last executing test programs: 2m19.770343621s ago: executing program 2 (id=136): openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) recvmsg$unix(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m19.212324848s ago: executing program 2 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, 0x0, 0x4004800) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xc805) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r5 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 2m17.353475536s ago: executing program 2 (id=147): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f00000032c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0xfffe, 0x5b6, 0x0, &(0x7f00000008c0)=@buf_max_buf="956ea7cbca19d06e7cf49584dddc8ede20128a9dfc425565515c04305d0e34eed0a0ab802cfde5b9a4a7e86f0706672b660b94479fec738a4ea3105030feacae9add3fdf44cbfa8ba096c0d01e335edfaf0e24491c9b494d1e6e0a48b1f4fbe80d2514a0b5f6c021238b21f840c259e863b68b7f37956e335d46dc9939675c4faa9371b43015bbb83be3890a01bb958d4e8e4913314c3a4bd2f4979bf0fa3a837c1ea24ea2da81d5b50a3837d6e6151a680566993e10e72dc20185579fd2047d5d6827a7b18a1aa5026073831ece52e52f0c42b637b859b1129179c5b93876222a247b55941f26f9eaae6c72344e20b8cc0ff4077e9df7d697c892d63dab10060b56b3adfd0b0bcb4bd61742295d7f470a9d6ee3d676f5a67e50c6fda39784fbfcd286c749f4fb4835c374152f4ce0df89925b2765e72f919cbc8cfac45705d458365b9860fbb831eaed5a7b3f71a50a7a3a8805e89a7bd2a0559e39954e82b67be75ec343a08397e3beb880bf56500ff32536937336a8b15eac585c85e3c9b05d935564be0d5ff93623dd4a75a81e99e188b7ead3e1b147c536b9db84638e00be33ff8b9ce2adcd7026568197a0adf2b435d96ec73a8720182610c89831517368c79b95958166333a83fa880ce7f814b57e1ba0fe4bce13886aec8299207eb3b0acc7914b69250f20e8e8f2c0f18e96f193b59ff2dd920b7a5084496802fb3087051e75375d0c5284712920e9291371083d42e5cac3b0f2ef77b38e2dd17af534ec924c2aa4b798e7793aecbc679969d5e0033f73c9c284547de443702f0ccfeebabaa3ac7103f9e5880ac5e6f12916897ab08729fed6b54f5318ee24fc093b792105521eb908f7c636da7c15242ca2c905855a069906d4f4e8ef158ff34521af9ea6639159f04c59461c6062ec0f30bcf1daf4503298ae9c47730e492157b8762067fbb5cd6d52de8507d70fe3433e0ee27d1c26e62fcc3b7a6e07759289bb17c8d58f64885cabac3a1f518af119b52af446d22a04b5c47a171c34f06936a3a726324cb6ba0409f71174ed3e2eaecd41f9c0f9dd85b4f703b883d8edfb750bb493e2587a73b34815b3875a307d1c6435ee9f5d851f8ace5309c8c9f2eea770da30e4f36fe469b35363fbd15d7fb7aa0277a3ca058356ca29603ef3243289c38e5136975f9ac3ad33c0f0199290e7d9dee3c23840a4479ac2785f4870f7f8356c3d28ae9334c9218b6696424ca44414d8e705dcc9146086488d337e13991f297550ccce4f01e13b9769fd1e616fd2ceb30ac50b4bc0eb8c09e540e1b76fc1686717893bf00863839cf7c3b37fef2cd1f3fe255095319f0ea87cbe9d269199be256da6c0bcaa7d128bf4fb2e5ec6a17ce14e5b49c60c3aba570496a43454a276487f5804e08afdece7576191dc0e02182b5e11052e6702c940b0edf951cc2f6c0041855cdb8b53251e5a391a799bee29408e01aa930194cb6e267b208c82f1842bd18335deeb53c5524e92d5b0eb025ceff6d0e33f3ef7f11d3fe594f2db336757ca08ef342a9376b21253ffe5b2c97b5744f02875f2a53dfdb70a581b8dc06edffd58f9964df6cc0ceb99487284690172af22f2714327b9983ff5c313c69978016b342f8180ac47008279f0e5ac03f50a78904098118635b97cac6d4d6e3fc1896dae727c4fbad01514ab27d2e17e4be2179fb339c6beb2d6b4e6e7b0882aa5f3f85144099e28664582f9d4c1533463c3aac8ac59c37e71fb7a0a8a21a3e8511b87b1eca2b65993007464f99143845e682374a936793999335b66aab333c77839935ac7d39cb9e14f4788fcdc940a3e4f7e5dac430a588f9f8d62afad035606f2161e6633efac40068d770511a5381b7971a3ae3993afcddc6f83833ee78eaa832242869e4348ee03922d24c3a0a8746117c3e675e822962f35eb40fb5abe7e0e3a9c6b9c283abbf085123ad537f1f65c7f5add19211b49d6d5b58b3719f5433156a392d6dbf67b1c93105243ca709cf0a4353ab3d74ad6a83f769d236f7092464110f0da5bbeb9f5a9963ffd34481da44ba6ef16c4ea7c49745c1c1fcb16eb880bc532e703e849196df7328bf49c028df9d41a586a2470f378000c6ee17ca9b3907917ae3bfe16daf8986cfaf4729b5be092fdad8d42627941551c6152abeb76f25e64b19afcd591f60fe599df05bb775ee3f0f872aa615e0ee5ae8e765330abf53e1956c01de3849bbcc0754f7f38544e5fe4736daa04459d32ab59b41c809bd1768339368097253e015f9240ffb909942871eea10d899ff08b7ff1f20da9b5e6749f71c80e41f1685064dcea84fe0d10e5306c30f3a9e16ba59ebcc7bc1cc7e0b438c96ce66e9868aa65773975e439013ae2d1cecd13bb0227032e7632c866f8936964464efce9fc3f5b50eceac8d6376a85e28098bc700001b1ccbea3271bfd443c3c0c90f668e2bdcea088cc889aabfd37760fbd80880f300af8256d9d6dc129569b05b125f36d69e6b972d6872243d111293470b8928765e6da39b5fb090a530e4c675e5776256928fddf9d8e0315a5982b6f4dd38a77debf6dc385f9b3c9a3ed8e20d8f0e457e2a702c2d917db74a298dcd432185e8e25dd635ea09bbf063b029acc00aa78aa96c3efde1385a40f7badfc72d0b3f28be9b4935ab9394c635cfb0da7825cd127ec6813fc315c271292b7aaca58adcf5317fd6733f077142b76181f1971fa375971b744f5e3368e6b8eedcc793ac3dd1bece84d05e4f8067c88d82519bcd1a5e827eba4d7ea93e02adf085287dd7d32d43d3bb50e6bf90272a206ad1c3c8941833ad7e9bdb500a675db5e5e585666cb1d6ef4e895cbfddf3d3dd4136c8ada14996173d469c15d42a3fbdd2de5dc5a64690a8c5529041dc83334ab6de8ed666128c6631a23565a46aff969d336e4a7ccd34188f313ca2599c9478d9c13b9664081aa6ab40ac612f388e4fc57b391cc69e56451887f6c8da7548c50d3dbeb0d11f7fa1fd2d5f9fc7c5203e990dc2f7aeccec6f7159aca897803742c47f94861aa01708294991530973053546eb809e16ab6d67adf662cdd52662ce878c7aedc498b138d4de76b45c5740fea85c91db6986904cb6b61757e0704eec8244c115f01de7b7e294dbfed8d2fed767a33a25cc1316818ddb180a07a54c951d160c9cee5823819253a0d790ae8a30f37a1c61df4e721f79fa6da7ce05aada5ca44c6eecf7582e52e5d7a05ff191f0fa2e18045dd3c9d8fe906312856d50d60237be2c556a4c45b7940f1da5532b8162c06a55e6663da9322bd4a72578bec3675632c4c8a8aa2e210c09c64d09701be9d5a944275708ba28f21a834d31cde7f0109d88439d2cb1dc45f068ed17866b58443947d9577ddd55887d00306cf605051ee34a69f55f6c3d7b329ce9f1e9ba09c95ccd3d988c1de461992c9fa3b1de27546a8ee384c5dd93db97d0751f4ff09bdabe00c6b6f6976ebed832b4c0176aab6867496602e2cf3aa7ee61a8e82b2eb3bf40003ebea920fd8e2860c50e92afa1efc8f7384ae9a7b140e0ea8b30c0c741b290e9822fd80a04c16b122a48100c228a89cfd77669e65ec82dc68e76f487a1f0508a40abb5ed0ea1256818187f245295fb2262e04274166d49a125235dd60e801f8149993df7a6ae53af44df7396633688fe7e1a13ac451d7bdf0e732e94a8ecccaf769f87f8a77dcbd7ba20e6b152a2735a9dcd7e4600c507fead7cffa0c65dd633ded445e2147c87dcec20524d39e72aaf5a65cdaf8f8afe217b3003833863596017ae0ddead7a1d9c297e7ac38b356fb0c5483f375e90c2b8552de377495061211d39c9ee558a946255cdd44d2e5a8b8f104658f3b4ce5eaff7d50ea0687e60060642726428e74085f1d02aff9e48356ab055b6d26a8ed131e3ca43d98b328def92a5a2979e241eb610fe0f5853cc9065823358bcd88b75c7696b46b868c455f34667c320ac66200e46dd6376dc730640a828639871daaffe3b06efe6c78cbbc7457961d05f3e77514671c86aec1b1d0de97d2ad05b5775e44dcf0077008f98684ce0398d96b2c539e4b95d8b48f55bb996decddaee7f2e1bd95c21e0ef6ab6d12e57967ce673e79d6c0e5301d8747a2b9e1b2a0d86238a3d2017b1c51d943d0105881effcb6422139a29f37ae97b281218c1cc2eeaa7306aa5999a549924898717de02682979241ffa2315e387d6d8b4ce39fba62455f38189ec293c91679264e68e23be8c31de9f1cedda03bf5bb8d9fb55bebfdf6b742a77db9a24c8fb1563034c63ab4403bb70d595a86b3df5b1616468734663260493d560eeab3301cd671c78cac77bb0be2a8770c5e220d01dbc0629370dc89ad7c8f671fc27262c8334ff51595116aa3b650ccdb691c69073f4022f1123214019029217390a2d8d049f2db1872f91c669902c6ddb32f19a4f7fdea6d69855c47943b0d940ff7b998f9c554cbbcc8c13d7363458707476ea9d19c170dbacea30150cb0b9d46181f805c3c4dc12d0abd9d2df1ca3ae14fb9682ab2b1934541d37333096c8beac57b61aaea190ba63acb68efa8b9c5aed071c8f17448614133d3167d19cf9c3dc316e1ab799042c0012bc22dfb1ec396313bc06fccaa43da3497a5349cf2071127708cbd07809345c29ecf7ada8e29f156a28abdabb4273b24c16bc109ec90cf1bb9f26de9b3e46d8c107986a51a9ae1d05be80edbd756c8f95da60b5ff96213e5090e613fe789d6fe51920c9a911719a7f6b97339ab633c3eff7dc1f3f50a731c444701699b4b6bf573ff63a00916f9cc6bde286d2867e6fbb178dd30b73164407478d85e791d7830e75d2b02124502d7271ea27c4c8d53d973c02123d243f480122a1d29333412adb51816b7e8924c07caef5ef30efac6e2821be10ae2d1