usb 1-1: Using ep0 maxpacket: 8 [ 339.275969][ T5058] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 339.304347][ T5058] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 339.335455][ T5058] usb 1-1: config 135 has no interface number 0 [ 339.342381][ T5058] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.535307][ T7] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=3c.71 [ 339.563389][ T5058] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 339.563820][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.582784][ T5058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.596358][ T7] usb 5-1: Product: syz [ 339.613133][ T5058] usb 1-1: Product: syz [ 339.614600][ T7] usb 5-1: Manufacturer: syz [ 339.621949][ T7] usb 5-1: SerialNumber: syz [ 339.626996][ T5058] usb 1-1: Manufacturer: syz [ 339.643524][ T5058] usb 1-1: SerialNumber: syz [ 339.670447][ T8459] loop1: detected capacity change from 0 to 8192 [ 339.700314][ T7] usb 5-1: config 0 descriptor?? [ 339.700530][ T5058] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 339.713628][ T8459] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.724930][ T3557] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 339.746455][ T7] redrat3 5-1:0.0: Couldn't find all endpoints [ 339.750827][ T5058] usb 1-1: No valid video chain found. [ 339.943795][ T3859] usb 1-1: USB disconnect, device number 20 [ 339.948731][ T7] usb 5-1: USB disconnect, device number 23 [ 340.377588][ T5416] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 340.514769][ T3594] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 340.905074][ T5416] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=fe.99 [ 340.962032][ T5416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.036587][ T5416] usb 3-1: Product: syz [ 341.110870][ T5416] usb 3-1: Manufacturer: syz [ 341.165916][ T5416] usb 3-1: SerialNumber: syz [ 341.306643][ T5416] usb 3-1: config 0 descriptor?? [ 341.537733][ T5416] usb 3-1: selecting invalid altsetting 1 [ 341.544356][ T5416] comedi comedi0: could not switch to alternate setting 1 [ 341.568451][ T5416] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 341.578134][ T3594] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.635604][ T3594] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.662118][ T3560] Bluetooth: hci5: sending frame failed (-49) [ 341.674060][ T3557] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 341.683916][ T5416] usb 3-1: USB disconnect, device number 33 [ 341.708242][ T3594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.738083][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.795006][ T8475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 341.998812][ T8482] loop4: detected capacity change from 0 to 40427 [ 342.016728][ T8482] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 342.053496][ T8482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 342.068509][ T8482] F2FS-fs (loop4): invalid crc value [ 342.113019][ T8482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 342.159398][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.178173][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.184740][ T3859] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 342.206681][ T8482] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 342.224368][ T8482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 342.258956][ T3289] usb 2-1: USB disconnect, device number 25 [ 342.361896][ T6200] syz-executor: attempt to access beyond end of device [ 342.361896][ T6200] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 342.574943][ T3859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.598038][ T3859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.608898][ T3859] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 342.614817][ T3776] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 342.624078][ T3859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.645496][ T3859] usb 4-1: config 0 descriptor?? [ 342.674867][ T7] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 342.891241][ T8492] netlink: 'syz.3.1328': attribute type 4 has an invalid length. [ 342.904720][ T3776] usb 1-1: Using ep0 maxpacket: 16 [ 342.934576][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 342.937393][ T8492] netlink: 'syz.3.1328': attribute type 4 has an invalid length. [ 343.034909][ T3776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 