last executing test programs: 14m4.812829372s ago: executing program 2 (id=758): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000001680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14m2.568447174s ago: executing program 2 (id=761): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000180)={0x20, 0x14}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x65}, 0x0, 0x0, 0x0, 0x0}) 13m59.54093977s ago: executing program 2 (id=770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x4e, 0xd) 13m57.241869296s ago: executing program 3 (id=772): ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x102}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x36314752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x1}}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 13m56.542475173s ago: executing program 2 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 13m56.423018723s ago: executing program 2 (id=776): setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '^'}}, {@dont_hash}, {@dont_measure}, {@permit_directio}, {@fowner_gt}]}, 0x0, 0x23a, &(0x7f0000000880)="$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") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x60080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x4b, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000280)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 13m56.348219849s ago: executing program 3 (id=777): socket$tipc(0x1e, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x65b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x5, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x1d68a423, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) 13m55.925477763s ago: executing program 2 (id=779): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) 13m54.631830398s ago: executing program 32 (id=779): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) 13m53.754527819s ago: executing program 3 (id=782): r0 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x25, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 13m53.210994334s ago: executing program 3 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 13m52.061471606s ago: executing program 3 (id=786): syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x6669cc1368519859, 0x0, {0x9, 0x21, 0x5, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f3, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x9, &(0x7f0000002e40)) 13m46.97014171s ago: executing program 3 (id=792): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13m46.685961893s ago: executing program 33 (id=792): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 13m40.478302836s ago: executing program 0 (id=800): r0 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x25, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 13m40.120278795s ago: executing program 0 (id=801): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x4, 0x2, 0x0, 0x932, {[@timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x7f, 0x7723, 0x1]}]}}}}}}}, 0x0) syz_emit_ethernet(0x1289, &(0x7f0000000940)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1c0adf", 0x1253, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@dstopts={0x62, 0x1b, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @generic={0x0, 0xb1, "3e37976828218c4d55e8171b9c32b3c326efadb96fa840efd8b79271f5ca730e9d66c92dca45f8f1719d018cbdc78107311ec8926f8376f1da7f17a14e78b3dbcee40806baeaaaee5f51e2bbe2a1f23c03e0afb3ce5dc2cf33e512da95326ed1ae06292089bd64f80b4a9e09f88907cf4f2e5e2f224c231995eac6b39fa48713176c7eea5f6e911619d7d29ac3a80790f70bd40f15bbd619c48cf8b6aad2f1dea44e2bf6ab3ceb8e1a3adc8dc1a4ef0799"}, @enc_lim={0x4, 0x1, 0x1}]}, @routing={0x0, 0x4, 0x2, 0x0, 0x0, [@mcast2, @mcast1]}, @srh={0x1, 0x2, 0x4, 0x1, 0x8, 0x10, 0x9, [@dev={0xfe, 0x80, '\x00', 0xa}]}, @dstopts={0x21, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x43}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn, @jumbo={0xc2, 0x4, 0x8001}, @jumbo={0xc2, 0x4, 0x3ff}, @generic={0x2, 0x99, "9903b006ca6d1b5e0c94f29123acaba3e9408e50524dc3fbe64d5c9d1bb7efe6262435aea45043bfc5a012197d5ecb6f4c5d668e9b3fdbbe419e233c76fd006a62766609831ac1e6747169964712cfb0647cfe4433b5aa598020393e93601f47851e7d22620fd7766d3734c7217e48ef75cc28bb0ec0ef9f4042e08bf23154da2d6e380090b42c3d8de4e0296bd5baa26357d05d9a13cbdb86"}]}, @hopopts={0x89, 0x200, '\x00', [@pad1, @generic={0x7, 0xffe, "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"}]}, @fragment={0x3b, 0x0, 0x10, 0x0, 0x0, 0x3, 0x68}], {{0x4e20, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0xa, 0x1, "a43a72", 0x6, "5e6a98"}, "c72e76f2bfa5ab126751365f0803d9fbcd60ed354a4d00d18f7635414162d88bfab2f1f11e6ac9996d7e9697017ee73ad3649cbca54bab761c139b"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0x52, &(0x7f0000000440)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @broadcast, @val={@val, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x3c, 0x63, 0x0, 0x49, 0x6, 0x0, @empty, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4e22, 0x4e22, 0x4, 0x2}}}}}}, 0x0) 13m39.68701249s ago: executing program 0 (id=802): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfd2b, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x43) sendfile(r3, r3, &(0x7f0000000180)=0x4, 0xfffffffffffffffa) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x968, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1a}, 0x94) 13m38.663476013s ago: executing program 0 (id=803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000440)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) 13m37.886492436s ago: executing program 0 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000340)={'bridge_slave_0\x00', 0x4088}) 13m35.306317216s ago: executing program 0 (id=807): r0 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x25, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 13m32.447314477s ago: executing program 34 (id=807): r0 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x25, 0x8, 0x0, 0x0}}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 8m29.121787734s ago: executing program 6 (id=1539): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') 8m26.621647407s ago: executing program 6 (id=1543): socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) pipe(&(0x7f00000001c0)) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040040) 8m26.278378655s ago: executing program 6 (id=1544): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x8d1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) gettid() socket$tipc(0x1e, 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000600)=""/203) 8m25.454090922s ago: executing program 6 (id=1545): fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8m24.187479544s ago: executing program 6 (id=1549): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_U32_SEL={0x54, 0x5, {0x6, 0x7, 0x2, 0x3, 0x0, 0xf800, 0x8, 0xf, [{0x56, 0x0, 0xd, 0x8}, {0xffffff8c, 0x8, 0x101, 0x6}, {0x7, 0xfffffff8, 0x7, 0x8}, {0x5, 0xbd0a, 0x1ff, 0x7}]}}]}}]}, 0x8c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m23.25645617s ago: executing program 6 (id=1551): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @netrom={'nr', 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)="e9ba", 0x2}}, 0x40811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffe}) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 8m7.60398323s ago: executing program 35 (id=1551): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @netrom={'nr', 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)="e9ba", 0x2}}, 0x40811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffe}) syz_emit_ethernet(0x288, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}, {0x0}], 0x2, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 7.885865002s ago: executing program 5 (id=2657): socket(0x6, 0x3, 0x1) pipe2$9p(0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1814800, &(0x7f0000000380)=ANY=[]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x200040b4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x48080) 7.884119682s ago: executing program 7 (id=2658): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$ITER_CREATE(0x3f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.798243779s ago: executing program 7 (id=2659): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @string={0x4, 0x3, "c364"}}, 0x0, 0x0, 0x0}, 0x0) 7.742153913s ago: executing program 1 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 6.80112586s ago: executing program 1 (id=2661): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) 6.752028663s ago: executing program 5 (id=2662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 6.081825868s ago: executing program 1 (id=2663): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r0 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x4000, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@gettclass={0x24, 0x2a, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0xfff3, 0x1}, {0x7, 0xfff1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40050) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) syz_emit_vhci(0x0, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2}, &(0x7f0000000080)=0x14) 6.020055863s ago: executing program 5 (id=2664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 5.123844175s ago: executing program 1 (id=2665): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) 5.018378764s ago: executing program 5 (id=2666): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce9}, 0x18000) socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) 4.863322256s ago: executing program 4 (id=2667): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$ITER_CREATE(0x3f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.833459359s ago: executing program 7 (id=2668): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x891b, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.791579632s ago: executing program 1 (id=2669): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) r8 = fcntl$dupfd(r5, 0x0, r6) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000080)={0x0, r7}) 4.712948828s ago: executing program 4 (id=2670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 2.286320895s ago: executing program 5 (id=2671): syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)=""/169, 0xd1) 2.251085358s ago: executing program 7 (id=2672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) 2.242316128s ago: executing program 4 (id=2673): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r0 = openat$nvme_fabrics(0xffffff9c, 0x0, 0x4000, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@gettclass={0x24, 0x2a, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0xfff3, 0x1}, {0x7, 0xfff1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40050) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) syz_emit_vhci(0x0, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2}, &(0x7f0000000080)=0x14) 1.245655639s ago: executing program 7 (id=2674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.23938112s ago: executing program 5 (id=2675): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000f80)=""/90, 0x5a}], 0x2}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009800707"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) 1.103069211s ago: executing program 4 (id=2676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x29) 878.495438ms ago: executing program 4 (id=2677): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r0, &(0x7f0000000780)='2', 0x1, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 334.854193ms ago: executing program 4 (id=2678): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, 0x0, 0x0) 262.890348ms ago: executing program 7 (id=2679): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 0s ago: executing program 1 (id=2680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) kernel console output (not intermixed with test programs): [ 883.527708][ T8996] null_blk: rq ffff8880228bd400 timed out [ 883.533438][ T8996] null_blk: rq ffff8880228bd580 timed out [ 883.539198][ T8996] null_blk: rq ffff8880228bd700 timed out [ 883.544916][ T8996] null_blk: rq ffff8880228bd880 timed out [ 883.550681][ T8996] null_blk: rq ffff8880228bda00 timed out [ 883.556445][ T8996] null_blk: rq ffff8880228bdb80 timed out [ 883.562161][ T8996] null_blk: rq ffff8880228bdd00 timed out [ 883.567904][ T8996] null_blk: rq ffff8880228bde80 timed out [ 884.312639][T13779] loop5: detected capacity change from 0 to 2048 [ 884.985587][T13779] EXT4-fs: Ignoring removed mblk_io_submit option [ 885.124835][T13779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.413591][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.605696][ T8853] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 885.876382][ T8853] usb 8-1: Using ep0 maxpacket: 8 [ 885.947572][T13793] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 885.988215][ T8853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.041484][T13793] syz.5.1982: attempt to access beyond end of device [ 886.041484][T13793] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 886.057237][T13793] F2FS-fs (loop5): Unable to read 1th superblock [ 886.071303][T13793] syz.5.1982: attempt to access beyond end of device [ 886.071303][T13793] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 886.086784][T13793] F2FS-fs (loop5): Unable to read 2th superblock [ 886.138254][ T8853] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 886.160547][ T8853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.212771][ T8853] usb 8-1: config 0 descriptor?? [ 886.563844][ T8853] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 887.091616][T13811] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 887.698733][T13820] loop5: detected capacity change from 0 to 2048 [ 887.856406][T13820] EXT4-fs: Ignoring removed mblk_io_submit option [ 887.976978][T13820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.209441][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.215025][ T8853] usb 8-1: USB disconnect, device number 8 [ 888.252184][T13816] loop1: detected capacity change from 0 to 32768 [ 888.290001][T13816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1986 (13816) [ 888.319554][T13816] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 888.342751][T13816] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 888.353235][T13816] BTRFS info (device loop1): enabling auto defrag [ 888.388584][T13816] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 888.413959][T13816] BTRFS info (device loop1): use zstd compression, level 3 [ 888.485284][T13816] BTRFS info (device loop1): force clearing of disk cache [ 888.494985][T13816] BTRFS info (device loop1): max_inline at 0 [ 888.517352][T13816] BTRFS info (device loop1): use zlib compression, level 3 [ 888.527373][T13816] BTRFS info (device loop1): using free space tree [ 888.687677][T13816] BTRFS info (device loop1): enabling ssd optimizations [ 888.779963][T13816] BTRFS info (device loop1): auto enabling async discard [ 888.824798][T13816] BTRFS info (device loop1): rebuilding free space tree [ 888.833560][T13855] loop4: detected capacity change from 0 to 2048 [ 888.844073][T13855] EXT4-fs: Ignoring removed mblk_io_submit option [ 888.873294][T13855] EXT4-fs: Ignoring removed nobh option [ 888.915184][T13855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.158097][T13855] EXT4-fs (loop4): shut down requested (0) [ 889.345968][ T5781] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 889.474424][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.277340][T13870] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 890.337040][T13870] syz.4.1996: attempt to access beyond end of device [ 890.337040][T13870] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 890.352551][T13870] F2FS-fs (loop4): Unable