aaea4940edf8b64a6db06d27127f9e44407a1b36fa18d6f7ba8e2dac25846ad7d3a57bdedad7edb030a8714cec3dfeffbac40ab99b8c2b301a2339cf942e763a1470740bd1c84e9a3f9077b9dfd63c29b6a9daf2ad49234381f036a579d4733372849e3bfc3b8bdaa9d2b6026a643a4ac94d89453e51886d47b2eb49912467ad64f749813777bd123e8b164697d93d999d08a196ad179ad286ccb6943989533463a8584ce9a7ffe6177c7ab68b1b4d7bbd53785b5e47f1cfb29d55bc3db9aff4c929e94250effad5dea2079320553d1653714150393bf1e9f901de64ec9321d4b8649f5b6e9892e29fbd7d2911edfe3b5f5e88526a401b456726af4642372b793425d813e23a0c81f4e2491b1ea8e79500c48f403ed7661fcfcaf802632014ad3cfa1315fc4ee392c07bcca0106a0c721e424e4d7bf2e4a87ed3aac218f8db4417da4566f5e94e593bd8c067c05e685889ced99ebe835b94db1304aac34b6227ee310a84dcc755c97e4c59254d339a2204e34c90b0459dcd0d7ce9331b3901770de02e34becf93496e72741944afe7fede9fb8b94ee1ba9746d6304ae289e14fc00e955f9d2eabe095259b316ec8b3458a063316f89dce3b0ad8e83bc078ac1c977745e644112c5e5cc216db61575490c42512f71d2745c2ce3b4812f319b750fb5d7fa39020c4c7e84a94eafe7daa3b7cae1d12941afbce209f3b3f1d06f77258a4a689bc058b863bda2612e64c4e2445a00300810aa1f27ca55b264cd5d94cd6753d689eb7f4de50b7272404766516856318b69148dc376c333cedc4e2ae00f2316c6c76ae26f65533ecc179008a274ce2c9a35a03e3153cbdf3a271a22f1342d30ec69774cdc944493b162a61"}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x222}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 2m16.511853126s ago: executing program 2 (id=150): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 2m14.235610454s ago: executing program 2 (id=160): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=macceltic,umask=00000000000000000400011,anchor=00000000000001114111,gid=forget,volume=00000000000000001023,novrs,novrs,iocharset=cp865,umask=00000000000000000001000,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c73657373696f6e3d30303030303030303030303030303030303030362c6d6f64653d30303030303030405dc2f83bb24e303030302c000000000000000000000026b59cf7c9d20000"], 0x1, 0xc32, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x149442, 0x1a0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(r0, 0xee00, r2) 2m9.204200062s ago: executing program 2 (id=176): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 2m7.265526053s ago: executing program 32 (id=176): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) sync() mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00001dc000/0x1000)=nil], 0x0, &(0x7f0000001680), 0x0) sync() sync() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) 59.124921591s ago: executing program 5 (id=328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) 57.165701673s ago: executing program 5 (id=330): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4002, &(0x7f0000000000)={[{@grpquota}, {@dax_inode}]}, 0x1, 0xbf2, &(0x7f0000001e80)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) 56.664405717s ago: executing program 5 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/udc/dummy_udc.0/state\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 56.410066389s ago: executing program 5 (id=332): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8c00, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x4, &(0x7f0000000080)={0x9, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) 51.284342642s ago: executing program 5 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) read(r3, &(0x7f0000000100), 0x1000) 43.963859548s ago: executing program 5 (id=358): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xef8, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5460}, @filter_kind_options=@f_basic={{0xa}, {0xe78, 0x2, [@TCA_BASIC_ACT={0xe74, 0x3, [@m_pedit={0xe70, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1, [{0x80000001, 0xe3, 0x629dca08, 0x82, 0xb, 0x6}]}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xef8}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 28.434776414s ago: executing program 33 (id=358): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xef8, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5460}, @filter_kind_options=@f_basic={{0xa}, {0xe78, 0x2, [@TCA_BASIC_ACT={0xe74, 0x3, [@m_pedit={0xe70, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1, [{0x80000001, 0xe3, 0x629dca08, 0x82, 0xb, 0x6}]}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xef8}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 20.559262706s ago: executing program 0 (id=395): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x2}) socket(0xa, 0x3, 0x3a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getitimer(0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 17.991264068s ago: executing program 0 (id=399): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 16.834021443s ago: executing program 0 (id=402): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f626172726965722c747970653de6c0539c2c6e6c733d63703933322c706172743d3078303030303030303030303030303030332c63726561746f723d84913b122c706172743d3078303030303030303030303030303030362c6769643d", @ANYRESOCT=0x0, @ANYBLOB], 0x1, 0x61b, &(0x7f0000000680)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)=ANY=[@ANYBLOB="747970653d54a10fb22c71756965742c696f636861727365743d63703836342c706172743d3078303030303030303030303030303030382c646972c21f01495bb4ee51303030303030303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d30303030303030303030303030303030303030303030322c00"], 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfc, 0x40000}, 0xc) fchdir(r1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@empty, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x1000000, 0x0}) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r6 = openat(r4, &(0x7f0000000140)='./bus\x00', 0x171000, 0xe9) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x4, 0xd, 0x5, 0x49, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast2, 0x8, 0x700, 0x6d, 0x2}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf25090000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000300000000004800018008000300030000000800030003000000080003000300000008000100", @ANYRES32=r9, @ANYBLOB="080003000200000014000200776c616e93010000000000000000000008000100", @ANYRES32=r10, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x15}, 0x40001) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000200)={r5, 0x0, 0x1000, 0xfffffffffffef000}) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x800, 0x3447504d, 0xac53, 0x800, 0x1, @stepwise={{0xb9, 0x20882314}, {0x5, 0x6}, {0x3, 0x7fff}}}) socket$nl_generic(0x10, 0x3, 0x10) 14.412316368s ago: executing program 3 (id=406): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, 0x0, 0x0, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x48800) 14.332257661s ago: executing program 0 (id=408): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') lseek(r5, 0x7fffffffffffffff, 0x1) 8.988283975s ago: executing program 3 (id=412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 6.852326726s ago: executing program 3 (id=414): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.684183934s ago: executing program 1 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/udc/dummy_udc.0/state\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 6.297232032s ago: executing program 1 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="38000000240001050100000000000000000000000100000000000100ffffffff0000000008000100657473000c0002000500010003000000", 0x38) 5.567416056s ago: executing program 1 (id=419): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 4.358545784s ago: executing program 3 (id=420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x368e}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.569261581s ago: executing program 4 (id=422): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 2.862240375s ago: executing program 3 (id=423): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) 2.728073921s ago: executing program 1 (id=424): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0xfd33) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 2.727054981s ago: executing program 4 (id=425): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x4) 2.312197641s ago: executing program 0 (id=426): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) 2.177799497s ago: executing program 1 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x4) r4 = openat$binder_debug(0xffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x7fff, 0x4, 0xa, r4, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x4}, 0x50) 2.103953151s ago: executing program 4 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r6, 0x708, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="300000001000010025bd7076af00fddbdf250000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b000000000008000d0080000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 2.080398741s ago: executing program 3 (id=429): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.603612724s ago: executing program 0 (id=430): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x20004000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) 1.594154385s ago: executing program 4 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 1.152686545s ago: executing program 4 (id=432): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x228000, 0x0, 0x9, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0x4}], 0x20) 428.33µs ago: executing program 4 (id=433): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000500)="240000002a0001039900000000000000000000000100"/36, 0x24) read(r0, &(0x7f0000002000), 0x8000) 0s ago: executing program 1 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) nanosleep(&(0x7f00000006c0)={0x1}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x1, 0x2) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1.345512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.355388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.365390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 91.400282][ T4400] syz.4.14: attempt to access beyond end of device [ 91.400282][ T4400] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 91.482567][ T4400] syz.4.14: attempt to access beyond end of device [ 91.482567][ T4400] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 91.510729][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 91.556205][ T4400] syz.4.14: attempt to access beyond end of device [ 91.556205][ T4400] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 91.595061][ T4365] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.601952][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 91.622675][ T4365] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.653239][ T4388] loop2: detected capacity change from 0 to 32768 [ 91.661390][ T4365] pwc: recv_control_msg error -32 req 02 val 2c00 [ 91.675478][ T4400] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 91.683108][ T4400] UDF-fs: Scanning with blocksize 512 failed [ 91.693226][ T4365] pwc: recv_control_msg error -32 req 04 val 1000 [ 91.714123][ T4365] pwc: recv_control_msg error -32 req 04 val 1300 [ 91.753764][ T4365] pwc: recv_control_msg error -32 req 04 val 1400 [ 91.794121][ T4365] pwc: recv_control_msg error -32 req 02 val 2000 [ 91.814065][ T4388] JBD2: Ignoring recovery information on journal [ 91.902919][ T4365] pwc: recv_control_msg error -32 req 02 val 2100 [ 91.934444][ T4400] syz.4.14: attempt to access beyond end of device [ 91.934444][ T4400] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 91.967887][ T4365] pwc: recv_control_msg error -71 req 04 val 1500 [ 92.008172][ T4412] loop3: detected capacity change from 0 to 32768 [ 92.031745][ T4412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.15 (4412) [ 92.046286][ T4400] syz.4.14: attempt to access beyond end of device [ 92.046286][ T4400] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 92.062681][ T4365] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.079294][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 92.090576][ T4400] syz.4.14: attempt to access beyond end of device [ 92.090576][ T4400] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 92.109890][ T4388] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 92.130616][ T4365] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.130700][ T4412] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.147592][ T4412] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 92.156471][ T4412] BTRFS info (device loop3): setting nodatasum [ 92.162674][ T4412] BTRFS info (device loop3): force zlib compression, level 3 [ 92.170112][ T4365] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.176942][ T4412] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 92.177028][ T4412] BTRFS info (device loop3): use lzo compression, level 0 [ 92.177052][ T4412] BTRFS info (device loop3): turning on flush-on-commit [ 92.177071][ T4412] BTRFS info (device loop3): enabling auto defrag [ 92.177116][ T4412] BTRFS info (device loop3): max_inline at 4096 [ 92.177154][ T4412] BTRFS info (device loop3): using free space tree [ 92.224820][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 92.255615][ T4400] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 92.263522][ T4400] UDF-fs: Scanning with blocksize 1024 failed [ 92.270833][ T4400] syz.4.14: attempt to access beyond end of device [ 92.270833][ T4400] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 92.284860][ T4400] syz.4.14: attempt to access beyond end of device [ 92.284860][ T4400] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 92.309150][ T4365] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.316288][ T4365] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.323039][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 92.324545][ T4365] pwc: recv_control_msg error -71 req 04 val 1100 [ 92.340847][ T4365] pwc: recv_control_msg error -71 req 04 val 1200 [ 92.366997][ T4365] pwc: Registered as video103. [ 92.375196][ T4365] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 92.375204][ T26] audit: type=1800 audit(1789696531.515:2): pid=4388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 92.437376][ T4365] usb 1-1: USB disconnect, device number 2 [ 92.465836][ T4400] syz.4.14: attempt to access beyond end of device [ 92.465836][ T4400] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 92.559303][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 92.569868][ T4400] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 92.579541][ T4400] UDF-fs: Scanning with blocksize 2048 failed [ 92.586446][ T4400] syz.4.14: attempt to access beyond end of device [ 92.586446][ T4400] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 92.599748][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 92.613325][ T4400] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 92.623308][ T4400] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 92.645488][ T4400] UDF-fs: Scanning with blocksize 4096 failed [ 92.651639][ T4400] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 92.684430][ T4412] BTRFS info (device loop3): enabling ssd optimizations [ 92.898706][ T4289] ocfs2: Unmounting device (7,2) on (node local) [ 93.017525][ T4444] tmpfs: Unknown parameter 'usrquota' [ 93.128517][ T4277] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.369508][ T4364] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.545249][ T4364] usb 2-1: Using ep0 maxpacket: 8 [ 94.577711][ T4364] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 94.601947][ T4364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.613263][ T4364] usb 2-1: config 0 descriptor?? [ 94.649030][ T4364] usb 2-1: probing VID:PID(0424:012C) [ 94.657368][ T4364] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 94.665480][ T4364] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 94.672105][ T4364] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 94.679894][ T4364] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 94.686740][ T4364] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 94.753892][ T4462] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.341397][ T4364] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 95.553020][ T4364] vub300: probe of 2-1:0.0 failed with error -32 [ 95.945206][ T4474] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 96.065201][ T4474] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 96.265384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 96.621656][ T4365] usb 2-1: USB disconnect, device number 2 [ 96.635560][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.743415][ T4294] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 96.825468][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 96.833460][ T14] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 96.849385][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.873796][ T14] usb 4-1: config 0 descriptor?? [ 96.881404][ T4491] loop2: detected capacity change from 0 to 32768 [ 96.895890][ T4491] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.31 (4491) [ 96.923520][ T4491] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.930245][ T14] as10x_usb: device has been detected [ 96.934470][ T4491] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 96.948026][ T4491] BTRFS info (device loop2): setting nodatasum [ 96.954237][ T4491] BTRFS info (device loop2): force zlib compression, level 3 [ 96.961780][ T4491] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 96.971367][ T4491] BTRFS info (device loop2): use lzo compression, level 0 [ 96.978619][ T4491] BTRFS info (device loop2): turning on flush-on-commit [ 96.985694][ T4491] BTRFS info (device loop2): enabling auto defrag [ 96.992179][ T4491] BTRFS info (device loop2): max_inline at 4096 [ 96.998033][ T14] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 96.998588][ T4491] BTRFS info (device loop2): using free space tree [ 97.012753][ T4364] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.063664][ T14] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 97.090863][ T4329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.165210][ T14] as10x_usb: error during firmware upload part1 [ 97.172384][ T14] Registered device nBox DVB-T Dongle [ 97.187676][ T14] usb 4-1: USB disconnect, device number 2 [ 97.209180][ T4364] usb 5-1: Using ep0 maxpacket: 16 [ 97.218161][ T4364] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 97.233844][ T4364] usb 5-1: config 0 has no interface number 0 [ 97.244379][ T4364] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 97.267764][ T4491] BTRFS info (device loop2): enabling ssd optimizations [ 97.281760][ T4364] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 97.294772][ T4364] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 97.303289][ T4364] usb 5-1: Product: syz [ 97.308117][ T4364] usb 5-1: SerialNumber: syz [ 97.313833][ T4329] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.324786][ T4329] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.514852][ T4364] usb 5-1: config 0 descriptor?? [ 97.520360][ T4329] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.538279][ T4364] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 97.546992][ T4329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 97.547042][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 97.547065][ T4329] usb 1-1: Product: syz [ 97.547080][ T4329] usb 1-1: Manufacturer: syz [ 97.547095][ T4329] usb 1-1: SerialNumber: syz [ 97.589985][ T4514] tmpfs: Unknown parameter 'usrquota' [ 97.607105][ T14] Unregistered device nBox DVB-T Dongle [ 97.619038][ T14] as10x_usb: device has been disconnected [ 97.732601][ T4289] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.755554][ T4364] usb 5-1: USB disconnect, device number 2 [ 97.761867][ T4329] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.964181][ T4329] usb 1-1: USB disconnect, device number 3 [ 97.983620][ T4329] usblp0: removed [ 103.081932][ T4621] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 103.195218][ T4621] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 103.419353][ T4294] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 103.866357][ T4381] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.175444][ T4381] usb 2-1: Using ep0 maxpacket: 8 [ 105.268125][ T4634] sched: RT throttling activated [ 105.292191][ T4381] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 105.292225][ T4381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.295061][ T4381] usb 2-1: config 0 descriptor?? [ 105.311837][ T4381] usb 2-1: probing VID:PID(0424:012C) [ 105.312767][ T4381] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 105.312792][ T4381] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 105.312813][ T4381] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 105.312833][ T4381] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 105.312853][ T4381] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 107.365714][ T4329] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.374329][ T4381] vub300: probe of 2-1:0.0 failed with error -110 [ 107.410416][ T4381] usb 2-1: USB disconnect, device number 3 [ 107.448963][ T4654] bio_check_eod: 2 callbacks suppressed [ 107.448981][ T4654] syz.0.49: attempt to access beyond end of device [ 107.448981][ T4654] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 107.503132][ T4654] syz.0.49: attempt to access beyond end of device [ 107.503132][ T4654] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 107.534692][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 107.643831][ T4654] syz.0.49: attempt to access beyond end of device [ 107.643831][ T4654] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 107.645879][ T1174] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.359635][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 108.369290][ T4654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 108.377941][ T4654] UDF-fs: Scanning with blocksize 512 failed [ 108.387746][ T4654] syz.0.49: attempt to access beyond end of device [ 108.387746][ T4654] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 108.401095][ T4654] syz.0.49: attempt to access beyond end of device [ 108.401095][ T4654] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 108.414606][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 108.424693][ T4654] syz.0.49: attempt to access beyond end of device [ 108.424693][ T4654] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 108.544061][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 108.573632][ T1174] usb 5-1: Using ep0 maxpacket: 32 [ 108.606713][ T1174] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 108.741140][ T1174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.745009][ T4654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 108.782242][ T4654] UDF-fs: Scanning with blocksize 1024 failed [ 108.816424][ T1174] usb 5-1: config 0 descriptor?? [ 108.822523][ T4654] syz.0.49: attempt to access beyond end of device [ 108.822523][ T4654] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 108.884406][ T4654] syz.0.49: attempt to access beyond end of device [ 108.884406][ T4654] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 108.902850][ T1174] as10x_usb: device has been detected [ 108.916690][ T1174] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 108.932021][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 108.963219][ T4654] syz.0.49: attempt to access beyond end of device [ 108.963219][ T4654] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 109.073855][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 109.075185][ T4654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 109.077016][ T4654] UDF-fs: Scanning with blocksize 2048 failed [ 109.164785][ T4654] syz.0.49: attempt to access beyond end of device [ 109.164785][ T4654] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 109.430893][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 109.557146][ T4654] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 109.730971][ T4654] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 109.804439][ T1174] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 109.817035][ T1174] as10x_usb: error during firmware upload part1 [ 109.823813][ T1174] Registered device nBox DVB-T Dongle [ 109.826561][ T1174] usb 5-1: USB disconnect, device number 3 [ 109.842010][ T4654] UDF-fs: Scanning with blocksize 4096 failed [ 109.849422][ T4654] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 109.864267][ T1174] Unregistered device nBox DVB-T Dongle [ 109.866841][ T1174] as10x_usb: device has been disconnected [ 110.123770][ T4677] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 110.143839][ T4677] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 110.165149][ T4677] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 110.182920][ T4677] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 110.223719][ T4679] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 110.307415][ T4679] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 111.485363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 111.495382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 111.505355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 111.515355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 111.525356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 111.636390][ T4294] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 111.915553][ T4266] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.065410][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.725447][ T4266] usb 5-1: Using ep0 maxpacket: 8 [ 112.732756][ T4266] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 112.766063][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 112.783605][ T14] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 112.814389][ T4703] bio_check_eod: 2 callbacks suppressed [ 112.814402][ T4703] syz.2.65: attempt to access beyond end of device [ 112.814402][ T4703] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 112.858136][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.869420][ T4703] gfs2: error 10 reading superblock [ 112.876900][ T14] usb 1-1: config 0 has no interface number 0 [ 113.008326][ T14] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 113.310584][ T4266] usb 5-1: config 0 descriptor?? [ 113.449987][ T14] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 113.518112][ T4266] usb 5-1: probing VID:PID(0424:012C) [ 113.535929][ T4266] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 113.542514][ T14] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 113.554937][ T4266] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 113.562343][ T14] usb 1-1: Product: syz [ 113.575689][ T4266] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 113.583380][ T14] usb 1-1: SerialNumber: syz [ 113.597010][ T4266] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 113.619413][ T14] usb 1-1: config 0 descriptor?? [ 113.630071][ T4266] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 113.642187][ T14] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 113.685490][ T4266] vub300: probe of 5-1:0.0 failed with error -32 [ 113.859500][ T4266] usb 1-1: USB disconnect, device number 4 [ 114.048019][ T4714] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 114.081940][ T4714] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.101654][ T4714] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 114.113993][ T4714] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 114.172226][ T4718] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 114.184643][ T4718] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 114.452441][ T4728] fuse: Unknown parameter 'fd0x0000000000000008' [ 114.725624][ T4327] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.963530][ T4327] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.078927][ T4327] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.400527][ T4327] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.438748][ T4726] Can't find ip_set type hash:ne [ 115.523661][ T4327] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 115.536551][ T153] usb 5-1: USB disconnect, device number 4 [ 115.566401][ T4294] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 115.599497][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.609366][ T4327] usb 2-1: Product: syz [ 115.613555][ T4327] usb 2-1: Manufacturer: syz [ 115.622054][ T4327] usb 2-1: SerialNumber: syz [ 116.532778][ T4327] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 116.580596][ T4327] usb 2-1: USB disconnect, device number 4 [ 116.734840][ T4746] syz.3.77: attempt to access beyond end of device [ 116.734840][ T4746] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 116.749000][ T4746] gfs2: error 10 reading superblock [ 117.012717][ T4327] usblp0: removed [ 118.689723][ T4762] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 118.816362][ T4762] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 118.891624][ T4762] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 118.952237][ T4763] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 119.080444][ T4769] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 119.114125][ T53] nvmet_tcp: failed cmd ffff88805118ffc0 id 0 opcode 0, data_len: 0 [ 119.141022][ T4769] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 120.400652][ T4781] netlink: 'syz.2.87': attribute type 4 has an invalid length. [ 120.447719][ T4782] loop1: detected capacity change from 0 to 2048 [ 120.561667][ T4782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.055750][ T4381] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.245470][ T4381] usb 4-1: Using ep0 maxpacket: 32 [ 121.253249][ T4381] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 121.272828][ T4381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.314537][ T4381] usb 4-1: config 0 descriptor?? [ 121.339094][ T4381] as10x_usb: device has been detected [ 121.351685][ T4381] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 121.455531][ T153] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.771228][ T4381] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 122.783481][ T4381] as10x_usb: error during firmware upload part1 [ 122.790600][ T4381] Registered device nBox DVB-T Dongle [ 122.834216][ T4381] usb 4-1: USB disconnect, device number 3 [ 122.978693][ T153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.469571][ T4381] Unregistered device nBox DVB-T Dongle [ 123.471504][ T4381] as10x_usb: device has been disconnected [ 123.483738][ T153] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.888092][ T153] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.925502][ T153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 123.955050][ T153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 123.968814][ T153] usb 2-1: Product: syz [ 123.973071][ T153] usb 2-1: Manufacturer: syz [ 123.983230][ T153] usb 2-1: SerialNumber: syz [ 124.129809][ T153] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.162974][ T153] usb 2-1: USB disconnect, device number 5 [ 124.218857][ T153] usblp0: removed [ 125.177237][ T4824] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 125.211109][ T4824] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 130.675561][ T4327] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.877377][ T4327] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.891373][ T4327] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.902162][ T4327] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.941729][ T4327] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 130.950911][ T4327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 130.959409][ T4327] usb 1-1: Product: syz [ 130.963970][ T4327] usb 1-1: Manufacturer: syz [ 130.968986][ T4327] usb 1-1: SerialNumber: syz [ 131.187832][ T4327] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 131.204595][ T4327] usb 1-1: USB disconnect, device number 5 [ 131.221419][ T4327] usblp0: removed [ 131.646496][ T4875] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 131.920323][ T4904] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 132.658731][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.665475][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.799719][ T4904] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 133.266249][ T4959] process 'syz.1.114' launched '/dev/fd/9' with NULL argv: empty string added [ 133.328873][ T4958] Zero length message leads to an empty skb [ 136.091358][ T4977] netlink: 'syz.2.120': attribute type 4 has an invalid length. [ 136.853432][ T4983] syz.0.122: attempt to access beyond end of device [ 136.853432][ T4983] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 136.935692][ T4983] syz.0.122: attempt to access beyond end of device [ 136.935692][ T4983] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 136.989067][ T4970] loop1: detected capacity change from 0 to 32768 [ 137.060457][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 137.094461][ T4970] ======================================================= [ 137.094461][ T4970] WARNING: The mand mount option has been deprecated and [ 137.094461][ T4970] and is ignored by this kernel. Remove the mand [ 137.094461][ T4970] option from the mount to silence this warning. [ 137.094461][ T4970] ======================================================= [ 137.133094][ T4983] syz.0.122: attempt to access beyond end of device [ 137.133094][ T4983] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 137.153963][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 137.196980][ T4983] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 137.204653][ T4983] UDF-fs: Scanning with blocksize 512 failed [ 137.287218][ T4983] syz.0.122: attempt to access beyond end of device [ 137.287218][ T4983] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 137.382534][ T4983] syz.0.122: attempt to access beyond end of device [ 137.382534][ T4983] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 137.426520][ T4970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 137.475069][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 137.485357][ T4970] overlayfs: missing 'lowerdir' [ 137.513062][ T4983] syz.0.122: attempt to access beyond end of device [ 137.513062][ T4983] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 137.526269][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 137.543666][ T4983] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 137.570056][ T4983] UDF-fs: Scanning with blocksize 1024 failed [ 137.645607][ T4453] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.056163][ T4983] syz.0.122: attempt to access beyond end of device [ 138.056163][ T4983] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 138.188045][ T4453] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.211257][ T4453] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.233884][ T4983] syz.0.122: attempt to access beyond end of device [ 138.233884][ T4983] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 138.263488][ T4453] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.307645][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 138.360269][ T4453] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 138.373939][ T4983] syz.0.122: attempt to access beyond end of device [ 138.373939][ T4983] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 138.442168][ T4453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 138.460338][ T4453] usb 5-1: Product: syz [ 138.464709][ T4453] usb 5-1: Manufacturer: syz [ 138.465587][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 138.470780][ T4453] usb 5-1: SerialNumber: syz [ 138.497104][ T4983] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 138.504785][ T4983] UDF-fs: Scanning with blocksize 2048 failed [ 138.557338][ T4983] syz.0.122: attempt to access beyond end of device [ 138.557338][ T4983] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 138.578940][ T4997] gadgetfs: bound to dummy_udc driver [ 138.595138][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 138.605073][ T4983] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 138.616593][ T4999] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 138.636579][ T4983] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 138.644241][ T4983] UDF-fs: Scanning with blocksize 4096 failed [ 138.656754][ T4999] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 138.659075][ T4983] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 138.758990][ T4453] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.791821][ T4453] usb 5-1: USB disconnect, device number 5 [ 138.814074][ T4453] usblp0: removed [ 138.920525][ T4381] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 138.937364][ C1] gadgetfs: connected [ 138.942833][ T4381] gadgetfs: disconnected [ 139.105782][ T1174] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.328335][ T1174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.372096][ T1174] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.474714][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.647141][ T1174] usb 2-1: config 0 descriptor?? [ 139.792140][ T1174] pwc: Askey VC010 type 2 USB webcam detected. [ 140.095437][ T5024] loop4: detected capacity change from 0 to 32768 [ 140.117205][ T5024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.131 (5024) [ 140.135600][ T1174] pwc: recv_control_msg error -32 req 02 val 2b00 [ 140.153365][ T1174] pwc: recv_control_msg error -32 req 02 val 2700 [ 140.244602][ T5024] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.255545][ T5024] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 140.264356][ T5024] BTRFS info (device loop4): setting nodatasum [ 140.270612][ T5024] BTRFS info (device loop4): force zlib compression, level 3 [ 140.278026][ T5024] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.287262][ T5024] BTRFS info (device loop4): use lzo compression, level 0 [ 140.294378][ T5024] BTRFS info (device loop4): turning on flush-on-commit [ 140.301367][ T5024] BTRFS info (device loop4): enabling auto defrag [ 140.307881][ T5024] BTRFS info (device loop4): max_inline at 4096 [ 140.314162][ T5024] BTRFS info (device loop4): using