343.054778][ T7] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 343.063288][ T3776] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 343.086889][ T7] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 343.105063][ T3776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.122071][ T7] usb 3-1: config 135 has no interface number 0 [ 343.134014][ T3776] usb 1-1: config 0 descriptor?? [ 343.149361][ T7] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.188035][ T3859] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 343.206816][ T3859] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 343.222473][ T3859] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 343.359295][ T7] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 343.369524][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.378015][ T7] usb 3-1: Product: syz [ 343.382999][ T7] usb 3-1: Manufacturer: syz [ 343.394921][ T3859] arvo 0003:1E7D:30D4.001F: couldn't init struct arvo_device [ 343.402915][ T3859] arvo 0003:1E7D:30D4.001F: couldn't install keyboard [ 343.420955][ T7] usb 3-1: SerialNumber: syz [ 343.421047][ T3859] arvo: probe of 0003:1E7D:30D4.001F failed with error -71 [ 343.455477][ T3859] usb 4-1: USB disconnect, device number 23 [ 343.476337][ T7] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 343.512378][ T7] usb 3-1: No valid video chain found. [ 343.717377][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.869549][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.088180][ T3776] hid (null): global environment stack underflow [ 344.138904][ T3776] hid (null): unknown global tag 0x83 [ 344.300655][ T3776] hid (null): unknown global tag 0xc [ 344.326224][ T3867] usb 3-1: USB disconnect, device number 34 [ 344.344659][ T3776] hid (null): global environment stack underflow [ 344.393396][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.442809][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.484108][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.511795][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.550555][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.573316][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.597590][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.624088][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.650719][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.668960][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.832342][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.840210][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.849269][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.857333][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.865189][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.874288][ T3776] hid-generic 0003:0158:0100.0020: unknown main item tag 0x0 [ 344.882246][ T3776] hid-generic 0003:0158:0100.0020: global environment stack underflow [ 344.894559][ T3776] hid-generic 0003:0158:0100.0020: item 0 1 1 11 parsing failed [ 344.903477][ T3776] hid-generic: probe of 0003:0158:0100.0020 failed with error -22 [ 344.921187][ T3776] usb 1-1: USB disconnect, device number 21 [ 345.111979][ T8551] loop2: detected capacity change from 0 to 256 [ 345.184749][ T7] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 346.044114][ T8556] sctp: failed to load transform for md5: -2 [ 346.374741][ T3867] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 346.386011][ T7] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=fe.99 [ 346.395430][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.403442][ T7] usb 2-1: Product: syz [ 346.408965][ T7] usb 2-1: Manufacturer: syz [ 346.413590][ T7] usb 2-1: SerialNumber: syz [ 346.419769][ T7] usb 2-1: config 0 descriptor?? [ 346.478179][ T7] usb 2-1: selecting invalid altsetting 1 [ 346.484009][ T7] comedi comedi0: could not switch to alternate setting 1 [ 346.491396][ T7] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 346.584764][ T3778] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 346.615052][ T3289] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 346.664709][ T7] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 346.685059][ T5416] usb 2-1: USB disconnect, device number 26 [ 346.734910][ T3867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.745981][ T3867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.755911][ T3867] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 346.765095][ T3867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.776583][ T3867] usb 4-1: config 0 descriptor?? [ 346.844714][ T3778] usb 1-1: Using ep0 maxpacket: 16 [ 346.864829][ T3289] usb 5-1: Using ep0 maxpacket: 16 [ 346.914754][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 346.975083][ T3778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 346.986503][ T3778] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 346.996111][ T3289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.006400][ T3778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.014808][ T3289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.025326][ T8569] netlink: 'syz.3.1357': attribute type 4 has an invalid length. [ 347.029257][ T3778] usb 1-1: config 0 descriptor?? [ 347.039144][ T3289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 347.049197][ T7] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 347.057842][ T7] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 347.068688][ T3289] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 347.076345][ T8569] netlink: 'syz.3.1357': attribute type 4 has an invalid length. [ 347.079287][ T7] usb 3-1: config 135 has no interface number 0 [ 347.092640][ T3289] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.108114][ T7] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.195071][ T3289] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 347.204825][ T3289] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 347.212833][ T3289] usb 5-1: Manufacturer: syz [ 347.219260][ T3289] usb 5-1: config 0 descriptor?? [ 347.284750][ T7] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 347.308111][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.335978][ T7] usb 3-1: Product: syz [ 347.336000][ T7] usb 3-1: Manufacturer: syz [ 347.336015][ T7] usb 3-1: SerialNumber: syz [ 347.336934][ T3867] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 347.336963][ T3867] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 347.345850][ T3867] arvo 0003:1E7D:30D4.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 347.390087][ T7] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 347.390123][ T7] usb 3-1: No valid video chain found. [ 347.529737][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.544680][ T3867] arvo 0003:1E7D:30D4.0021: couldn't init struct arvo_device [ 347.561301][ T3867] arvo 0003:1E7D:30D4.0021: couldn't install keyboard [ 347.563469][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.615404][ T3778] hid (null): global environment stack underflow [ 347.615597][ T3867] arvo: probe of 0003:1E7D:30D4.0021 failed with error -71 [ 347.621958][ T3289] rc_core: IR keymap rc-hauppauge not found [ 347.645696][ T3778] hid (null): unknown global tag 0x83 [ 347.651334][ T3778] hid (null): unknown global tag 0xc [ 347.661994][ T3289] Registered IR keymap rc-empty [ 347.674614][ T3778] hid (null): global environment stack underflow [ 347.683649][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 347.691440][ T3867] usb 4-1: USB disconnect, device number 24 [ 347.695300][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.707298][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.715088][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.723205][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.730906][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.731018][ T5058] usb 3-1: USB disconnect, device number 35 [ 347.744616][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 347.767711][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.794056][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.803395][ T3289] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 347.829058][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.839140][ T3289] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 347.853803][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.864958][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.872428][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.881444][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.893133][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 347.901148][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.912275][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.943905][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 