to read 1th superblock [ 890.370493][T13870] syz.4.1996: attempt to access beyond end of device [ 890.370493][T13870] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 890.384768][T13870] F2FS-fs (loop4): Unable to read 2th superblock [ 891.183819][T13872] loop7: detected capacity change from 0 to 2048 [ 891.226630][T13872] EXT4-fs: Ignoring removed mblk_io_submit option [ 891.354350][T13872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.570902][T12099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.885464][ T8853] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 892.105619][ T8853] usb 5-1: Using ep0 maxpacket: 8 [ 892.112622][ T8853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 892.134724][ T8853] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 892.153389][ T8853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.168425][ T8853] usb 5-1: config 0 descriptor?? [ 892.393412][ T8853] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 892.536359][T13894] netlink: 'syz.5.2005': attribute type 29 has an invalid length. [ 892.544548][T13894] netlink: 'syz.5.2005': attribute type 29 has an invalid length. [ 892.556568][T13894] netlink: 'syz.5.2005': attribute type 29 has an invalid length. [ 892.564841][T13894] netlink: 'syz.5.2005': attribute type 29 has an invalid length. [ 892.812147][ T5879] usb 5-1: USB disconnect, device number 22 [ 894.232491][T13904] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 894.233090][T13908] syz.1.2007: attempt to access beyond end of device [ 894.233090][T13908] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 894.266300][T13908] F2FS-fs (loop1): Unable to read 1th superblock [ 894.552138][T13908] syz.1.2007: attempt to access beyond end of device [ 894.552138][T13908] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 894.715659][T13908] F2FS-fs (loop1): Unable to read 2th superblock [ 895.502258][T13927] misc userio: Begin command sent, but we're already running [ 896.625545][T12104] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 896.775663][ T6362] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 896.825568][T12104] usb 2-1: Using ep0 maxpacket: 16 [ 896.835163][T12104] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.847389][T12104] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 896.877313][T12104] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 896.892710][T12104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.902494][T12104] usb 2-1: Product: syz [ 896.909034][T12104] usb 2-1: Manufacturer: syz [ 896.915897][T12104] usb 2-1: SerialNumber: syz [ 896.996080][ T6362] usb 5-1: Using ep0 maxpacket: 8 [ 897.013357][ T6362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 897.044025][ T6362] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 897.064583][ T6362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.149041][ T6362] usb 5-1: config 0 descriptor?? [ 897.351182][T12104] usb 2-1: cannot find UAC_HEADER [ 897.402859][ T6362] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 897.441144][T12104] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 897.540299][T12104] usb 2-1: USB disconnect, device number 44 [ 897.551300][T13943] syz.5.2021: attempt to access beyond end of device [ 897.551300][T13943] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 897.565987][T13943] F2FS-fs (loop5): Unable to read 1th superblock [ 897.574617][T13943] syz.5.2021: attempt to access beyond end of device [ 897.574617][T13943] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 897.590436][T13943] F2FS-fs (loop5): Unable to read 2th superblock [ 897.992552][T12314] udevd[12314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 898.234032][T12104] usb 5-1: USB disconnect, device number 23 [ 898.954072][T13951] loop1: detected capacity change from 0 to 2048 [ 898.975859][T13951] EXT4-fs: Ignoring removed mblk_io_submit option [ 899.048708][T13951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 899.229548][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.320953][T13962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2025'. [ 902.382298][T13987] syz.4.2031: attempt to access beyond end of device [ 902.382298][T13987] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 902.395551][T13987] F2FS-fs (loop4): Unable to read 1th superblock [ 902.402408][T13987] syz.4.2031: attempt to access beyond end of device [ 902.402408][T13987] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 902.415592][T13987] F2FS-fs (loop4): Unable to read 2th superblock [ 903.360833][ T8853] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 903.372371][T13991] syz.7.2032: attempt to access beyond end of device [ 903.372371][T13991] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 903.389753][T13991] F2FS-fs (loop7): Unable to read 1th superblock [ 903.434233][T13991] syz.7.2032: attempt to access beyond end of device [ 903.434233][T13991] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 903.449551][T13991] F2FS-fs (loop7): Unable to read 2th superblock [ 903.870552][ T8853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.024577][ T8853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.180460][ T8853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 904.195592][ T8853] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.209559][ T8853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.236206][ T8853] usb 6-1: config 0 descriptor?? [ 904.696436][T13180] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 904.925544][T13180] usb 2-1: Using ep0 maxpacket: 8 [ 905.295915][T13180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 905.317212][ T8853] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x6 [ 905.456909][ T8853] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 905.470733][T13180] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 905.517560][T13180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.528506][ T8853] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 905.587271][T13180] usb 2-1: config 0 descriptor?? [ 905.604101][ T8853] usb 6-1: USB disconnect, device number 20 [ 905.811090][T14010] fido_id[14010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 905.811271][T13180] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 906.229287][T12104] usb 2-1: USB disconnect, device number 45 [ 906.338838][T13180] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 906.909107][T13180] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 907.691589][T13180] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 909.018899][T13180] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 909.029482][T13180] usb 8-1: config 220 has no interface number 2 [ 909.045434][T13180] usb 8-1: config 220 interface 1 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 909.058078][T13180] usb 8-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 909.071405][T13180] usb 8-1: config 220 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 909.083154][T13180] usb 8-1: config 220 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 909.093466][T13180] usb 8-1: config 220 interface 0 has no altsetting 0 [ 909.100710][T13180] usb 8-1: config 220 interface 76 has no altsetting 0 [ 909.108493][T13180] usb 8-1: config 220 interface 1 has no altsetting 2 [ 909.518260][T14030] syz.1.2042: attempt to access beyond end of device [ 909.518260][T14030] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 909.531683][T14030] F2FS-fs (loop1): Unable to read 1th superblock [ 909.544949][T14030] syz.1.2042: attempt to access beyond end of device [ 909.544949][T14030] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 909.558601][T14030] F2FS-fs (loop1): Unable to read 2th superblock [ 909.893186][T13180] usb 8-1: string descriptor 0 read error: -71 [ 909.958071][T13180] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 909.987759][T13180] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.022079][T13180] usb 8-1: can't set config #220, error -71 [ 910.055711][T13180] usb 8-1: USB disconnect, device number 9 [ 910.903764][T14039] loop1: detected capacity change from 0 to 2048 [ 911.007031][T14039] EXT4-fs: Ignoring removed mblk_io_submit option [ 911.566884][T14039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 911.591388][T14039] overlayfs: failed to resolve './file1': -2 [ 911.875761][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.986303][T14049] fuse: Bad value for 'group_id' [ 913.251936][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 913.575753][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 914.539357][T14067] lo speed is unknown, defaulting to 1000 [ 914.545573][T14067] lo speed is unknown, defaulting to 1000 [ 914.554190][T14067] lo speed is unknown, defaulting to 1000 [ 914.567722][T14067] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 914.584127][T14067] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 914.725073][T14067] lo speed is unknown, defaulting to 1000 [ 914.732606][T14067] lo speed is unknown, defaulting to 1000 [ 914.739425][T14067] lo speed is unknown, defaulting to 1000 [ 914.775423][T14067] lo speed is unknown, defaulting to 1000 [ 914.966895][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.990331][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 915.019787][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.056929][ T8] usb 8-1: config 0 descriptor?? [ 915.508610][ T8] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 915.867324][T14077] loop5: detected capacity change from 0 to 2048 [ 915.929244][T12104] usb 8-1: USB disconnect, device number 10 [ 918.018693][T14077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.926811][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.345778][T14095] fuse: Bad value for 'group_id' [ 922.220988][T14114] loop7: detected capacity change from 0 to 1764 [ 923.799658][ T28] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 923.936656][T14128] fuse: Bad value for 'group_id' [ 924.025556][ T28] usb 8-1: Using ep0 maxpacket: 8 [ 924.032069][ T28] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.094073][ T28] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 924.134855][ T28] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.156373][ T28] usb 8-1: config 0 descriptor?? [ 924.409253][ T28] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 924.804949][ T28] usb 8-1: USB disconnect, device number 11 [ 926.445156][T14147] loop5: detected capacity change from 0 to 512 [ 926.486538][T14147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.504028][T14147] EXT4-fs (loop5): Test dummy encryption mode enabled [ 926.716212][T14147] EXT4-fs (loop5): 1 truncate cleaned up [ 926.722531][T14147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.815107][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.271869][T14159] tipc: Started in network mode [ 928.277408][T14159] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 928.287223][T14159] tipc: Enabled bearer , priority 0 [ 928.684787][T14163] syz.5.2079: attempt to access beyond end of device [ 928.684787][T14163] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 928.698071][T14163] F2FS-fs (loop5): Unable to read 1th superblock [ 928.704954][T14163] syz.5.2079: attempt to access beyond end of device [ 928.704954][T14163] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 928.718087][T14163] F2FS-fs (loop5): Unable to read 2th superblock [ 929.582264][ T8] tipc: Node number set to 11578026 [ 930.005425][T13180] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 930.224869][T13180] usb 6-1: config 0 has no interfaces? [ 930.243639][T13180] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 930.258214][T13180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.266550][T13180] usb 6-1: Product: syz [ 930.276299][T13180] usb 6-1: Manufacturer: syz [ 930.285752][T13180] usb 6-1: SerialNumber: syz [ 930.299711][T13180] usb 6-1: config 0 descriptor?? [ 930.445430][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 930.627652][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 930.649073][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.688862][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 930.690741][T14172] program syz.5.2080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.725466][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.747646][ T8] usb 8-1: config 0 descriptor?? [ 931.027918][ T8] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 931.275767][T13100] Bluetooth: hci4: command 0x0406 tx timeout [ 931.776038][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.782395][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.084709][ T28] usb 8-1: USB disconnect, device number 12 [ 933.010380][T14190] overlayfs: failed to resolve './file0/../file0': -2 [ 933.658579][T14201] syz.7.2089: attempt to access beyond end of device [ 933.658579][T14201] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 933.671608][T14201] F2FS-fs (loop7): Unable to read 1th superblock [ 933.703707][T14201] syz.7.2089: attempt to access beyond end of device [ 933.703707][T14201] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 933.734763][T14201] F2FS-fs (loop7): Unable to read 2th superblock [ 934.301089][ T8] usb 6-1: USB disconnect, device number 21 [ 934.660008][T14214] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 935.775296][T14220] loop5: detected capacity change from 0 to 32768 [ 935.790955][T14220] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2096 (14220) [ 935.846241][T14220] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 935.856510][T14220] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 935.866009][T14220] BTRFS info (device loop5): using free space tree [ 936.105642][T14220] BTRFS info (device loop5): enabling ssd optimizations [ 936.112935][T14220] BTRFS info (device loop5): auto enabling async discard [ 936.890358][ T8631] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 938.135521][ T28] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 938.377152][T14251] loop1: detected capacity change from 0 to 32768 [ 938.404700][T14251] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 938.475459][ T28] usb 6-1: Using ep0 maxpacket: 8 [ 938.485651][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.497089][ T28] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 938.506411][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.533562][ T28] usb 6-1: config 0 descriptor?? [ 938.671610][T14251] XFS (loop1): Ending clean mount [ 938.680084][T14251] XFS (loop1): Quotacheck needed: Please wait. [ 938.765056][ T28] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 938.802757][T14251] XFS (loop1): Quotacheck: Done. [ 940.027083][T13180] usb 6-1: USB disconnect, device number 22 [ 940.050548][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 940.570408][T14271] loop7: detected capacity change from 0 to 2048 [ 940.605299][T14271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 940.885863][T14271] EXT4-fs (loop7): shut down requested (2) [ 941.028510][T12099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.810438][T14297] loop4: detected capacity change from 0 to 1024 [ 943.886386][T14297] hfsplus: bad catalog entry type [ 943.921736][ T9093] hfsplus: b-tree write err: -5, ino 4 [ 945.160076][T14306] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 945.177467][T14306] syz.1.2114: attempt to access beyond end of device [ 945.177467][T14306] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 945.190667][T14306] F2FS-fs (loop1): Unable to read 1th superblock [ 945.197289][T14306] syz.1.2114: attempt to access beyond end of device [ 945.197289][T14306] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 945.210607][T14306] F2FS-fs (loop1): Unable to read 2th superblock [ 946.331075][T14316] loop1: detected capacity change from 0 to 2048 [ 946.404187][T14316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.451621][T14316] EXT4-fs (loop1): shut down requested (2) [ 946.621203][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.909664][T14333] loop5: detected capacity change from 0 to 1024 [ 950.062536][ T9093] hfsplus: b-tree write err: -5, ino 4 [ 953.505029][T14377] syz.4.2132: attempt to access beyond end of device [ 953.505029][T14377] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 953.536946][T14377] F2FS-fs (loop4): Unable to read 1th superblock [ 953.544175][T14377] syz.4.2132: attempt to access beyond end of device [ 953.544175][T14377] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 953.570513][T14377] F2FS-fs (loop4): Unable to read 2th superblock [ 954.615846][T13100] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 955.230861][T14388] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 955.289219][T14388] syz.4.2134: attempt to access beyond end of device [ 955.289219][T14388] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 955.303112][T14388] F2FS-fs (loop4): Unable to read 1th superblock [ 955.315428][T14388] syz.4.2134: attempt to access beyond end of device [ 955.315428][T14388] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 955.329637][T14388] F2FS-fs (loop4): Unable to read 2th superblock [ 958.130068][ T5797] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 958.950589][T12184] null_blk: rq ffff8880228b8000 timed out [ 958.956545][T12184] blk_print_req_error: 54 callbacks suppressed [ 958.956553][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 958.973227][T12184] null_blk: rq ffff8880228b8180 timed out [ 958.978963][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 958.989426][T12184] null_blk: rq ffff8880228b8300 timed out [ 958.995129][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.005603][T12184] null_blk: rq ffff8880228b8480 timed out [ 959.011337][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.021831][T12184] null_blk: rq ffff8880228b8600 timed out [ 959.027569][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.038018][T12184] null_blk: rq ffff8880228b8780 timed out [ 959.043723][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.054535][T12184] null_blk: rq ffff8880228b8900 timed out [ 959.060453][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.070906][T12184] null_blk: rq ffff8880228b8a80 timed out [ 959.076660][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.087559][T12184] null_blk: rq ffff8880228b8c00 timed out [ 959.093291][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.103751][T12184] null_blk: rq ffff8880228b8d80 timed out [ 959.109483][T12184] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 959.119966][T12184] null_blk: rq ffff8880228b8f00 timed out [ 959.125715][T12184] null_blk: rq ffff8880228b9080 timed out [ 959.131429][T12184] null_blk: rq ffff8880228b9200 timed out [ 959.137202][T12184] null_blk: rq ffff8880228b9380 timed out [ 959.142916][T12184] null_blk: rq ffff8880228b9500 timed out [ 959.148940][T12184] null_blk: rq ffff8880228b9680 timed out [ 959.155110][T12184] null_blk: rq ffff8880228b9800 timed out [ 959.160895][T12184] null_blk: rq ffff8880228b9980 timed out [ 959.166661][T12184] null_blk: rq ffff8880228b9b00 timed out [ 959.172369][T12184] null_blk: rq ffff8880228b9c80 timed out [ 959.178111][T12184] null_blk: rq ffff8880228b9e00 timed out [ 959.183836][T12184] null_blk: rq ffff8880228b9f80 timed out [ 959.189584][T12184] null_blk: rq ffff8880228ba100 timed out [ 959.195301][T12184] null_blk: rq ffff8880228ba280 timed out [ 959.201562][T12184] null_blk: rq ffff8880228ba400 timed out [ 959.207386][T12184] null_blk: rq ffff8880228ba580 timed out [ 959.213094][T12184] null_blk: rq ffff8880228ba700 timed out [ 959.218839][T12184] null_blk: rq ffff8880228ba880 timed out [ 959.224547][T12184] null_blk: rq ffff8880228baa00 timed out [ 959.230318][T12184] null_blk: rq ffff8880228bab80 timed out [ 959.236171][T12184] null_blk: rq ffff8880228bad00 timed out [ 959.241883][T12184] null_blk: rq ffff8880228bae80 timed out [ 959.247947][T12184] null_blk: rq ffff8880228bb000 timed out [ 959.253924][T12184] null_blk: rq ffff8880228bb180 timed out [ 959.259691][T12184] null_blk: rq ffff8880228bb300 timed out [ 959.265446][T12184] null_blk: rq ffff8880228bb480 timed out [ 959.271159][T12184] null_blk: rq ffff8880228bb600 timed out [ 959.277133][T12184] null_blk: rq ffff8880228bb780 timed out [ 959.282933][T12184] null_blk: rq ffff8880228bb900 timed out [ 959.288680][T12184] null_blk: rq ffff8880228bba80 timed out [ 959.294392][T12184] null_blk: rq ffff8880228bbc00 timed out [ 959.300142][T12184] null_blk: rq ffff8880228bbd80 timed out [ 959.305883][T12184] null_blk: rq ffff8880228bbf00 timed out [ 959.311623][T12184] null_blk: rq ffff8880228bc080 timed out [ 959.317376][T12184] null_blk: rq ffff8880228bc200 timed out [ 959.323084][T12184] null_blk: rq ffff8880228bc380 timed out [ 959.328825][T12184] null_blk: rq ffff8880228bc500 timed out [ 959.334533][T12184] null_blk: rq ffff8880228bc680 timed out [ 959.340304][T12184] null_blk: rq ffff8880228bc800 timed out [ 959.346044][T12184] null_blk: rq ffff8880228bc980 timed out [ 959.351777][T12184] null_blk: rq ffff8880228bcb00 timed out [ 959.357854][T12184] null_blk: rq ffff8880228bcc80 timed out [ 959.363574][T12184] null_blk: rq ffff8880228bce00 timed out [ 959.373562][T12184] null_blk: rq ffff8880228bcf80 timed out [ 959.379417][T12184] null_blk: rq ffff8880228bd100 timed out [ 959.385175][T12184] null_blk: rq ffff8880228bd280 timed out [ 959.391035][T12184] null_blk: rq ffff8880228bd400 timed out [ 959.396825][T12184] null_blk: rq ffff8880228bd580 timed out [ 959.402536][T12184] null_blk: rq ffff8880228bd700 timed out [ 959.408608][T12184] null_blk: rq ffff8880228bd880 timed out [ 959.414323][T12184] null_blk: rq ffff8880228bda00 timed out [ 959.420317][T12184] null_blk: rq ffff8880228bdb80 timed out [ 959.426190][T12184] null_blk: rq ffff8880228bdd00 timed out [ 959.431915][T12184] null_blk: rq ffff8880228bde80 timed out [ 963.583110][ T5797] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 967.430417][T14470] loop4: detected capacity change from 0 to 2048 [ 967.443330][T14470] EXT4-fs: Ignoring removed mblk_io_submit option [ 967.477942][T14470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.649242][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.801648][T14485] loop1: detected capacity change from 0 to 32768 [ 968.871455][T14485] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 969.144737][T14485] XFS (loop1): Ending clean mount [ 969.154970][T14485] XFS (loop1): Quotacheck needed: Please wait. [ 969.261150][T14485] XFS (loop1): Quotacheck: Done. [ 969.864376][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 971.285718][ T8853] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 971.455686][ T8853] usb 5-1: device descriptor read/64, error -71 [ 971.787273][T14511] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 971.847904][T14511] syz.5.2169: attempt to access beyond end of device [ 971.847904][T14511] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 971.861377][T14511] F2FS-fs (loop5): Unable to read 1th superblock [ 971.879067][T14511] syz.5.2169: attempt to access beyond end of device [ 971.879067][T14511] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 971.900556][T14511] F2FS-fs (loop5): Unable to read 2th superblock [ 972.163281][ T8853] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 972.358854][ T8853] usb 5-1: device descriptor read/64, error -71 [ 972.497010][ T8853] usb usb5-port1: attempt power cycle [ 972.905423][ T8853] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 974.248499][ T8853] usb 5-1: device descriptor read/8, error -71 [ 974.689205][T14524] loop4: detected capacity change from 0 to 32768 [ 974.774333][T14524] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 974.957817][T14524] XFS (loop4): Ending clean mount [ 974.969367][T14524] XFS (loop4): Quotacheck needed: Please wait. [ 975.057754][T14524] XFS (loop4): Quotacheck: Done. [ 975.671289][ T8557] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 976.430707][T14545] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 976.439515][T14545] syz.4.2178: attempt to access beyond end of device [ 976.439515][T14545] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 976.452567][T14545] F2FS-fs (loop4): Unable to read 1th superblock [ 976.459820][T14545] syz.4.2178: attempt to access beyond end of device [ 976.459820][T14545] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 976.474839][T14545] F2FS-fs (loop4): Unable to read 2th superblock [ 982.387519][T14590] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 982.400028][T14590] syz.4.2191: attempt to access beyond end of device [ 982.400028][T14590] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 982.413356][T14590] F2FS-fs (loop4): Unable to read 1th superblock [ 982.420280][T14590] syz.4.2191: attempt to access beyond end of device [ 982.420280][T14590] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 982.433270][T14590] F2FS-fs (loop4): Unable to read 2th superblock [ 982.866733][T14593] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 985.370329][T14612] syz.1.2197: attempt to access beyond end of device [ 985.370329][T14612] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 985.384836][T14612] F2FS-fs (loop1): Unable to read 1th superblock [ 985.395367][T14612] syz.1.2197: attempt to access beyond end of device [ 985.395367][T14612] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 985.408850][T14612] F2FS-fs (loop1): Unable to read 2th superblock [ 987.528210][T14626] loop5: detected capacity change from 0 to 2048 [ 987.636198][T14626] EXT4-fs: Ignoring removed mblk_io_submit option [ 987.754322][T14626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.829878][T14634] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 988.308230][T14633] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 988.472757][T14633] EXT4-fs (loop5): Remounting filesystem read-only [ 988.604644][T14640] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 988.641316][T14640] syz.1.2204: attempt to access beyond end of device [ 988.641316][T14640] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 988.654382][T14640] F2FS-fs (loop1): Unable to read 1th superblock [ 988.664935][T14640] syz.1.2204: attempt to access beyond end of device [ 988.664935][T14640] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 988.678728][T14640] F2FS-fs (loop1): Unable to read 2th superblock [ 989.196477][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.005284][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.011707][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.491430][T14678] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 994.527404][T14678] syz.1.2216: attempt to access beyond end of device [ 994.527404][T14678] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 994.540555][T14678] F2FS-fs (loop1): Unable to read 1th superblock [ 994.552013][T14678] syz.1.2216: attempt to access beyond end of device [ 994.552013][T14678] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 994.565048][T14678] F2FS-fs (loop1): Unable to read 2th superblock [ 995.152095][T14684] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 999.696772][T14711] fuse: Bad value for 'group_id' [ 1000.666798][T14717] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1002.902958][ T5797] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1004.596899][T14748] loop5: detected capacity change from 0 to 2048 [ 1005.207244][T14748] EXT4-fs: Ignoring removed mblk_io_submit option [ 1006.947174][T14748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.996122][T14748] overlayfs: missing 'lowerdir' [ 1007.695508][T14768] loop4: detected capacity change from 0 to 512 [ 1007.702684][T14768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1007.728766][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.971952][T14768] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1008.031809][T14768] EXT4-fs (loop4): 1 truncate cleaned up [ 1008.106165][T14768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1009.172927][T14770] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1009.452380][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.531914][T14794] syz.1.2248: attempt to access beyond end of device [ 1011.531914][T14794] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1011.544816][T14794] F2FS-fs (loop1): Unable to read 1th superblock [ 1011.551347][T14794] syz.1.2248: attempt to access beyond end of device [ 1011.551347][T14794] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1011.564160][T14794] F2FS-fs (loop1): Unable to read 2th superblock [ 1011.678875][T14798] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1011.696258][T14798] syz.5.2251: attempt to access beyond end of device [ 1011.696258][T14798] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1011.709662][T14798] F2FS-fs (loop5): Unable to read 1th superblock [ 1011.716253][T14798] syz.5.2251: attempt to access beyond end of device [ 1011.716253][T14798] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1011.729124][T14798] F2FS-fs (loop5): Unable to read 2th superblock [ 1012.754372][ T5797] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1014.890753][T14831] loop4: detected capacity change from 0 to 32768 [ 1015.002555][T14831] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1015.738081][T14831] XFS (loop4): Ending clean mount [ 1015.833239][T14846] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1015.846719][T14831] XFS (loop4): Quotacheck needed: Please wait. [ 1015.950653][T14844] syz.1.2261: attempt to access beyond end of device [ 1015.950653][T14844] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1015.963499][T14844] F2FS-fs (loop1): Unable to read 1th superblock [ 1015.969966][T14844] syz.1.2261: attempt to access beyond end of device [ 1015.969966][T14844] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1015.982773][T14844] F2FS-fs (loop1): Unable to read 2th superblock [ 1016.008375][T14831] XFS (loop4): Quotacheck: Done. [ 1016.821577][ T8557] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1017.215508][T13180] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1017.378443][ T5797] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1018.145640][T13180] usb 8-1: Using ep0 maxpacket: 8 [ 1018.438552][T13180] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.465772][T13180] usb 8-1: config 0 has no interfaces? [ 1018.471380][T13180] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1018.511224][T13180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.581178][T13180] usb 8-1: config 0 descriptor?? [ 1020.664304][ T8853] usb 8-1: USB disconnect, device number 13 [ 1020.676911][T14877] loop4: detected capacity change from 0 to 2048 [ 1020.707346][T14877] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.796308][T14877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.936214][T14877] overlayfs: missing 'lowerdir' [ 1021.157704][T14884] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1021.176122][T14884] syz.5.2271: attempt to access beyond end of device [ 1021.176122][T14884] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1021.188987][T14884] F2FS-fs (loop5): Unable to read 1th superblock [ 1021.195518][T14884] syz.5.2271: attempt to access beyond end of device [ 1021.195518][T14884] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1021.208363][T14884] F2FS-fs (loop5): Unable to read 2th superblock [ 1021.243034][T14885] syz.7.2270: attempt to access beyond end of device [ 1021.243034][T14885] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1021.265686][T14885] F2FS-fs (loop7): Unable to read 1th superblock [ 1021.272153][T14885] syz.7.2270: attempt to access beyond end of device [ 1021.272153][T14885] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1021.283346][T14880] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1021.299702][T14885] F2FS-fs (loop7): Unable to read 2th superblock [ 1021.368037][T14880] EXT4-fs (loop4): Remounting filesystem read-only [ 1021.377803][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.034568][ T5797] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1025.420798][T14921] CIFS: iocharset name too long [ 1025.963434][T14923] loop5: detected capacity change from 0 to 2048 [ 1026.017463][T14923] EXT4-fs: Ignoring removed mblk_io_submit option [ 1026.217381][T14925] syz.4.2282: attempt to access beyond end of device [ 1026.217381][T14925] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1026.230278][T14925] F2FS-fs (loop4): Unable to read 1th superblock [ 1026.236764][T14925] syz.4.2282: attempt to access beyond end of device [ 1026.236764][T14925] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1026.249581][T14925] F2FS-fs (loop4): Unable to read 2th superblock [ 1026.440775][T14923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.655014][T14923] overlayfs: missing 'lowerdir' [ 1026.966762][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.959528][ T5797] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1031.948508][T14974] syz.4.2292: attempt to access beyond end of device [ 1031.948508][T14974] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1031.961418][T14974] F2FS-fs (loop4): Unable to read 1th superblock [ 1031.968049][T14974] syz.4.2292: attempt to access beyond end of device [ 1031.968049][T14974] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1031.980898][T14974] F2FS-fs (loop4): Unable to read 2th superblock [ 1033.459134][T14987] tipc: Started in network mode [ 1033.464022][T14987] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1033.471339][T14987] tipc: Enabled bearer , priority 0 [ 1033.620244][ T5797] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1034.616756][ T5879] tipc: Node number set to 11578026 [ 1037.180399][T15008] CIFS: iocharset name too long [ 1038.809298][T15018] loop5: detected capacity change from 0 to 512 [ 1038.936564][T15018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1038.986055][T15018] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1039.315534][T15018] EXT4-fs (loop5): 1 truncate cleaned up [ 1039.321815][T15018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.120122][T15025] syz.4.2306: attempt to access beyond end of device [ 1040.120122][T15025] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1040.133424][T15025] F2FS-fs (loop4): Unable to read 1th superblock [ 1040.140837][T15025] syz.4.2306: attempt to access beyond end of device [ 1040.140837][T15025] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1040.155053][T15025] F2FS-fs (loop4): Unable to read 2th superblock [ 1041.356085][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.176863][T15037] fuse: Unknown parameter 'grou00000000000000000000' [ 1042.828326][T15038] tipc: Started in network mode [ 1042.833213][T15038] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1043.897554][T15038] tipc: Enabled bearer , priority 0 [ 1044.357533][T15048] netlink: 'syz.7.2313': attribute type 29 has an invalid length. [ 1044.586384][T15048] netlink: 'syz.7.2313': attribute type 29 has an invalid length. [ 1044.818929][T15050] netlink: 'syz.7.2313': attribute type 29 has an invalid length. [ 1044.967316][T15051] netlink: 'syz.7.2313': attribute type 29 has an invalid length. [ 1045.015507][ T8837] tipc: Node number set to 11578026 [ 1046.935534][ T8837] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1047.127144][ T8837] usb 5-1: Using ep0 maxpacket: 8 [ 1047.159330][ T8837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.189894][ T8837] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1047.214951][ T8837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.277909][ T8837] usb 5-1: config 0 descriptor?? [ 1047.287527][ T8837] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 1047.735439][ T5797] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1049.841895][ T8853] usb 5-1: USB disconnect, device number 28 [ 1049.996381][T15079] fuse: Unknown parameter 'grou00000000000000000000' [ 1050.015593][T15083] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1050.089751][T15086] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 1050.594529][T15086] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 1050.649574][T15088] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 1050.705754][T15086] netlink: 'syz.4.2324': attribute type 29 has an invalid length. [ 1052.445731][T15099] CIFS: iocharset name too long [ 1053.652478][ T5797] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1054.655138][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.673960][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.976043][T15107] loop5: detected capacity change from 0 to 2048 [ 1055.023456][T15107] EXT4-fs: Ignoring removed mblk_io_submit option [ 1055.104427][T15107] EXT4-fs: Ignoring removed nobh option [ 1055.432957][T15107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.607583][T15107] EXT4-fs (loop5): shut down requested (0) [ 1056.174536][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.686261][T15124] netlink: 'syz.7.2333': attribute type 29 has an invalid length. [ 1056.712587][T15124] netlink: 'syz.7.2333': attribute type 29 has an invalid length. [ 1056.758843][T15124] netlink: 'syz.7.2333': attribute type 29 has an invalid length. [ 1056.789367][T15124] netlink: 'syz.7.2333': attribute type 29 has an invalid length. [ 1056.945436][ T8837] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1057.187537][ T8837] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1057.202262][ T8837] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1057.234498][ T8837] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.260013][ T8837] usb 6-1: config 220 has no interface number 2 [ 1057.289538][ T8837] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1057.327921][ T8837] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1057.716271][ T8837] usb 6-1: config 220 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1057.869327][ T8837] usb 6-1: config 220 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1057.898448][ T8837] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1057.915545][ T8837] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1057.922457][ T8837] usb 6-1: config 220 interface 1 has no altsetting 2 [ 1057.993135][ T8837] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1058.012804][ T8837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.033034][ T8837] usb 6-1: Product: syz [ 1058.037437][ T8837] usb 6-1: Manufacturer: syz [ 1058.055395][ T8837] usb 6-1: SerialNumber: syz [ 1058.249406][T15133] tipc: Enabling of bearer rejected, already enabled [ 1058.926048][ T8837] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1058.945852][ T8837] usb 6-1: No valid video chain found. [ 1058.992038][ T8837] cdc_ncm 6-1:220.1: CDC Union missing and no IAD found [ 1059.036491][ T8837] cdc_ncm 6-1:220.1: bind() failure [ 1059.083176][ T8837] usb 6-1: USB disconnect, device number 23 [ 1059.615583][T13180] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1059.891848][T13180] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1059.925628][T13180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.966960][T13180] usb 8-1: config 0 descriptor?? [ 1060.008507][T13180] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1060.016365][T15153] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 1060.116646][T15153] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 1060.340505][T15157] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 1060.516250][T15159] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 1060.561337][T13100] Bluetooth: hci4: command 0x0406 tx timeout [ 1061.891594][T13180] gspca_stv06xx: I2C: Read error writing address: -71 [ 1061.926971][T13180] usb 8-1: USB disconnect, device number 14 [ 1065.263074][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1065.282254][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1065.298275][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1065.318404][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1065.338411][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1065.361284][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1065.974070][ T992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1066.185496][ T992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.325158][T15188] lo speed is unknown, defaulting to 1000 [ 1067.437970][T13100] Bluetooth: hci2: command tx timeout [ 1067.972185][ T992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1067.982865][ T992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.201465][ T992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.255421][ T992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.867679][ T992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.879241][T15210] syz.7.2363: attempt to access beyond end of device [ 1068.879241][T15210] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1068.892539][T15210] F2FS-fs (loop7): Unable to read 1th superblock [ 1068.899043][T15210] syz.7.2363: attempt to access beyond end of device [ 1068.899043][T15210] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1068.911860][T15210] F2FS-fs (loop7): Unable to read 2th superblock [ 1068.949771][ T992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.143275][T15207] loop5: detected capacity change from 0 to 32768 [ 1069.157004][T15207] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2362 (15207) [ 1069.245290][T15207] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1069.292010][T15207] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1069.331979][T15207] BTRFS info (device loop5): enabling auto defrag [ 1069.350987][T15207] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1069.425027][T15207] BTRFS info (device loop5): use zstd compression, level 3 [ 1069.446617][T15207] BTRFS info (device loop5): force clearing of disk cache [ 1069.466388][T15207] BTRFS info (device loop5): max_inline at 0 [ 1069.504560][T15207] BTRFS info (device loop5): use zlib compression, level 3 [ 1069.512255][T15188] chnl_net:caif_netlink_parms(): no params data found [ 1069.515654][T13100] Bluetooth: hci2: command tx timeout [ 1069.551765][T15207] BTRFS info (device loop5): using free space tree [ 1069.715742][T15207] BTRFS info (device loop5): enabling ssd optimizations [ 1069.726148][T15207] BTRFS info (device loop5): auto enabling async discard [ 1069.799380][T15207] BTRFS info (device loop5): rebuilding free space tree [ 1069.854745][ T992] tipc: Disabling bearer [ 1069.906598][ T992] tipc: Left network mode [ 1070.039984][ T8631] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1070.059619][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.081449][T15188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.096232][T15188] bridge_slave_0: entered allmulticast mode [ 1070.131127][T15188] bridge_slave_0: entered promiscuous mode [ 1070.418617][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.560965][T15188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.284183][T15188] bridge_slave_1: entered allmulticast mode [ 1071.329480][T15188] bridge_slave_1: entered promiscuous mode [ 1071.605485][T13100] Bluetooth: hci2: command tx timeout [ 1072.861270][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.010895][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.622930][T15188] team0: Port device team_slave_0 added [ 1073.675495][T13100] Bluetooth: hci2: command tx timeout [ 1073.874385][T15188] team0: Port device team_slave_1 added [ 1074.748409][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.761568][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.815482][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.451217][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.498466][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1075.556781][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.944340][T15188] hsr_slave_0: entered promiscuous mode [ 1075.950823][T15188] hsr_slave_1: entered promiscuous mode [ 1075.998398][T15188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1076.025465][T15188] Cannot create hsr debugfs directory [ 1076.566238][ T992] hsr_slave_0: left promiscuous mode [ 1076.584466][ T992] hsr_slave_1: left promiscuous mode [ 1076.690846][ T992] veth1_macvtap: left promiscuous mode [ 1076.699705][ T992] veth0_macvtap: left promiscuous mode [ 1076.708067][ T992] veth1_vlan: left promiscuous mode [ 1076.718790][ T992] veth0_vlan: left promiscuous mode [ 1077.240726][T15301] loop4: detected capacity change from 0 to 512 [ 1077.363576][T15301] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2374: casefold flag without casefold feature [ 1077.445281][T15301] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2374: couldn't read orphan inode 15 (err -117) [ 1077.537005][T15301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.682100][T14283] null_blk: rq ffff8880228b8000 timed out [ 1077.688385][T14283] blk_print_req_error: 54 callbacks suppressed [ 1077.688398][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.705759][T14283] null_blk: rq ffff8880228b8180 timed out [ 1077.711537][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.722284][T14283] null_blk: rq ffff8880228b8300 timed out [ 1077.728376][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.739079][T14283] null_blk: rq ffff8880228b8480 timed out [ 1077.744791][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.755493][T14283] null_blk: rq ffff8880228b8600 timed out [ 1077.761227][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.771921][T14283] null_blk: rq ffff8880228b8780 timed out [ 1077.777824][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.788444][T14283] null_blk: rq ffff8880228b8900 timed out [ 1077.794166][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.804910][T14283] null_blk: rq ffff8880228b8a80 timed out [ 1077.810816][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.821611][T14283] null_blk: rq ffff8880228b8c00 timed out [ 1077.827590][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.838546][T14283] null_blk: rq ffff8880228b8d80 timed out [ 1077.844278][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 2 [ 1077.854950][T14283] null_blk: rq ffff8880228b8f00 timed out [ 1077.860900][T14283] null_blk: rq ffff8880228b9080 timed out [ 1077.866804][T14283] null_blk: rq ffff8880228b9200 timed out [ 1077.872561][T14283] null_blk: rq ffff8880228b9380 timed out [ 1077.878538][T14283] null_blk: rq ffff8880228b9500 timed out [ 1077.884280][T14283] null_blk: rq ffff8880228b9680 timed out [ 1077.890264][T14283] null_blk: rq ffff8880228b9800 timed out [ 1077.896189][T14283] null_blk: rq ffff8880228b9980 timed out [ 1077.901943][T14283] null_blk: rq ffff8880228b9b00 timed out [ 1077.908182][T14283] null_blk: rq ffff8880228b9c80 timed out [ 1077.913947][T14283] null_blk: rq ffff8880228b9e00 timed out [ 1077.920026][T14283] null_blk: rq ffff8880228b9f80 timed out [ 1077.925836][T14283] null_blk: rq ffff8880228ba100 timed out [ 1077.931560][T14283] null_blk: rq ffff8880228ba280 timed out [ 1077.937391][T14283] null_blk: rq ffff8880228ba400 timed out [ 1077.943111][T14283] null_blk: rq ffff8880228ba580 timed out [ 1077.948938][T14283] null_blk: rq ffff8880228ba700 timed out [ 1077.954664][T14283] null_blk: rq ffff8880228ba880 timed out [ 1077.960436][T14283] null_blk: rq ffff8880228baa00 timed out [ 