347.952047][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.962190][ T3778] hid-generic 0003:0158:0100.0022: unknown main item tag 0x0 [ 347.970199][ T8599] loop1: detected capacity change from 0 to 256 [ 347.984671][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.000155][ T3778] hid-generic 0003:0158:0100.0022: global environment stack underflow [ 348.008737][ T3778] hid-generic 0003:0158:0100.0022: item 0 1 1 11 parsing failed [ 348.024686][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.039716][ T3778] hid-generic: probe of 0003:0158:0100.0022 failed with error -22 [ 348.054731][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.092155][ T3778] usb 1-1: USB disconnect, device number 22 [ 348.098538][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.144709][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 348.204939][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 349.043630][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 349.074809][ T3289] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 349.115882][ T3289] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 349.123971][ T3289] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 349.202568][ T3289] usb 5-1: USB disconnect, device number 24 [ 349.613747][ T8624] loop2: detected capacity change from 0 to 64 [ 349.934102][ T3767] Bluetooth: hci5: Frame reassembly failed (-90) [ 350.567926][ T8609] loop1: detected capacity change from 0 to 32768 [ 350.584912][ T8609] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.1371 (8609) [ 350.656034][ T8609] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 350.669651][ T8609] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 350.682517][ T8609] BTRFS info (device loop1): using free space tree [ 350.709900][ T8609] BTRFS info (device loop1): enabling ssd optimizations [ 350.809483][ T27] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 351.075389][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 351.215499][ T27] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 351.301399][ T27] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 351.312089][ T27] usb 3-1: config 135 has no interface number 0 [ 351.332445][ T27] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.372001][ T3776] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 351.384212][ T5103] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 351.516412][ T27] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 351.526981][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.535144][ T27] usb 3-1: Product: syz [ 351.539490][ T27] usb 3-1: Manufacturer: syz [ 351.544109][ T27] usb 3-1: SerialNumber: syz [ 351.604351][ T27] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 351.610807][ T27] usb 3-1: No valid video chain found. [ 351.624727][ T3776] usb 1-1: Using ep0 maxpacket: 8 [ 351.884766][ T3560] Bluetooth: hci5: command 0xfc11 tx timeout [ 351.912534][ T5057] usb 3-1: USB disconnect, device number 36 [ 351.919046][ T3557] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 352.024681][ T3776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 352.051843][ T3776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 352.074642][ T3776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 352.188257][ T3776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.200655][ T3776] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc [ 352.214764][ T3776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.279022][ T3776] usb 1-1: config 0 descriptor?? [ 352.460704][ T3776] appletouch 1-1:0.0: Could not find int-in endpoint [ 352.467948][ T3776] appletouch: probe of 1-1:0.0 failed with error -5 [ 352.495411][ T3776] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 352.633809][ T8671] __nla_validate_parse: 1 callbacks suppressed [ 352.633827][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1390'. [ 352.691637][ T3776] usb 1-1: USB disconnect, device number 23 [ 352.935985][ T8689] loop4: detected capacity change from 0 to 256 [ 354.019163][ T3776] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 354.111222][ T8685] loop1: detected capacity change from 0 to 32768 [ 354.123460][ T8685] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.1395 (8685) [ 354.156174][ T8685] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 354.176601][ T8685] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 354.189369][ T8685] BTRFS info (device loop1): using free space tree [ 354.274145][ T8685] BTRFS info (device loop1): enabling ssd optimizations [ 354.274595][ T3776] usb 4-1: Using ep0 maxpacket: 16 [ 354.409309][ T5103] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 354.434311][ T3776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 354.446647][ T3776] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 354.456256][ T3776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.468562][ T3776] usb 4-1: config 0 descriptor?? [ 354.517151][ T5416] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 354.790597][ T5416] usb 1-1: Using ep0 maxpacket: 8 [ 354.903234][ T8748] loop1: detected capacity change from 0 to 256 [ 354.935024][ T5416] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 354.951983][ T5416] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 354.998823][ T5416] usb 1-1: config 135 has no interface number 0 [ 355.005747][ T5416] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.049378][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.084935][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.117327][ T3776] hid (null): unknown global tag 0xc [ 355.139016][ T3776] hid-generic 0003:0158:0100.0023: unknown main item tag 0x1 [ 355.175631][ T3778] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 355.184020][ T3776] hid-generic 0003:0158:0100.0023: unexpected long global item [ 355.192311][ T5416] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 355.215896][ T5416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.014094][ T3776] hid-generic: probe of 0003:0158:0100.0023 failed with error -22 [ 356.022110][ T5416] usb 1-1: Product: syz [ 356.027173][ T5416] usb 1-1: Manufacturer: syz [ 356.032587][ T5416] usb 1-1: SerialNumber: syz [ 356.040067][ T3776] usb 4-1: USB disconnect, device number 25 [ 356.091743][ T5416] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 356.108671][ T5416] usb 1-1: No valid video chain found. [ 356.124642][ T3560] Bluetooth: hci8: command tx timeout [ 356.125766][ T3778] usb 5-1: Using ep0 maxpacket: 32 [ 356.267597][ T3778] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 356.286226][ T3778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.312640][ T8775] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 356.321181][ T3778] usb 5-1: config 0 descriptor?? [ 356.348882][ T3860] usb 1-1: USB disconnect, device number 24 [ 356.389501][ T3778] gspca_main: sunplus-2.14.0 probing 041e:400b [ 357.449986][ T26] audit: type=1326 audit(2000000223.929:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.4.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4acd75bd9 code=0x0 [ 357.575352][ T3778] gspca_sunplus: reg_r err -110 [ 357.580743][ T3778] sunplus: probe of 5-1:0.0 failed with error -110 [ 358.202758][ T8805] loop1: detected capacity change from 0 to 32768 [ 358.221014][ T8805] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.1440 (8805) [ 358.248557][ T8805] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 358.266844][ T8805] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 358.283903][ T8805] BTRFS info (device loop1): using free space tree [ 358.344123][ T8805] BTRFS info (device loop1): enabling ssd optimizations [ 358.366983][ T26] audit: type=1800 audit(2000000224.849:24): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1440" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 358.403503][ T5103] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 358.764965][ T28] INFO: task syz.0.609:6165 blocked for more than 143 seconds. [ 358.779708][ T28] Not tainted 6.1.98-syzkaller #0 [ 358.814647][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.835774][ T8841] loop2: detected capacity change from 0 to 8 [ 358.854855][ T28] task:syz.0.609 state:D stack:23904 pid:6165 ppid:5758 flags:0x00004004 [ 358.868440][ T28] Call Trace: [ 358.871769][ T28] [ 358.881613][ T28] __schedule+0x142d/0x4550 [ 358.890877][ T28] ? __sched_text_start+0x8/0x8 [ 358.918615][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 359.195816][ T28] ? print_irqtrace_events+0x210/0x210 [ 359.329199][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 359.419281][ T3557] Bluetooth: hci0: command 0x0406 tx timeout [ 359.448200][ T28] schedule+0xbf/0x180 [ 359.599392][ T28] io_schedule+0x88/0x100 [ 359.611680][ T28] folio_wait_bit_common+0x878/0x1290 [ 359.628281][ T28] ? folio_wait_bit+0x20/0x20 [ 359.641701][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 359.735473][ T28] ? jfs_error+0x2b3/0x2e0 [ 359.740032][ T28] ? __get_metapage+0x551/0x1040 [ 359.745113][ T28] release_metapage+0x88/0x9b0 [ 359.749955][ T28] ? PageHeadHuge+0x8e/0x1c0 [ 359.754654][ T28] __get_metapage+0xb15/0x1040 [ 359.759508][ T28] dtSplitPage+0x8e3/0x3ec0 [ 359.764095][ T28] ? dbAlloc+0x886/0xc90 [ 359.796671][ T28] ? up_write+0x19d/0x580 [ 359.821920][ T28] ? clear_nonspinnable+0x60/0x60 [ 359.863444][ T28] ? __up_read+0x690/0x690 [ 359.877008][ T28] ? dtSplitRoot+0x1920/0x1920 [ 359.894256][ T28] ? dbNextAG+0x630/0x630 [ 359.908744][ T28] dtInsert+0x14fc/0x6b00 [ 359.921750][ T28] ? UniStrupr+0x2c0/0x2c0 [ 359.938190][ T28] ? txLock+0x2b1/0x21a0 [ 359.952472][ T28] ? print_irqtrace_events+0x210/0x210 [ 359.971329][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 359.988982][ T28] ? do_raw_spin_lock+0x14a/0x370 [ 360.005467][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 360.021963][ T28] ? dtInitRoot+0x230/0x690 [ 360.039558][ T28] jfs_mkdir+0x7f3/0xbb0 [ 360.052796][ T28] ? jfs_symlink+0x10e0/0x10e0 [ 360.080688][ T28] ? make_kgid+0x6f0/0x6f0 [ 360.085551][ T28] ? apparmor_path_mkdir+0x204/0x2a0 [ 360.090876][ T28] ? generic_permission+0x21c/0x4f0 [ 360.105287][ T28] ? inode_permission+0xf7/0x450 [ 360.110385][ T28] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 360.129243][ T28] ? security_inode_mkdir+0xb4/0x100 [ 360.142902][ T28] vfs_mkdir+0x3b6/0x590 [ 360.147272][ T28] do_mkdirat+0x225/0x360 [ 360.151644][ T28] ? vfs_mkdir+0x590/0x590 [ 360.164685][ T28] ? getname_flags+0x1f9/0x4f0 [ 360.169524][ T28] __x64_sys_mkdirat+0x85/0x90 [ 360.174329][ T28] do_syscall_64+0x3b/0xb0 [ 360.190855][ T28] ? clear_bhb_loop+0x45/0xa0 [ 360.200955][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.204629][ T3561] Bluetooth: hci7: command 0x0406 tx timeout [ 360.210842][ T28] RIP: 0033:0x7efc6b775bd9 [ 360.223357][ T28] RSP: 002b:00007efc6c513048 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 360.245981][ T28] RAX: ffffffffffffffda RBX: 00007efc6b904038 RCX: 00007efc6b775bd9 [ 360.254022][ T28] RDX: 0000000000000000 RSI: 0000000020000340 RDI: ffffffffffffff9c [ 360.274643][ T28] RBP: 00007efc6b7e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 360.282861][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.291921][ T28] R13: 000000000000006e R14: 00007efc6b904038 R15: 00007ffdb3e28eb8 [ 360.300275][ T28] [ 360.303588][ T28] [ 360.303588][ T28] Showing all locks held in the system: [ 360.311857][ T28] 1 lock held by rcu_tasks_kthre/12: [ 360.317348][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 360.331768][ T28] 1 lock held by rcu_tasks_trace/13: [ 360.337844][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 360.349439][ T28] 1 lock held by khungtaskd/28: [ 360.354440][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 360.364705][ T28] 4 locks held by kworker/u4:3/46: [ 360.370141][ T28] #0: ffff888016e62138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.381327][ T28] #1: ffffc90000b77d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.394070][ T28] #2: ffff88814c6d60e0 (&type->s_umount_key#31){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 360.414622][ T28] #3: ffff88814c6d8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1e5/0x3de0 [ 360.433797][ T28] 2 locks held by kworker/0:3/3289: [ 360.440075][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.457019][ T28] #1: ffffc900035ffd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.468527][ T28] 2 locks held by getty/3308: [ 360.473193][ T28] #0: ffff888028365098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 360.485305][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 360.495666][ T28] 2 locks held by kworker/0:4/3589: [ 360.501118][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.511569][ T28] #1: ffffc9000462fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.524079][ T28] 4 locks held by kworker/u4:6/3719: [ 360.529520][ T28] #0: ffff888016e62138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.541192][ T28] #1: ffffc90004ad7d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.553150][ T28] #2: ffff888063c400e0 (&type->s_umount_key#59){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 360.563101][ T28] #3: ffff88805d0d0b08 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 [ 360.574663][ T28] 