1077.966188][T14283] null_blk: rq ffff8880228bab80 timed out [ 1077.971911][T14283] null_blk: rq ffff8880228bad00 timed out [ 1077.977721][T14283] null_blk: rq ffff8880228bae80 timed out [ 1077.983434][T14283] null_blk: rq ffff8880228bb000 timed out [ 1077.989197][T14283] null_blk: rq ffff8880228bb180 timed out [ 1077.994905][T14283] null_blk: rq ffff8880228bb300 timed out [ 1078.000794][T14283] null_blk: rq ffff8880228bb480 timed out [ 1078.006683][T14283] null_blk: rq ffff8880228bb600 timed out [ 1078.012392][T14283] null_blk: rq ffff8880228bb780 timed out [ 1078.018263][T14283] null_blk: rq ffff8880228bb900 timed out [ 1078.023979][T14283] null_blk: rq ffff8880228bba80 timed out [ 1078.029764][T14283] null_blk: rq ffff8880228bbc00 timed out [ 1078.035525][T14283] null_blk: rq ffff8880228bbd80 timed out [ 1078.041237][T14283] null_blk: rq ffff8880228bbf00 timed out [ 1078.047026][T14283] null_blk: rq ffff8880228bc080 timed out [ 1078.052741][T14283] null_blk: rq ffff8880228bc200 timed out [ 1078.058582][T14283] null_blk: rq ffff8880228bc380 timed out [ 1078.064315][T14283] null_blk: rq ffff8880228bc500 timed out [ 1078.070339][T14283] null_blk: rq ffff8880228bc680 timed out [ 1078.076234][T14283] null_blk: rq ffff8880228bc800 timed out [ 1078.081947][T14283] null_blk: rq ffff8880228bc980 timed out [ 1078.087799][T14283] null_blk: rq ffff8880228bcb00 timed out [ 1078.093553][T14283] null_blk: rq ffff8880228bcc80 timed out [ 1078.099360][T14283] null_blk: rq ffff8880228bce00 timed out [ 1078.105090][T14283] null_blk: rq ffff8880228bcf80 timed out [ 1078.110850][T14283] null_blk: rq ffff8880228bd100 timed out [ 1078.116594][T14283] null_blk: rq ffff8880228bd280 timed out [ 1078.122300][T14283] null_blk: rq ffff8880228bd400 timed out [ 1078.128171][T14283] null_blk: rq ffff8880228bd580 timed out [ 1078.133881][T14283] null_blk: rq ffff8880228bd700 timed out [ 1078.139668][T14283] null_blk: rq ffff8880228bd880 timed out [ 1078.145477][T14283] null_blk: rq ffff8880228bda00 timed out [ 1078.151241][T14283] null_blk: rq ffff8880228bdb80 timed out [ 1078.157125][T14283] null_blk: rq ffff8880228bdd00 timed out [ 1078.162852][T14283] null_blk: rq ffff8880228bde80 timed out [ 1078.530930][T15316] CIFS: iocharset name too long [ 1078.723767][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.131707][ T992] bond0 (unregistering): Released all slaves [ 1084.295021][T15352] tipc: Enabling of bearer rejected, already enabled [ 1085.180711][T15362] loop4: detected capacity change from 0 to 2048 [ 1085.194612][T15362] EXT4-fs: Ignoring removed mblk_io_submit option [ 1085.205123][T15362] EXT4-fs: Ignoring removed nobh option [ 1085.262223][T15362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.554510][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.680240][T15368] netlink: 'syz.7.2389': attribute type 29 has an invalid length. [ 1085.706957][T15368] netlink: 'syz.7.2389': attribute type 29 has an invalid length. [ 1085.740314][T15368] netlink: 'syz.7.2389': attribute type 29 has an invalid length. [ 1085.778432][T15188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.803241][T15188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.863356][T15188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.902908][T15188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.939459][T15375] loop7: detected capacity change from 0 to 2048 [ 1085.948919][T15375] EXT4-fs: Ignoring removed mblk_io_submit option [ 1086.074784][T15188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.079098][T15375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1086.097907][T15188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.142789][T15188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1086.154029][T15188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1086.200515][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.207743][ T8860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.242968][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.250187][ T8860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.276143][T15375] overlayfs: missing 'workdir' [ 1086.375151][T12099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.612342][T15188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.287082][ T8996] null_blk: rq ffff8880228b8000 timed out [ 1087.292962][ T8996] blk_print_req_error: 54 callbacks suppressed [ 1087.292974][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.309884][ T8996] null_blk: rq ffff8880228b8180 timed out [ 1087.315912][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.326801][ T8996] null_blk: rq ffff8880228b8300 timed out [ 1087.332658][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.348943][ T8996] null_blk: rq ffff8880228b8480 timed out [ 1087.355171][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.366091][ T8996] null_blk: rq ffff8880228b8600 timed out [ 1087.372031][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.382910][ T8996] null_blk: rq ffff8880228b8780 timed out [ 1087.388803][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.399419][ T8996] null_blk: rq ffff8880228b8900 timed out [ 1087.405463][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.416540][ T8996] null_blk: rq ffff8880228b8a80 timed out [ 1087.423484][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1087.441978][ T8996] null_blk: rq ffff8880228b8c00 timed out [ 1088.165670][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1088.177460][ T8996] null_blk: rq ffff8880228b8d80 timed out [ 1088.183400][ T8996] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 1 prio class 2 [ 1088.194061][ T8996] null_blk: rq ffff8880228b8f00 timed out [ 1088.199988][ T8996] null_blk: rq ffff8880228b9080 timed out [ 1088.211043][ T8996] null_blk: rq ffff8880228b9200 timed out [ 1088.218069][ T8996] null_blk: rq ffff8880228b9380 timed out [ 1088.225685][ T8996] null_blk: rq ffff8880228b9500 timed out [ 1088.233038][ T8996] null_blk: rq ffff8880228b9680 timed out [ 1088.242503][ T8996] null_blk: rq ffff8880228bb000 timed out [ 1088.606403][ T8996] null_blk: rq ffff8880228bc800 timed out [ 1088.612898][ T8996] null_blk: rq ffff8880228bc980 timed out [ 1088.619688][ T8996] null_blk: rq ffff8880228bcb00 timed out [ 1088.639418][ T8996] null_blk: rq ffff8880228bcc80 timed out [ 1088.645612][ T8996] null_blk: rq ffff8880228bce00 timed out [ 1088.651725][ T8996] null_blk: rq ffff8880228bcf80 timed out [ 1088.657907][ T8996] null_blk: rq ffff8880228bd100 timed out [ 1088.711172][ T8996] null_blk: rq ffff8880228bd280 timed out [ 1088.719384][ T8996] null_blk: rq ffff8880228bd400 timed out [ 1088.725907][ T8996] null_blk: rq ffff8880228bd580 timed out [ 1088.734971][ T8996] null_blk: rq ffff8880228bd700 timed out [ 1088.743470][ T8996] null_blk: rq ffff8880228bd880 timed out [ 1088.752220][ T8996] null_blk: rq ffff8880228bda00 timed out [ 1088.760695][ T8996] null_blk: rq ffff8880228bdb80 timed out [ 1088.768743][ T8996] null_blk: rq ffff8880228bdd00 timed out [ 1088.954680][ T8996] null_blk: rq ffff8880228b9800 timed out [ 1088.961076][ T8996] null_blk: rq ffff8880228b9980 timed out [ 1088.969263][ T8996] null_blk: rq ffff8880228b9b00 timed out [ 1088.975134][ T8996] null_blk: rq ffff8880228b9c80 timed out [ 1088.981142][ T8996] null_blk: rq ffff8880228b9e00 timed out [ 1088.986990][ T8996] null_blk: rq ffff8880228b9f80 timed out [ 1088.993209][ T8996] null_blk: rq ffff8880228ba100 timed out [ 1088.999058][ T8996] null_blk: rq ffff8880228ba280 timed out [ 1089.011467][ T8996] null_blk: rq ffff8880228ba400 timed out [ 1089.018012][ T8996] null_blk: rq ffff8880228ba580 timed out [ 1089.023822][ T8996] null_blk: rq ffff8880228ba700 timed out [ 1089.029669][ T8996] null_blk: rq ffff8880228ba880 timed out [ 1089.035690][ T8996] null_blk: rq ffff8880228baa00 timed out [ 1089.041501][ T8996] null_blk: rq ffff8880228bab80 timed out [ 1089.047430][ T8996] null_blk: rq ffff8880228bad00 timed out [ 1089.053149][ T8996] null_blk: rq ffff8880228bae80 timed out [ 1089.058989][ T8996] null_blk: rq ffff8880228bb180 timed out [ 1089.064705][ T8996] null_blk: rq ffff8880228bb300 timed out [ 1089.070546][ T8996] null_blk: rq ffff8880228bb480 timed out [ 1089.076342][ T8996] null_blk: rq ffff8880228bb600 timed out [ 1089.082050][ T8996] null_blk: rq ffff8880228bb780 timed out [ 1089.087867][ T8996] null_blk: rq ffff8880228bb900 timed out [ 1089.093668][ T8996] null_blk: rq ffff8880228bba80 timed out [ 1089.099744][ T8996] null_blk: rq ffff8880228bbc00 timed out [ 1089.105515][ T8996] null_blk: rq ffff8880228bbd80 timed out [ 1089.111516][ T8996] null_blk: rq ffff8880228bbf00 timed out [ 1089.117314][ T8996] null_blk: rq ffff8880228bc080 timed out [ 1089.123039][ T8996] null_blk: rq ffff8880228bc200 timed out [ 1089.128794][ T8996] null_blk: rq ffff8880228bc380 timed out [ 1089.134579][ T8996] null_blk: rq ffff8880228bc500 timed out [ 1089.140515][ T8996] null_blk: rq ffff8880228bc680 timed out [ 1089.146320][ T8996] null_blk: rq ffff8880228bde80 timed out [ 1089.177552][T15188] veth0_vlan: entered promiscuous mode [ 1089.218125][T15188] veth1_vlan: entered promiscuous mode [ 1089.260101][T15188] veth0_macvtap: entered promiscuous mode [ 1089.737600][T15188] veth1_macvtap: entered promiscuous mode [ 1089.869779][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.942361][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.953088][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.964005][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.974483][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.995281][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.019151][T15188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.116911][T15410] tipc: Enabling of bearer rejected, already enabled [ 1090.643553][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.685823][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.825503][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.836295][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.846645][T15188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.865505][T15188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.904826][T15188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.959865][T15188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.992912][T15188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.009671][T15188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.057281][T15188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.256076][T15418] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1091.282764][T15418] CIFS: Unable to determine destination address [ 1091.670186][ T8853] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1091.736618][ T8860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.764646][ T8860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.806265][T15426] netlink: 'syz.4.2397': attribute type 29 has an invalid length. [ 1091.850350][ T9093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.869015][T15426] netlink: 'syz.4.2397': attribute type 29 has an invalid length. [ 1091.900393][T15429] netlink: 'syz.4.2397': attribute type 29 has an invalid length. [ 1091.912197][ T9093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.921537][ T8853] usb 6-1: Using ep0 maxpacket: 8 [ 1091.944398][ T8853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1091.967519][ T8853] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1091.985515][ T8853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.009250][ T8853] usb 6-1: config 0 descriptor?? [ 1092.042747][ T8853] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1094.945345][T15461] tipc: Enabling of bearer rejected, already enabled [ 1096.064742][ T28] usb 6-1: USB disconnect, device number 24 [ 1096.855928][T15466] loop7: detected capacity change from 0 to 64 [ 1096.984584][T15466] hfs: get root inode failed [ 1097.576432][T15479] netlink: 'syz.1.2407': attribute type 29 has an invalid length. [ 1097.584822][T15479] netlink: 'syz.1.2407': attribute type 29 has an invalid length. [ 1097.594965][T15479] netlink: 'syz.1.2407': attribute type 29 has an invalid length. [ 1097.732991][T15475] loop5: detected capacity change from 0 to 4096 [ 1097.815445][T15475] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1097.929539][T15490] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1098.837522][T15475] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1098.859375][T15493] loop1: detected capacity change from 0 to 2048 [ 1098.888386][T15493] EXT4-fs: Ignoring removed mblk_io_submit option [ 1099.036518][T15493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1099.041071][T15473] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 1099.077977][T15473] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 1099.208767][ T11] ntfs3: loop5: ino=1e, failed to parse mft record [ 1099.991936][T15506] syz.7.2412 (15506) used greatest stack depth: 16816 bytes left [ 1100.047001][T15508] loop5: detected capacity change from 0 to 512 [ 1100.066568][T15508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1100.102000][T15508] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1100.135057][T15508] EXT4-fs (loop5): 1 truncate cleaned up [ 1100.152008][T15508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.167082][T15425] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1100.217750][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.298308][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.375422][T15425] usb 5-1: Using ep0 maxpacket: 8 [ 1100.414889][T15425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.433876][T15425] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1100.463765][T15425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.487938][T15425] usb 5-1: config 0 descriptor?? [ 1100.503638][T15425] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 1101.527519][T15532] loop1: detected capacity change from 0 to 64 [ 1101.872964][T15536] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1103.338932][ T5879] usb 5-1: USB disconnect, device number 29 [ 1104.715457][T15425] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1105.056879][T15566] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1105.275714][T15425] usb 2-1: Using ep0 maxpacket: 8 [ 1105.297206][T15425] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1105.316308][T15425] usb 2-1: config 0 has no interface number 0 [ 1105.325588][T15425] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1105.336533][T15425] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1105.349632][T15425] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1105.363206][T15425] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1105.372587][T15425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.391002][T15425] usb 2-1: config 0 descriptor?? [ 1105.413530][T15425] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1105.712874][ T8] usb 2-1: USB disconnect, device number 46 [ 1106.676770][ T8] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1106.875589][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 1107.056014][T15580] tipc: Started in network mode [ 1107.061082][T15580] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1107.081310][T15580] tipc: Enabled bearer , priority 0 [ 1107.262329][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.401935][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1107.428775][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1107.457322][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.482469][ T8] usb 8-1: config 0 descriptor?? [ 1107.814644][ T8] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1107.907373][T15575] iowarrior 8-1:0.0: Error -90 while submitting URB [ 1108.195448][T13180] tipc: Node number set to 11578026 [ 1108.365644][T15587] lo speed is