4 locks held by kworker/u4:7/3767: [ 360.579970][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.590311][ T28] #1: ffffc900052b7d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.601002][ T28] #2: ffffffff8e28d8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 360.611061][ T28] #3: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 360.622238][ T28] 2 locks held by kworker/0:12/3778: [ 360.627636][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.638116][ T28] #1: ffffc90005267d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.651532][ T28] 4 locks held by kworker/u4:8/3804: [ 360.656883][ T28] #0: ffff888016e62138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.667767][ T28] #1: ffffc90005337d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.680612][ T28] #2: ffff888057e3a0e0 (&type->s_umount_key#59){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 360.691872][ T28] #3: ffff88805afc8b08 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_commit_inode+0x242/0x580 [ 360.702382][ T28] 4 locks held by syz.0.609/6165: [ 360.708256][ T28] #0: ffff888063c40460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 360.717633][ T28] #1: ffff88805d0d0ec0 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 360.728501][ T28] #2: ffff88805d0d0b08 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_mkdir+0x234/0xbb0 [ 360.738292][ T28] #3: ffff88805ae93008 (&jfs_ip->commit_mutex/1){+.+.}-{3:3}, at: jfs_mkdir+0x24f/0xbb0 [ 360.749022][ T28] 4 locks held by syz.3.652/6302: [ 360.754063][ T28] #0: ffff888057e3a460 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 360.763531][ T28] #1: ffff88805afc8ec0 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 360.774513][ T28] #2: ffff88805afc8b08 (&jfs_ip->commit_mutex){+.+.}-{3:3}, at: jfs_mkdir+0x234/0xbb0 [ 360.784222][ T28] #3: ffff88805afcb008 (&jfs_ip->commit_mutex/1){+.+.}-{3:3}, at: jfs_mkdir+0x24f/0xbb0 [ 360.795279][ T28] 4 locks held by kworker/u4:17/6835: [ 360.800925][ T28] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.812838][ T28] #1: ffffc900057d7d20 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 360.825369][ T28] #2: ffff88805be807c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x250 [ 360.835605][ T28] #3: ffff88805be82af8 (&local->mtx){+.+.}-{3:3}, at: ieee80211_scan_work+0xb7/0x1d70 [ 360.846104][ T28] 1 lock held by syz.4.1414/8743: [ 360.851165][ T28] #0: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 360.862274][ T28] [ 360.870602][ T28] ============================================= [ 360.870602][ T28] [ 360.891312][ T28] NMI backtrace for cpu 0 [ 360.895697][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 360.903539][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 360.913615][ T28] Call Trace: [ 360.916903][ T28] [ 360.919829][ T28] dump_stack_lvl+0x1e3/0x2cb [ 360.924507][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 360.929879][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 360.935332][ T28] ? panic+0x764/0x764 [ 360.939392][ T28] ? vprintk_emit+0x622/0x740 [ 360.944075][ T28] ? printk_sprint+0x490/0x490 [ 360.948837][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 360.953949][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 360.958889][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 360.965038][ T28] ? _printk+0xd1/0x111 [ 360.969185][ T28] ? panic+0x764/0x764 [ 360.973242][ T28] ? __wake_up_klogd+0xcc/0x100 [ 360.978101][ T28] ? panic+0x764/0x764 [ 360.982158][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 360.988220][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 360.994369][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 361.000349][ T28] watchdog+0xf88/0xfd0 [ 361.004518][ T28] ? watchdog+0x1f8/0xfd0 [ 361.008842][ T28] kthread+0x28d/0x320 [ 361.012896][ T28] ? hungtask_pm_notify+0x50/0x50 [ 361.017911][ T28] ? kthread_blkcg+0xd0/0xd0 [ 361.022490][ T28] ret_from_fork+0x1f/0x30 [ 361.026909][ T28] [ 361.032068][ T28] Sending NMI from CPU 0 to CPUs 1: [ 361.037636][ C1] NMI backtrace for cpu 1 [ 361.037649][ C1] CPU: 1 PID: 6835 Comm: kworker/u4:17 Not tainted 6.1.98-syzkaller #0 [ 361.037667][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 361.037677][ C1] Workqueue: phy37 ieee80211_iface_work [ 361.037699][ C1] RIP: 0010:memset_erms+0xb/0x10 [ 361.037717][ C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 361.037729][ C1] RSP: 