unknown, defaulting to 1000 [ 1108.371532][T15587] lo speed is unknown, defaulting to 1000 [ 1108.377857][T15587] lo speed is unknown, defaulting to 1000 [ 1108.388962][T15587] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1108.811073][T15587] lo speed is unknown, defaulting to 1000 [ 1108.817641][T15587] lo speed is unknown, defaulting to 1000 [ 1108.824117][T15587] lo speed is unknown, defaulting to 1000 [ 1108.830632][T15587] lo speed is unknown, defaulting to 1000 [ 1108.971439][ T28] usb 8-1: USB disconnect, device number 15 [ 1109.385212][T15595] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1110.312714][T15604] netlink: 'syz.1.2445': attribute type 1 has an invalid length. [ 1110.335398][T15604] netlink: 'syz.1.2445': attribute type 3 has an invalid length. [ 1110.361861][T15604] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2445'. [ 1114.450538][T15624] netlink: 6 bytes leftover after parsing attributes in process `syz.7.2451'. [ 1114.468715][T15624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1115.113935][T15627] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1115.765515][T13180] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1115.945447][T13180] usb 8-1: Using ep0 maxpacket: 8 [ 1115.961822][T13180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1115.994418][T13180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1116.070015][T13180] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1116.083543][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.091590][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.119195][T13180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.136607][T13180] usb 8-1: config 0 descriptor?? [ 1116.401946][T13180] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1116.979955][T15629] iowarrior 8-1:0.0: Error -90 while submitting URB [ 1117.003882][ T8] usb 8-1: USB disconnect, device number 16 [ 1118.104427][T15631] loop4: detected capacity change from 0 to 32768 [ 1118.153824][T15631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2453 (15631) [ 1120.164542][T15658] loop5: detected capacity change from 0 to 1024 [ 1120.172077][T15658] EXT4-fs: inline encryption not supported [ 1120.213464][T15658] EXT4-fs (loop5): can't mount with commit=9, fs mounted w/o journal [ 1120.896624][T15664] loop7: detected capacity change from 0 to 1024 [ 1121.441099][T15664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.839377][T12099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.457808][T15700] loop1: detected capacity change from 0 to 2048 [ 1125.486555][T15700] EXT4-fs: Ignoring removed mblk_io_submit option [ 1125.533971][T15700] EXT4-fs: Ignoring removed nobh option [ 1125.647887][T15700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.995195][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.252951][T15691] loop5: detected capacity change from 0 to 32768 [ 1126.347989][T15691] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1126.415520][T15691] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 1126.469420][T15691] BTRFS info (device loop5): enabling auto defrag [ 1126.504907][T15691] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1126.545601][T15691] BTRFS info (device loop5): use zstd compression, level 3 [ 1126.552879][T15691] BTRFS info (device loop5): force clearing of disk cache [ 1126.583279][T15691] BTRFS info (device loop5): max_inline at 0 [ 1126.663948][T15691] BTRFS info (device loop5): use zlib compression, level 3 [ 1126.721828][T15691] BTRFS info (device loop5): using free space tree [ 1126.762551][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1126.795784][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1126.878232][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1126.914089][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1126.925232][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1126.935217][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1126.950507][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1126.966300][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1126.976132][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1127.030793][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1127.125974][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1127.229836][T15691] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1127.231026][T15740] fuse: Bad value for 'rootmode' [ 1127.311396][T15691] BTRFS error (device loop5): open_ctree failed: -12 [ 1129.899360][T15772] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1131.233598][T15757] loop1: detected capacity change from 0 to 32768 [ 1131.257945][T15757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2481 (15757) [ 1131.327350][T15757] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1131.340625][T15757] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1131.350475][T15757] BTRFS info (device loop1): enabling auto defrag [ 1131.359255][T15757] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1131.370090][T15757] BTRFS info (device loop1): use zstd compression, level 3 [ 1131.378661][T15757] BTRFS info (device loop1): force clearing of disk cache [ 1131.387441][T15757] BTRFS info (device loop1): max_inline at 0 [ 1131.394397][T15757] BTRFS info (device loop1): use zlib compression, level 3 [ 1131.402606][T15757] BTRFS info (device loop1): using free space tree [ 1131.542866][T15757] BTRFS info (device loop1): enabling ssd optimizations [ 1131.560370][T15757] BTRFS info (device loop1): auto enabling async discard [ 1131.566055][T15780] loop5: detected capacity change from 0 to 32768 [ 1131.603211][T15780] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.2487 (15780) [ 1131.614769][T15757] BTRFS info (device loop1): rebuilding free space tree [ 1131.776071][T15188] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1131.803451][T12383] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (12383) [ 1131.813433][T15798] fuse: Bad value for 'rootmode' [ 1134.364445][T15824] loop1: detected capacity change from 0 to 2048 [ 1134.372030][T15824] EXT4-fs: Ignoring removed mblk_io_submit option [ 1134.378658][T15824] EXT4-fs: Ignoring removed nobh option [ 1134.400936][T15824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1134.425671][ T28] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1134.451465][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.625694][ T28] usb 6-1: Using ep0 maxpacket: 16 [ 1134.970818][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.988302][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.012608][ T28] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1135.029366][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.041458][ T28] usb 6-1: config 0 descriptor?? [ 1135.619064][T15839] fuse: Bad value for 'rootmode' [ 1136.558485][ T28] letsketch 0003:6161:4D15.000C: Device info: ࠇ [ 1136.572360][T14869] null_blk: rq ffff8880228b8000 timed out [ 1136.578203][T14869] blk_print_req_error: 54 callbacks suppressed [ 1136.578216][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.594878][T14869] null_blk: rq ffff8880228b8180 timed out [ 1136.600745][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.612076][T14869] null_blk: rq ffff8880228b8300 timed out [ 1136.617839][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.628292][T14869] null_blk: rq ffff8880228b8480 timed out [ 1136.634014][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.645115][T14869] null_blk: rq ffff8880228b8600 timed out [ 1136.651012][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.661481][T14869] null_blk: rq ffff8880228b8780 timed out [ 1136.667221][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.681382][T14869] null_blk: rq ffff8880228b8900 timed out [ 1136.687206][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.697717][T14869] null_blk: rq ffff8880228b8a80 timed out [ 1136.703429][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.715393][T14869] null_blk: rq ffff8880228b8c00 timed out [ 1136.721134][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.731683][T14869] null_blk: rq ffff8880228b8d80 timed out [ 1136.737417][T14869] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1136.747866][T14869] null_blk: rq ffff8880228b8f00 timed out [ 1136.753582][T14869] null_blk: rq ffff8880228b9080 timed out [ 1136.759340][T14869] null_blk: rq ffff8880228b9200 timed out [ 1136.765054][T14869] null_blk: rq ffff8880228b9380 timed out [ 1136.770836][T14869] null_blk: rq ffff8880228b9500 timed out [ 1136.776577][T14869] null_blk: rq ffff8880228b9680 timed out [ 1136.782697][T14869] null_blk: rq ffff8880228b9800 timed out [ 1136.792313][T14869] null_blk: rq ffff8880228b9980 timed out [ 1136.798087][T14869] null_blk: rq ffff8880228b9b00 timed out [ 1136.803802][T14869] null_blk: rq ffff8880228b9c80 timed out [ 1136.809583][T14869] null_blk: rq ffff8880228b9e00 timed out [ 1136.815998][T14869] null_blk: rq ffff8880228b9f80 timed out [ 1136.821784][T14869] null_blk: rq ffff8880228ba100 timed out [ 1136.827599][T14869] null_blk: rq ffff8880228ba280 timed out [ 1136.833803][T14869] null_blk: rq ffff8880228ba400 timed out [ 1136.839848][T14869] null_blk: rq ffff8880228ba580 timed out [ 1136.845652][T14869] null_blk: rq ffff8880228ba700 timed out [ 1136.851415][T14869] null_blk: rq ffff8880228ba880 timed out [ 1136.857188][T14869] null_blk: rq ffff8880228baa00 timed out [ 1136.862916][T14869] null_blk: rq ffff8880228bab80 timed out [ 1136.868664][T14869] null_blk: rq ffff8880228bad00 timed out [ 1136.874386][T14869] null_blk: rq ffff8880228bae80 timed out [ 1136.881133][T14869] null_blk: rq ffff8880228bb000 timed out [ 1136.887008][T14869] null_blk: rq ffff8880228bb180 timed out [ 1136.892746][T14869] null_blk: rq ffff8880228bb300 timed out [ 1136.898628][T14869] null_blk: rq ffff8880228bb480 timed out [ 1136.904380][T14869] null_blk: rq ffff8880228bb600 timed out [ 1136.910161][T14869] null_blk: rq ffff8880228bb780 timed out [ 1136.916383][T14869] null_blk: rq ffff8880228bb900 timed out [ 1136.922112][T14869] null_blk: rq ffff8880228bba80 timed out [ 1136.927920][T14869] null_blk: rq ffff8880228bbc00 timed out [ 1136.947830][T14869] null_blk: rq ffff8880228bbd80 timed out [ 1136.953581][T14869] null_blk: rq ffff8880228bbf00 timed out [ 1136.965471][T14869] null_blk: rq ffff8880228bc080 timed out [ 1136.971246][T14869] null_blk: rq ffff8880228bc200 timed out [ 1136.977001][T14869] null_blk: rq ffff8880228bc380 timed out [ 1136.982714][T14869] null_blk: rq ffff8880228bc500 timed out [ 1136.988474][T14869] null_blk: rq ffff8880228bc680 timed out [ 1136.994185][T14869] null_blk: rq ffff8880228bc800 timed out [ 1136.999950][T14869] null_blk: rq ffff8880228bc980 timed out [ 1137.005747][T14869] null_blk: rq ffff8880228bcb00 timed out [ 1137.011511][T14869] null_blk: rq ffff8880228bcc80 timed out [ 1137.017825][T14869] null_blk: rq ffff8880228bce00 timed out [ 1137.023551][T14869] null_blk: rq ffff8880228bcf80 timed out [ 1137.029314][T14869] null_blk: rq ffff8880228bd100 timed out [ 1137.035021][T14869] null_blk: rq ffff8880228bd280 timed out [ 1137.044771][T14869] null_blk: rq ffff8880228bd400 timed out [ 1137.050573][T14869] null_blk: rq ffff8880228bd580 timed out [ 1137.056418][T14869] null_blk: rq ffff8880228bd700 timed out [ 1137.062128][T14869] null_blk: rq ffff8880228bd880 timed out [ 1137.067910][T14869] null_blk: rq ffff8880228bda00 timed out [ 1137.073617][T14869] null_blk: rq ffff8880228bdb80 timed out [ 1137.079360][T14869] null_blk: rq ffff8880228bdd00 timed out [ 1137.085156][T14869] null_blk: rq ffff8880228bde80 timed out [ 1137.132206][ T28] letsketch 0003:6161:4D15.000C: Device info: 擃 [ 1137.458070][ T28] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 1138.077970][ T28] letsketch: probe of 0003:6161:4D15.000C failed with error -71 [ 1138.099200][ T28] usb 6-1: USB disconnect, device number 25 [ 1138.195490][T15698] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1138.397836][T15698] usb 5-1: Using ep0 maxpacket: 8 [ 1138.446739][T15698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1138.471836][T15698] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1138.495474][T15698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.523277][T15698] usb 5-1: config 0 descriptor?? [ 1139.189955][T15698] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1139.284626][T15865] loop1: detected capacity change from 0 to 2048 [ 1139.299781][T15865] EXT4-fs: Ignoring removed mblk_io_submit option [ 1139.327929][T15865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.580880][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.436594][T15698] usb 5-1: USB disconnect, device number 30 [ 1140.494799][T15877] syz.7.2510: attempt to access beyond end of device [ 1140.494799][T15877] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1140.494893][T15877] F2FS-fs (loop7): Unable to read 1th superblock [ 1140.496418][T15877] syz.7.2510: attempt to access beyond end of device [ 1140.496418][T15877] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1140.496496][T15877] F2FS-fs (loop7): Unable to read 2th superblock [ 1141.206416][T15883] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1141.551363][ T27] audit: type=1326 audit(1754013752.432:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1141.629908][ T27] audit: type=1326 audit(1754013752.452:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1141.679320][ T27] audit: type=1326 audit(1754013752.472:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1141.739947][ T27] audit: type=1326 audit(1754013752.472:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1141.839640][ T27] audit: type=1326 audit(1754013752.472:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1141.861902][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.035665][ T27] audit: type=1326 audit(1754013752.472:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1142.097537][ T27] audit: type=1326 audit(1754013752.472:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1142.148371][ T27] audit: type=1326 audit(1754013752.472:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1142.466332][ T27] audit: type=1326 audit(1754013752.472:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1142.489579][ T27] audit: type=1326 audit(1754013752.472:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15884 comm="syz.7.