0018:ffffc900057d7578 EFLAGS: 00000202 [ 361.037741][ C1] RAX: 0000000000000000 RBX: 1ffffffff1dda60a RCX: 0000000000000000 [ 361.037751][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900057d7720 [ 361.037761][ C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffc900057d7710 [ 361.037771][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900057d76c0 [ 361.037781][ C1] R13: ffffffff8eed3056 R14: ffffc900057d76f5 R15: ffffc900057d7710 [ 361.037792][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 361.037805][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.037816][ C1] CR2: 0000001b31715ff8 CR3: 0000000076425000 CR4: 00000000003526e0 [ 361.037829][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 361.037837][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 361.037847][ C1] Call Trace: [ 361.037852][ C1] [ 361.037858][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 361.037877][ C1] ? read_lock_is_recursive+0x10/0x10 [ 361.037899][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 361.037918][ C1] ? nmi_handle+0x25/0x440 [ 361.037944][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 361.037963][ C1] ? nmi_handle+0x12e/0x440 [ 361.037981][ C1] ? nmi_handle+0x25/0x440 [ 361.037999][ C1] ? memset_erms+0xb/0x10 [ 361.038013][ C1] ? default_do_nmi+0x62/0x150 [ 361.038027][ C1] ? exc_nmi+0xa8/0x100 [ 361.038040][ C1] ? end_repeat_nmi+0x16/0x31 [ 361.038064][ C1] ? memset_erms+0xb/0x10 [ 361.038078][ C1] ? memset_erms+0xb/0x10 [ 361.038092][ C1] ? memset_erms+0xb/0x10 [ 361.038105][ C1] [ 361.038110][ C1] [ 361.038114][ C1] unwind_next_frame+0xde7/0x2220 [ 361.038135][ C1] ? __unwind_start+0xef/0x720 [ 361.038152][ C1] __unwind_start+0x59d/0x720 [ 361.038168][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 361.038185][ C1] arch_stack_walk+0xdb/0x140 [ 361.038202][ C1] ? arch_stack_walk+0xdb/0x140 [ 361.038219][ C1] stack_trace_save+0x113/0x1c0 [ 361.038238][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 361.038259][ C1] ? skb_release_data+0x5de/0x7a0 [ 361.038280][ C1] kasan_set_track+0x4b/0x70 [ 361.038324][ C1] kasan_save_free_info+0x27/0x40 [ 361.038338][ C1] ____kasan_slab_free+0xd6/0x120 [ 361.038359][ C1] __kmem_cache_free+0x25c/0x3c0 [ 361.038376][ C1] ? skb_release_data+0x5de/0x7a0 [ 361.038395][ C1] skb_release_data+0x5de/0x7a0 [ 361.038417][ C1] ? ieee80211_iface_work+0x260/0xce0 [ 361.038432][ C1] kfree_skb_reason+0x16f/0x390 [ 361.038452][ C1] ieee80211_iface_work+0x260/0xce0 [ 361.038471][ C1] ? process_one_work+0x7a9/0x11d0 [ 361.038487][ C1] process_one_work+0x8a9/0x11d0 [ 361.038509][ C1] ? worker_detach_from_pool+0x260/0x260 [ 361.038527][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 361.038543][ C1] ? kthread_data+0x4e/0xc0 [ 361.038563][ C1] ? wq_worker_running+0x97/0x190 [ 361.038584][ C1] worker_thread+0xa47/0x1200 [ 361.038600][ C1] ? _raw_spin_unlock+0x40/0x40 [ 361.038615][ C1] ? __sched_text_start+0x8/0x8 [ 361.038642][ C1] ? _raw_spin_unlock+0x40/0x40 [ 361.038663][ C1] kthread+0x28d/0x320 [ 361.038675][ C1] ? worker_clr_flags+0x190/0x190 [ 361.038689][ C1] ? kthread_blkcg+0xd0/0xd0 [ 361.038702][ C1] ret_from_fork+0x1f/0x30 [ 361.038727][ C1] [ 361.042421][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 361.424843][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 361.432650][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 361.442695][ T28] Call Trace: [ 361.445978][ T28] [ 361.448910][ T28] dump_stack_lvl+0x1e3/0x2cb [ 361.453602][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 361.459242][ T28] ? panic+0x764/0x764 [ 361.463324][ T28] ? llist_add_batch+0x160/0x1d0 [ 361.468275][ T28] ? vscnprintf+0x59/0x80 [ 361.472614][ T28] panic+0x318/0x764 [ 361.476517][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 361.482684][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 361.488065][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 361.494239][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 361.500429][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 361.506603][ T28] watchdog+0xfc7/0xfd0 [ 361.510811][ T28] ? watchdog+0x1f8/0xfd0 [ 361.515160][ T28] kthread+0x28d/0x320 [ 361.519263][ T28] ? hungtask_pm_notify+0x50/0x50 [ 361.524277][ T28] ? kthread_blkcg+0xd0/0xd0 [ 361.528870][ T28] ret_from_fork+0x1f/0x30 [ 361.533298][ T28] [ 361.536664][ T28] Kernel Offset: disabled [ 361.540982][ T28] Rebooting in 86400 seconds..