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a93b8eb69 code=0x7ffc0000 [ 1142.495703][T15698] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1142.511829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.653186][T15895] loop7: detected capacity change from 0 to 2048 [ 1142.663523][T15897] vxcan1: entered allmulticast mode [ 1142.689928][T15895] EXT4-fs: Ignoring removed mblk_io_submit option [ 1142.726875][T15698] usb 5-1: Using ep0 maxpacket: 8 [ 1142.733853][T15895] EXT4-fs: Ignoring removed nobh option [ 1142.734100][T15698] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1142.768712][T15698] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.794160][T15698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.799560][T15895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1142.806133][T15698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1142.826203][T15698] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.839329][T15698] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1142.848643][T15698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.159659][T15698] usb 5-1: GET_CAPABILITIES returned 0 [ 1143.165496][T15698] usbtmc 5-1:16.0: can't read capabilities [ 1143.533664][T12099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.573301][T15908] loop1: detected capacity change from 0 to 512 [ 1143.615240][T15908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1143.651995][T15908] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1144.105029][T15908] EXT4-fs (loop1): 1 truncate cleaned up [ 1144.182984][T15908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.205232][T13180] usb 5-1: USB disconnect, device number 31 [ 1144.354543][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.002972][T15937] loop4: detected capacity change from 0 to 2048 [ 1146.016190][T15937] EXT4-fs: Ignoring removed mblk_io_submit option [ 1146.032954][T15937] EXT4-fs: Ignoring removed nobh option [ 1146.111963][T15937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.152508][T15937] EXT4-fs (loop4): shut down requested (0) [ 1146.211241][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.373700][T15952] loop4: detected capacity change from 0 to 512 [ 1146.383788][T15952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1146.419871][T15952] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1146.435235][T15952] EXT4-fs (loop4): 1 truncate cleaned up [ 1146.444485][T15952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1146.480063][T15956] fuse: Unknown parameter 'user_i00000000000000000000' [ 1146.511600][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.454036][T15975] loop5: detected capacity change from 0 to 2048 [ 1147.461733][T15975] EXT4-fs: Ignoring removed mblk_io_submit option [ 1147.469354][T15975] EXT4-fs: Ignoring removed nobh option [ 1147.497280][T15975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.524841][T15975] EXT4-fs (loop5): shut down requested (0) [ 1147.676121][ T8631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.876724][T15984] loop7: detected capacity change from 0 to 512 [ 1147.917988][T15984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1148.636736][T15984] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1148.700207][T15984] EXT4-fs (loop7): 1 truncate cleaned up [ 1148.732057][T15984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1149.424132][T16004] fuse: Unknown parameter 'user_i00000000000000000000' [ 1149.461165][T12099] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.609916][T16010] loop4: detected capacity change from 0 to 2048 [ 1149.738551][T16010] EXT4-fs: Ignoring removed mblk_io_submit option [ 1149.762489][T16010] EXT4-fs: Ignoring removed nobh option [ 1150.437880][T16010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1150.564687][T16010] EXT4-fs (loop4): shut down requested (0) [ 1150.679765][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.866217][T16031] fuse: Unknown parameter 'user_i00000000000000000000' [ 1150.953950][T16032] loop4: detected capacity change from 0 to 256 [ 1151.263892][T16032] exfat: Unknown parameter 'zero_size_dir' [ 1151.492291][T16036] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1151.500200][T16036] syz.5.2565: attempt to access beyond end of device [ 1151.500200][T16036] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1151.513118][T16036] F2FS-fs (loop5): Unable to read 1th superblock [ 1151.519638][T16036] syz.5.2565: attempt to access beyond end of device [ 1151.519638][T16036] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1151.532476][T16036] F2FS-fs (loop5): Unable to read 2th superblock [ 1153.012043][T16056] fuse: Unknown parameter 'user_id00000000000000000000' [ 1153.263608][T16063] syz.7.2575: attempt to access beyond end of device [ 1153.263608][T16063] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1153.277215][T16063] F2FS-fs (loop7): Unable to read 1th superblock [ 1153.300113][T16063] syz.7.2575: attempt to access beyond end of device [ 1153.300113][T16063] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1153.314931][T16063] F2FS-fs (loop7): Unable to read 2th superblock [ 1153.376576][ T28] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1153.587882][ T28] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1153.623705][ T28] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1153.635984][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.662618][ T28] usb 5-1: config 0 descriptor?? [ 1153.678413][T16058] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1153.714411][ T28] hub 5-1:0.0: bad descriptor, ignoring hub [ 1153.735300][ T28] hub: probe of 5-1:0.0 failed with error -5 [ 1153.753245][ T28] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1155.238593][T16087] loop7: detected capacity change from 0 to 128 [ 1155.262330][T16087] EXT4-fs: Ignoring removed nobh option [ 1155.440463][T16087] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1155.634573][T16087] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.287156][T16098] loop1: detected capacity change from 0 to 512 [ 1156.299413][T16098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1156.313817][T16098] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1156.347768][ T23] usb 5-1: USB disconnect, device number 32 [ 1156.348583][T16098] EXT4-fs (loop1): 1 truncate cleaned up [ 1156.365262][T16098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.461520][T12099] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1156.469121][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.758521][T16113] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1156.793407][T16113] syz.7.2589: attempt to access beyond end of device [ 1156.793407][T16113] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1156.807961][T16113] F2FS-fs (loop7): Unable to read 1th superblock [ 1156.815064][T16113] syz.7.2589: attempt to access beyond end of device [ 1156.815064][T16113] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1156.828180][T16113] F2FS-fs (loop7): Unable to read 2th superblock [ 1157.449071][T16121] syz.4.2592: attempt to access beyond end of device [ 1157.449071][T16121] loop4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1157.471357][T16121] F2FS-fs (loop4): Unable to read 1th superblock [ 1157.506822][T16121] syz.4.2592: attempt to access beyond end of device [ 1157.506822][T16121] loop4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1157.523647][T16121] F2FS-fs (loop4): Unable to read 2th superblock [ 1157.985458][ T23] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1158.965575][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 1158.968446][T16131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1158.977266][T16131] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1158.985623][T16131] vhci_hcd vhci_hcd.0: Device attached [ 1158.994431][T16132] vhci_hcd: connection closed [ 1159.005613][ T42] vhci_hcd: stop threads [ 1159.015870][ T42] vhci_hcd: release socket [ 1159.060864][ T42] vhci_hcd: disconnect device [ 1159.091928][ T23] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1159.114040][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.138691][ T23] usb 8-1: config 0 has no interface number 0 [ 1159.145191][ T23] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1159.156463][ T23] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1159.165647][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.198194][ T23] usb 8-1: config 0 descriptor?? [ 1159.269757][ T23] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1159.669999][T16139] loop4: detected capacity change from 0 to 512 [ 1159.690119][T16139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1159.716392][T16139] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1159.728764][T16139] EXT4-fs (loop4): 1 truncate cleaned up [ 1159.736175][T16139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1159.795238][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1160.553961][T16152] sctp: [Deprecated]: syz.5.2602 (pid 16152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1160.553961][T16152] Use struct sctp_sack_info instead [ 1161.025508][ T8853] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1161.132591][ T8] usb 8-1: USB disconnect, device number 17 [ 1161.215647][ T8853] usb 5-1: Using ep0 maxpacket: 16 [ 1161.230355][ T8853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.266025][ T8853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.283557][ T8853] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1161.293972][ T8853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.307866][ T8853] usb 5-1: config 0 descriptor?? [ 1161.930508][T16163] loop7: detected capacity change from 0 to 65536 [ 1161.989135][T16163] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1162.141905][T16163] XFS (loop7): Ending clean mount [ 1162.173714][T13180] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x191/0x250, xfs_agf block 0x1 [ 1162.229016][T13180] XFS (loop7): Unmount and run xfs_repair [ 1162.255534][T13180] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1162.270892][T13180] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 1162.290470][T13180] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 1162.315639][T13180] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 1162.324728][T13180] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 1162.333799][T13180] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 1162.343710][T13180] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 1162.363238][T13180] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1162.374211][T13180] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1162.391657][T16163] XFS (loop7): metadata I/O error in "xfs_read_agf+0x27e/0x590" at daddr 0x1 len 1 error 74 [ 1162.403623][T16163] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 1162.418565][T16163] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 1162.435400][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 1162.435417][ T27] audit: type=1800 audit(1754013773.322:57): pid=16172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2606" name="file1" dev="loop7" ino=38 res=0 errno=0 [ 1162.498730][T12099] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1162.593975][ T8853] letsketch 0003:6161:4D15.000D: Device info: ࠇ [ 1163.263118][T13100] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1163.275735][T13100] Bluetooth: hci2: Injecting HCI hardware error event [ 1163.285703][T13100] Bluetooth: hci2: hardware error 0x00 [ 1163.296229][ T8853] usb 5-1: Max retries (5) exceeded reading string descriptor 201 [ 1163.336046][ T8853] letsketch: probe of 0003:6161:4D15.000D failed with error -71 [ 1163.435712][ T8853] usb 5-1: USB disconnect, device number 33 [ 1163.975884][T16200] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1163.996192][T16200] syz.7.2612: attempt to access beyond end of device [ 1163.996192][T16200] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1164.009315][T16200] F2FS-fs (loop7): Unable to read 1th superblock [ 1164.016643][T16200] syz.7.2612: attempt to access beyond end of device [ 1164.016643][T16200] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1164.029741][T16200] F2FS-fs (loop7): Unable to read 2th superblock [ 1164.733034][T16212] loop7: detected capacity change from 0 to 4096 [ 1164.747798][T16212] ntfs3: loop7: Different NTFS sector size (2048) and media sector size (512). [ 1164.792099][T16212] ntfs3: loop7: Failed to initialize $Extend/$ObjId. [ 1164.895950][ T23] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1165.085632][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 1165.275952][ T23] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1165.284197][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.294456][ T23] usb 6-1: config 0 has no interface number 0 [ 1165.300903][ T23] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1165.311985][ T23] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1165.341921][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.388959][ T23] usb 6-1: config 0 descriptor?? [ 1165.413011][ T23] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1165.515932][T13100] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1167.355143][ T23] usb 6-1: USB disconnect, device number 26 [ 1167.716116][T16242] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2622'. [ 1167.728284][T16242] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2622'. [ 1168.843414][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2626'. [ 1168.852786][T16250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.916848][T16250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.335695][T15425] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1169.875989][T14283] null_blk: rq ffff8880228b8000 timed out [ 1169.881895][T14283] blk_print_req_error: 54 callbacks suppressed [ 1169.881907][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1169.900726][T14283] null_blk: rq ffff8880228b8180 timed out [ 1169.906652][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1169.918985][T14283] null_blk: rq ffff8880228b8300 timed out [ 1170.085586][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.096377][T14283] null_blk: rq ffff8880228b8480 timed out [ 1170.102270][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.113003][T14283] null_blk: rq ffff8880228b8600 timed out [ 1170.119038][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.135809][T14283] null_blk: rq ffff8880228b8780 timed out [ 1170.141661][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.152624][T14283] null_blk: rq ffff8880228b8900 timed out [ 1170.159606][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.171332][T14283] null_blk: rq ffff8880228b8a80 timed out [ 1170.178650][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.190149][T14283] null_blk: rq ffff8880228b8c00 timed out [ 1170.196295][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.203982][T15425] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1170.207515][T14283] null_blk: rq ffff8880228b8d80 timed out [ 1170.221953][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1170.232559][T14283] null_blk: rq ffff8880228b8f00 timed out [ 1170.238398][T14283] null_blk: rq ffff8880228b9080 timed out [ 1170.276987][T14283] null_blk: rq ffff8880228b9200 timed out [ 1170.282758][T14283] null_blk: rq ffff8880228b9380 timed out [ 1170.288690][T14283] null_blk: rq ffff8880228b9500 timed out [ 1170.294427][T14283] null_blk: rq ffff8880228b9680 timed out [ 1170.300885][T14283] null_blk: rq ffff8880228b9800 timed out [ 1170.306672][T14283] null_blk: rq ffff8880228b9980 timed out [ 1170.312422][T14283] null_blk: rq ffff8880228b9b00 timed out [ 1170.318301][T14283] null_blk: rq ffff8880228b9c80 timed out [ 1170.324050][T14283] null_blk: rq ffff8880228b9e00 timed out [ 1170.329844][T14283] null_blk: rq ffff8880228b9f80 timed out [ 1170.335615][T14283] null_blk: rq ffff8880228ba100 timed out [ 1170.341336][T14283] null_blk: rq ffff8880228ba280 timed out [ 1170.347549][T14283] null_blk: rq ffff8880228ba400 timed out [ 1170.353274][T14283] null_blk: rq ffff8880228ba580 timed out [ 1170.359056][T14283] null_blk: rq ffff8880228ba700 timed out [ 1170.364772][T14283] null_blk: rq ffff8880228ba880 timed out [ 1170.370540][T14283] null_blk: rq ffff8880228baa00 timed out [ 1170.376297][T14283] null_blk: rq ffff8880228bab80 timed out [ 1170.382013][T14283] null_blk: rq ffff8880228bad00 timed out [ 1170.387771][T14283] null_blk: rq ffff8880228bae80 timed out [ 1170.394183][T14283] null_blk: rq ffff8880228bb000 timed out [ 1170.400194][T14283] null_blk: rq ffff8880228bb180 timed out [ 1170.405984][T14283] null_blk: rq ffff8880228bb300 timed out [ 1170.411746][T14283] null_blk: rq ffff8880228bb480 timed out [ 1170.417531][T14283] null_blk: rq ffff8880228bb600 timed out [ 1170.423255][T14283] null_blk: rq ffff8880228bb780 timed out [ 1170.429015][T14283] null_blk: rq ffff8880228bb900 timed out [ 1170.434731][T14283] null_blk: rq ffff8880228bba80 timed out [ 1170.450683][T14283] null_blk: rq ffff8880228bbc00 timed out [ 1170.456510][T14283] null_blk: rq ffff8880228bbd80 timed out [ 1170.462229][T14283] null_blk: rq ffff8880228bbf00 timed out [ 1170.467981][T14283] null_blk: rq ffff8880228bc080 timed out [ 1170.473699][T14283] null_blk: rq ffff8880228bc200 timed out [ 1170.479887][T14283] null_blk: rq ffff8880228bc380 timed out [ 1170.485665][T14283] null_blk: rq ffff8880228bc500 timed out [ 1170.491382][T14283] null_blk: rq ffff8880228bc680 timed out [ 1170.497151][T14283] null_blk: rq ffff8880228bc800 timed out [ 1170.502879][T14283] null_blk: rq ffff8880228bc980 timed out [ 1170.508746][T14283] null_blk: rq ffff8880228bcb00 timed out [ 1170.514477][T14283] null_blk: rq ffff8880228bcc80 timed out [ 1170.520275][T14283] null_blk: rq ffff8880228bce00 timed out [ 1170.526042][T14283] null_blk: rq ffff8880228bcf80 timed out [ 1170.531750][T14283] null_blk: rq ffff8880228bd100 timed out [ 1170.537510][T14283] null_blk: rq ffff8880228bd280 timed out [ 1170.543217][T14283] null_blk: rq ffff8880228bd400 timed out [ 1170.548958][T14283] null_blk: rq ffff8880228bd580 timed out [ 1170.554665][T14283] null_blk: rq ffff8880228bd700 timed out [ 1170.560418][T14283] null_blk: rq ffff8880228bd880 timed out [ 1170.566177][T14283] null_blk: rq ffff8880228bda00 timed out [ 1170.571889][T14283] null_blk: rq ffff8880228bdb80 timed out [ 1170.577646][T14283] null_blk: rq ffff8880228bdd00 timed out [ 1170.583373][T14283] null_blk: rq ffff8880228bde80 timed out [ 1170.655503][T15425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.663550][T15425] usb 2-1: Product: syz [ 1170.703669][T15425] usb 2-1: Manufacturer: syz [ 1170.727460][T15425] usb 2-1: SerialNumber: syz [ 1170.981267][T15425] usb 2-1: config 0 descriptor?? [ 1171.293228][T15425] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1171.706069][ T8853] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1171.915504][ T8853] usb 8-1: Using ep0 maxpacket: 8 [ 1171.937605][ T8853] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1171.997414][ T8853] usb 8-1: config 0 has no interface number 0 [ 1172.007583][ T8853] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1172.021208][ T8853] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1172.032629][ T8853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.058841][ T8853] usb 8-1: config 0 descriptor?? [ 1172.160080][ T8853] ldusb 8-1:0.55: Interrupt in endpoint not found [ 1173.440709][T15425] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1173.454272][T15425] usb 2-1: USB disconnect, device number 47 [ 1175.059742][ T23] usb 8-1: USB disconnect, device number 18 [ 1175.185736][T12104] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1175.655587][T12104] usb 2-1: Using ep0 maxpacket: 32 [ 1175.663163][T12104] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.673575][T12104] usb 2-1: config 0 has no interfaces? [ 1175.680324][T12104] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1175.689588][T12104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.699588][T12104] usb 2-1: config 0 descriptor?? [ 1176.476954][T16326] sctp: [Deprecated]: syz.7.2648 (pid 16326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1176.476954][T16326] Use struct sctp_sack_info instead [ 1176.915415][T12104] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1177.055474][T13180] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1177.100618][T12104] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1177.109895][T12104] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.118848][T12104] usb 8-1: Product: syz [ 1177.123040][T12104] usb 8-1: Manufacturer: syz [ 1177.127794][T12104] usb 8-1: SerialNumber: syz [ 1177.134594][T12104] usb 8-1: config 0 descriptor?? [ 1177.247581][T13180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.258770][T13180] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1177.267912][T13180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.278376][T13180] usb 6-1: config 0 descriptor?? [ 1177.348310][T12104] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1177.522028][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.528543][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.696484][T13180] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 1177.715241][T13180] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000E/input/input35 [ 1177.880474][T13180] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1177.918632][T13180] usb 6-1: USB disconnect, device number 27 [ 1177.992226][T16334] fido_id[16334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1178.113646][T16310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.124806][ T8853] usb 2-1: USB disconnect, device number 48 [ 1178.395825][T14283] null_blk: rq ffff8880228b8000 timed out [ 1178.401659][T14283] blk_print_req_error: 54 callbacks suppressed [ 1178.401672][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.418524][T14283] null_blk: rq ffff8880228b8180 timed out [ 1178.424264][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.434797][T14283] null_blk: rq ffff8880228b8300 timed out [ 1178.440588][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.451095][T14283] null_blk: rq ffff8880228b8480 timed out [ 1178.456960][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.467549][T14283] null_blk: rq ffff8880228b8600 timed out [ 1178.473319][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.483867][T14283] null_blk: rq ffff8880228b8780 timed out [ 1178.489733][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.500311][T14283] null_blk: rq ffff8880228b8900 timed out [ 1178.506247][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.516857][T14283] null_blk: rq ffff8880228b8a80 timed out [ 1178.522660][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.533968][T14283] null_blk: rq ffff8880228b8c00 timed out [ 1178.539850][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.550441][T14283] null_blk: rq ffff8880228b8d80 timed out [ 1178.556347][T14283] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 1178.567099][T14283] null_blk: rq ffff8880228b8f00 timed out [ 1178.573152][T14283] null_blk: rq ffff8880228b9080 timed out [ 1178.579420][T14283] null_blk: rq ffff8880228b9200 timed out [ 1178.585779][T14283] null_blk: rq ffff8880228b9380 timed out [ 1178.591646][T14283] null_blk: rq ffff8880228b9500 timed out [ 1178.597822][T14283] null_blk: rq ffff8880228b9680 timed out [ 1178.604579][T14283] null_blk: rq ffff8880228b9800 timed out [ 1178.610495][T14283] null_blk: rq ffff8880228b9980 timed out [ 1178.616635][T14283] null_blk: rq ffff8880228b9b00 timed out [ 1178.622492][T14283] null_blk: rq ffff8880228b9c80 timed out [ 1178.629626][T14283] null_blk: rq ffff8880228b9e00 timed out [ 1178.635781][T14283] null_blk: rq ffff8880228b9f80 timed out [ 1178.641659][T14283] null_blk: rq ffff8880228ba100 timed out [ 1178.647834][T14283] null_blk: rq ffff8880228ba280 timed out [ 1178.654479][T14283] null_blk: rq ffff8880228ba400 timed out [ 1178.660454][T14283] null_blk: rq ffff8880228ba580 timed out [ 1178.666260][T14283] null_blk: rq ffff8880228ba700 timed out [ 1178.672000][T14283] null_blk: rq ffff8880228ba880 timed out [ 1178.678052][T14283] null_blk: rq ffff8880228baa00 timed out [ 1178.683902][T14283] null_blk: rq ffff8880228bab80 timed out [ 1178.689808][T14283] null_blk: rq ffff8880228bad00 timed out [ 1178.695751][T14283] null_blk: rq ffff8880228bae80 timed out [ 1178.702241][T14283] null_blk: rq ffff8880228bb000 timed out [ 1178.708259][T14283] null_blk: rq ffff8880228bb180 timed out [ 1178.714079][T14283] null_blk: rq ffff8880228bb300 timed out [ 1178.720102][T14283] null_blk: rq ffff8880228bb480 timed out [ 1178.725955][T14283] null_blk: rq ffff8880228bb600 timed out [ 1178.731743][T14283] null_blk: rq ffff8880228bb780 timed out [ 1178.737904][T14283] null_blk: rq ffff8880228bb900 timed out [ 1178.743712][T14283] null_blk: rq ffff8880228bba80 timed out [ 1178.925205][T12104] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 1178.937592][T12104] usb 8-1: USB disconnect, device number 19 [ 1179.119171][T16347] overlayfs: failed to resolve './file0': -2 [ 1179.335635][T15698] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1179.996892][T15698] usb 5-1: Using ep0 maxpacket: 8 [ 1180.019357][T15698] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1180.080369][T15698] usb 5-1: config 0 has no interface number 0 [ 1180.090085][T15698] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1180.208290][T15698] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1180.219610][T15698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.247863][T15698] usb 5-1: config 0 descriptor?? [ 1180.806138][T12104] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1180.816194][T15698] ldusb 5-1:0.55: Interrupt in endpoint not found [ 1181.016091][T12104] usb 8-1: Using ep0 maxpacket: 16 [ 1181.076715][T12104] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.135707][T12104] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.145829][T12104] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1181.154959][T12104] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.179915][T12104] usb 8-1: config 0 descriptor?? [ 1181.776896][T16372] tipc: Enabling of bearer rejected, already enabled [ 1182.102361][T12104] letsketch 0003:6161:4D15.000F: Device info: 擃 [ 1182.344205][T12104] usb 8-1: Max retries (5) exceeded reading string descriptor 201 [ 1182.353825][T12104] letsketch: probe of 0003:6161:4D15.000F failed with error -71 [ 1182.369388][T12104] usb 8-1: USB disconnect, device number 20 [ 1182.662461][T16376] loop1: detected capacity change from 0 to 512 [ 1182.696872][T16376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1182.739833][T16376] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1182.782793][T16376] EXT4-fs (loop1): 1 truncate cleaned up [ 1182.791931][T16376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.805739][ T8853] usb 5-1: USB disconnect, device number 34 [ 1182.945228][T15188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.835466][T13100] Bluetooth: hci4: command 0x0406 tx timeout [ 1185.510621][T16402] overlayfs: failed to resolve './file0': -2 [ 1186.625991][T16415] tipc: Enabling of bearer rejected, already enabled [ 1186.991108][T16422] loop4: detected capacity change from 0 to 128 [ 1187.009482][T16422] EXT4-fs: Ignoring removed nobh option [ 1187.039638][T16422] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1187.187484][T16422] ext4 filesystem being mounted at /470/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.255813][T15698] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1187.358917][ T8557] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1187.565603][T16427] loop4: detected capacity change from 0 to 512 [ 1187.575662][T15698] usb 6-1: Using ep0 maxpacket: 8 [ 1187.580991][T16429] loop7: detected capacity change from 0 to 128 [ 1187.586517][T16427] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1187.593369][T16429] EXT4-fs: Ignoring removed nobh option [ 1187.652797][T16427] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1187.655116][T16429] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1187.749479][T16429] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.785605][T16427] EXT4-fs (loop4): 1 truncate cleaned up [ 1187.792482][T16427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.823141][T16432] BUG: assuming non migratable context at include/linux/filter.h:599 [ 1187.834389][T16432] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 16432, name: syz.1.2680 [ 1187.861603][T16432] 2 locks held by syz.1.2680/16432: [ 1187.872349][T16432] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: ip6_send_skb+0x10f/0x380 [ 1187.882718][T15698] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1187.912003][T15698] usb 6-1: config 0 has no interface number 0 [ 1187.918890][T16432] #1: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: nf_hook+0x9e/0x370 [ 1187.932969][T15698] usb 6-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1187.950389][T16432] CPU: 1 PID: 16432 Comm: syz.1.2680 Not tainted 6.6.100-syzkaller #0 [ 1187.958651][T16432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1187.968708][T16432] Call Trace: [ 1187.971981][T16432] [ 1187.974929][T16432] dump_stack_lvl+0x16c/0x230 [ 1187.979615][T16432] ? show_regs_print_info+0x20/0x20 [ 1187.984821][T16432] ? nf_nat_inet_fn+0x93e/0xbc0 [ 1187.989717][T16432] __cant_migrate+0x234/0x2e0 [ 1187.994423][T16432] ? __cant_sleep+0x210/0x210 [ 1187.999133][T16432] ? nf_nat_ipv6_fn+0x21b/0x2d0 [ 1188.004010][T16432] nf_hook_run_bpf+0x90/0x1e0 [ 1188.008694][T16432] ? ip6table_filter_table_init+0x70/0xb0 [ 1188.014416][T16432] ? bpf_nf_link_attach+0x810/0x810 [ 1188.019616][T16432] ? nf_nat_ipv6_out+0x2f3/0x380 [ 1188.024551][T16432] ? bpf_nf_link_attach+0x810/0x810 [ 1188.029739][T16432] nf_hook_slow+0xbd/0x200 [ 1188.034154][T16432] nf_hook+0x215/0x370 [ 1188.038217][T16432] ? nf_hook+0x9e/0x370 [ 1188.042361][T16432] ? ip6_make_skb+0x4c0/0x4c0 [ 1188.047029][T16432] ? ip6_output+0x3b0/0x3b0 [ 1188.051528][T16432] ? ip6_dst_hoplimit+0x350/0x350 [ 1188.056543][T16432] ? ip6_setup_cork+0xa2f/0xfe0 [ 1188.061383][T16432] ? __ip6_local_out+0x880/0x880 [ 1188.066311][T16432] ? read_lock_is_recursive+0x20/0x20 [ 1188.071680][T16432] ip6_output+0x272/0x3b0 [ 1188.076007][T16432] ? ip6_output+0x3b0/0x3b0 [ 1188.080505][T16432] ? ip6_send_skb+0x10f/0x380 [ 1188.085173][T16432] ip6_send_skb+0x1d5/0x380 [ 1188.089671][T16432] udp_v6_send_skb+0xbbb/0x1860 [ 1188.094537][T16432] udpv6_sendmsg+0x1bb8/0x22f0 [ 1188.099311][T16432] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1188.104165][T16432] ? udp_v6_early_demux+0xf60/0xf60 [ 1188.109388][T16432] ? inet_send_prepare+0x5c/0x260 [ 1188.114409][T16432] ? inet6_sendmsg+0x5f/0xd0 [ 1188.118997][T16432] ? inet6_compat_ioctl+0x380/0x380 [ 1188.124194][T16432] ____sys_sendmsg+0x5bf/0x950 [ 1188.128961][T16432] ? __asan_memset+0x22/0x40 [ 1188.133550][T16432] ? __sys_sendmsg_sock+0x30/0x30 [ 1188.138583][T16432] ? __import_iovec+0x3fa/0x860 [ 1188.143439][T16432] ? import_iovec+0x73/0xa0 [ 1188.147940][T16432] ___sys_sendmsg+0x220/0x290 [ 1188.152616][T16432] ? __sys_sendmsg+0x270/0x270 [ 1188.157405][T16432] __sys_sendmmsg+0x275/0x4a0 [ 1188.162083][T16432] ? __ia32_sys_sendmsg+0x90/0x90 [ 1188.167108][T16432] ? __ia32_sys_get_robust_list+0x90/0x90 [ 1188.172831][T16432] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1188.178805][T16432] ? lock_chain_count+0x20/0x20 [ 1188.183658][T16432] __x64_sys_sendmmsg+0xa0/0xb0 [ 1188.188508][T16432] do_syscall_64+0x55/0xb0 [ 1188.192917][T16432] ? clear_bhb_loop+0x40/0x90 [ 1188.197585][T16432] ? clear_bhb_loop+0x40/0x90 [ 1188.202275][T16432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1188.208189][T16432] RIP: 0033:0x7f2fa418eb69 [ 1188.212667][T16432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.232276][T16432] RSP: 002b:00007f2fa3fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1188.240690][T16432] RAX: ffffffffffffffda RBX: 00007f2fa43b5fa0 RCX: 00007f2fa418eb69 [ 1188.248653][T16432] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000005 [ 1188.256616][T16432] RBP: 00007f2fa4211df1 R08: 0000000000000000 R09: 0000000000000000 [ 1188.264596][T16432] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 1188.272573][T16432] R13: 0000000000000000 R14: 00007f2fa43b5fa0 R15: 00007fffdcd93a58 [ 1188.280556][T16432] [ 1188.293400][T15698] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1188.306113][T15698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.319742][T15698] usb 6-1: config 0 descriptor?? [ 1188.434495][T12099] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1188.467518][T15698] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1188.529130][ T8557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.715589][T16180] Bluetooth: hci4: command 0x0406 tx timeout [ 1190.349310][ T6362] usb 6-1: USB disconnect, device number 28