free space tree [ 140.321730][ T1174] pwc: recv_control_msg error -32 req 02 val 2c00 [ 140.329081][ T1174] pwc: recv_control_msg error -32 req 04 val 1000 [ 140.346945][ T1174] pwc: recv_control_msg error -32 req 04 val 1300 [ 140.576806][ T1174] pwc: recv_control_msg error -32 req 04 val 1400 [ 140.843918][ T1174] pwc: recv_control_msg error -32 req 02 val 2000 [ 141.052995][ T1174] pwc: recv_control_msg error -71 req 04 val 1500 [ 141.060064][ T1174] pwc: recv_control_msg error -71 req 02 val 2500 [ 141.067571][ T1174] pwc: recv_control_msg error -71 req 02 val 2400 [ 141.084795][ T1174] pwc: recv_control_msg error -71 req 02 val 2600 [ 141.224649][ T5024] BTRFS info (device loop4): enabling ssd optimizations [ 141.266059][ T1174] pwc: recv_control_msg error -71 req 02 val 2900 [ 141.322692][ T1174] pwc: recv_control_msg error -71 req 02 val 2800 [ 141.463202][ T1174] pwc: recv_control_msg error -71 req 04 val 1100 [ 141.474872][ T1174] pwc: recv_control_msg error -71 req 04 val 1200 [ 141.546932][ T1174] pwc: Registered as video103. [ 141.554289][ T1174] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 141.578113][ T5077] tmpfs: Unknown parameter 'usrquota' [ 141.655617][ T1174] usb 2-1: USB disconnect, device number 6 [ 141.757198][ T4287] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.938247][ T4382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4382) [ 144.260886][ T5115] bio_check_eod: 2 callbacks suppressed [ 144.260902][ T5115] syz.0.139: attempt to access beyond end of device [ 144.260902][ T5115] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 144.316040][ T5115] syz.0.139: attempt to access beyond end of device [ 144.316040][ T5115] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 144.354226][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 144.385728][ T5115] syz.0.139: attempt to access beyond end of device [ 144.385728][ T5115] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 144.409245][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 144.461871][ T5115] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 144.502851][ T5115] UDF-fs: Scanning with blocksize 512 failed [ 144.533360][ T5115] syz.0.139: attempt to access beyond end of device [ 144.533360][ T5115] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 144.570705][ T5115] syz.0.139: attempt to access beyond end of device [ 144.570705][ T5115] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 144.584105][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 144.611059][ T5115] syz.0.139: attempt to access beyond end of device [ 144.611059][ T5115] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 144.629419][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 144.640730][ T5115] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 144.653661][ T5115] UDF-fs: Scanning with blocksize 1024 failed [ 144.660793][ T5115] syz.0.139: attempt to access beyond end of device [ 144.660793][ T5115] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 144.678901][ T5115] syz.0.139: attempt to access beyond end of device [ 144.678901][ T5115] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 144.693112][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 144.713928][ T5115] syz.0.139: attempt to access beyond end of device [ 144.713928][ T5115] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 144.732467][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 144.743832][ T5115] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 144.761944][ T5115] UDF-fs: Scanning with blocksize 2048 failed [ 144.770935][ T5115] syz.0.139: attempt to access beyond end of device [ 144.770935][ T5115] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 144.789177][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 144.800572][ T5115] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 144.814189][ T5115] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 144.827502][ T5115] UDF-fs: Scanning with blocksize 4096 failed [ 144.833728][ T5115] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 145.289794][ T4456] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 145.409036][ T5128] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 145.419147][ T5128] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 145.428978][ T5128] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 145.501759][ T4456] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.527706][ T4456] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.538802][ T4456] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.579186][ T4456] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 145.588748][ T4456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 145.597999][ T4456] usb 5-1: Product: syz [ 145.602297][ T4456] usb 5-1: Manufacturer: syz [ 145.607210][ T4456] usb 5-1: SerialNumber: syz [ 145.618715][ T5086] netlink: 'syz.1.133': attribute type 4 has an invalid length. [ 146.039281][ T4456] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 146.085716][ T5136] loop3: detected capacity change from 0 to 32768 [ 146.093543][ T1174] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 146.124831][ T5136] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 146.345814][ T4456] usb 5-1: USB disconnect, device number 6 [ 146.358313][ T1174] usb 1-1: Using ep0 maxpacket: 32 [ 146.366811][ T4456] usblp0: removed [ 146.399336][ T4382] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.463812][ T1174] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 146.491166][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.566243][ T1174] usb 1-1: config 0 descriptor?? [ 146.619539][ T5143] loop2: detected capacity change from 0 to 512 [ 146.785949][ T1174] as10x_usb: device has been detected [ 146.791753][ T1174] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 146.836724][ T1174] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 146.847855][ T1174] as10x_usb: error during firmware upload part1 [ 146.854558][ T1174] Registered device nBox DVB-T Dongle [ 146.862068][ T1174] usb 1-1: USB disconnect, device number 7 [ 146.978149][ T5153] tmpfs: Unknown parameter 'usrquota' [ 147.488015][ T5143] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 147.525716][ T5143] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.560820][ T1174] Unregistered device nBox DVB-T Dongle [ 147.591276][ T1174] as10x_usb: device has been disconnected [ 147.845659][ T5143] loop2: detected capacity change from 512 to 0 [ 147.873216][ C1] I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 147.883784][ T5158] EXT4-fs error (device loop2): __ext4_find_entry:1687: inode #2: comm syz.2.150: reading directory lblock 0 [ 148.429595][ T5158] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 148.670724][ T5158] EXT4-fs (loop2): I/O error while writing superblock [ 148.691138][ T5164] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 148.701098][ T5164] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 148.710892][ T5164] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 149.055532][ T5152] EXT4-fs error (device loop2): ext4_wait_block_bitmap:573: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 149.078181][ T5171] netlink: 'syz.0.158': attribute type 4 has an invalid length. [ 149.187994][ T5152] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 149.232375][ T5152] EXT4-fs (loop2): I/O error while writing superblock [ 149.279912][ T4289] EXT4-fs (loop2): unmounting filesystem. [ 149.364213][ T4289] bio_check_eod: 7 callbacks suppressed [ 149.364228][ T4289] syz-executor: attempt to access beyond end of device [ 149.364228][ T4289] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 149.451109][ T4289] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 149.503196][ T4289] EXT4-fs (loop2): I/O error while writing superblock [ 149.554497][ T5146] kmmpd-loop2: attempt to access beyond end of device [ 149.554497][ T5146] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 149.645862][ T5146] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 151.027530][ T5197] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 151.062755][ T5197] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 151.079066][ T5197] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 151.337112][ T5090] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.490131][ T5202] loop1: detected capacity change from 0 to 32768 [ 151.514399][ T5202] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 151.560056][ T5090] usb 4-1: Using ep0 maxpacket: 32 [ 151.576159][ T5090] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 151.601060][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.618996][ T5090] usb 4-1: config 0 descriptor?? [ 151.654952][ T5090] as10x_usb: device has been detected [ 151.665771][ T5090] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 151.703664][ T5090] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 151.731131][ T5090] as10x_usb: error during firmware upload part1 [ 151.738309][ T5090] Registered device nBox DVB-T Dongle [ 151.763489][ T4359] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 151.978397][ T5090] usb 4-1: USB disconnect, device number 4 [ 152.767024][ T5090] Unregistered device nBox DVB-T Dongle [ 152.788406][ T5090] as10x_usb: device has been disconnected [ 153.140232][ T4378] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.332538][ T4378] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.358824][ T4378] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.394664][ T4378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.419889][ T4378] usb 2-1: config 0 descriptor?? [ 153.428643][ T4378] pwc: Askey VC010 type 2 USB webcam detected. [ 153.603513][ T5213] netlink: 'syz.3.173': attribute type 4 has an invalid length. [ 153.734381][ T5219] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 153.755165][ T5219] Error parsing options; rc = [-22] [ 153.836145][ T4378] pwc: recv_control_msg error -32 req 02 val 2b00 [ 153.860285][ T4378] pwc: recv_control_msg error -32 req 02 val 2700 [ 153.899678][ T4378] pwc: recv_control_msg error -32 req 02 val 2c00 [ 153.953869][ T4378] pwc: recv_control_msg error -32 req 04 val 1000 [ 154.014154][ T4378] pwc: recv_control_msg error -32 req 04 val 1300 [ 154.030441][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.088319][ T4378] pwc: recv_control_msg error -32 req 04 val 1400 [ 154.125931][ T4378] pwc: recv_control_msg error -32 req 02 val 2000 [ 154.378244][ T4378] pwc: recv_control_msg error -71 req 04 val 1500 [ 154.397685][ T4378] pwc: recv_control_msg error -71 req 02 val 2500 [ 154.442569][ T4378] pwc: recv_control_msg error -71 req 02 val 2400 [ 155.745583][ T4378] pwc: recv_control_msg error -71 req 02 val 2600 [ 155.797855][ T4378] pwc: recv_control_msg error -71 req 02 val 2900 [ 155.865874][ T4378] pwc: recv_control_msg error -71 req 02 val 2800 [ 155.897086][ T4378] pwc: recv_control_msg error -71 req 04 val 1100 [ 155.921735][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.935966][ T4378] pwc: recv_control_msg error -71 req 04 val 1200 [ 156.271721][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.351413][ T4378] pwc: Registered as video103. [ 156.365861][ T4378] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 156.414249][ T4378] usb 2-1: USB disconnect, device number 7 [ 156.585240][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.011967][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.026507][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.038476][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.049192][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.057205][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.064535][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.455778][ T5090] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.578397][ T5269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 157.585286][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.597739][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 157.611632][ T5269] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 157.618243][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.630237][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 157.642705][ T5271] netlink: 'syz.0.189': attribute type 4 has an invalid length. [ 157.650800][ T5269] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 157.657367][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.665350][ T5090] usb 4-1: Using ep0 maxpacket: 32 [ 157.673274][ T5090] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 157.694881][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.703811][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 157.723777][ T5090] usb 4-1: config 0 descriptor?? [ 157.740709][ T5090] as10x_usb: device has been detected [ 157.752565][ T5279] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 157.759242][ T5279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.774254][ T5090] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 157.802557][ T5279] vhci_hcd vhci_hcd.0: Device attached [ 157.834145][ T5269] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(9) [ 157.840735][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.863175][ T5090] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 157.885403][ T5094] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 157.911650][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 157.921616][ T5279] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(12) [ 157.928287][ T5279] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.947173][ T5090] as10x_usb: error during firmware upload part1 [ 157.953925][ T5090] Registered device nBox DVB-T Dongle [ 158.003672][ T1174] usb 4-1: USB disconnect, device number 5 [ 158.013037][ T5279] vhci_hcd vhci_hcd.0: Device attached [ 158.041063][ T5269] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(14) [ 158.047734][ T5269] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 158.065611][ T5269] vhci_hcd vhci_hcd.0: Device attached [ 158.111148][ T5269] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 158.141600][ T5289] vhci_hcd: connection closed [ 158.141818][ T5285] vhci_hcd: connection closed [ 158.151309][ T5282] vhci_hcd: connection closed [ 158.151311][ T4349] vhci_hcd: stop threads [ 158.156281][ T5280] vhci_hcd: connection closed [ 158.165383][ T5277] vhci_hcd: connection closed [ 158.170194][ T5274] vhci_hcd: connection closed [ 158.173933][ T4349] vhci_hcd: release socket [ 158.175695][ T5272] vhci_hcd: connection reset by peer [ 158.193677][ T4349] vhci_hcd: disconnect device [ 158.212361][ T4349] vhci_hcd: stop threads [ 158.222612][ T4349] vhci_hcd: release socket [ 158.239628][ T1174] Unregistered device nBox DVB-T Dongle [ 158.244094][ T1174] as10x_usb: device has been disconnected [ 158.259388][ T4349] vhci_hcd: disconnect device [ 158.275446][ T4349] vhci_hcd: stop threads [ 158.285440][ T4349] vhci_hcd: release socket [ 158.291955][ T4349] vhci_hcd: disconnect device [ 158.336338][ T4349] vhci_hcd: stop threads [ 158.340648][ T4349] vhci_hcd: release socket [ 158.365600][ T4349] vhci_hcd: disconnect device [ 158.385429][ T4349] vhci_hcd: stop threads [ 158.389730][ T4349] vhci_hcd: release socket [ 158.406188][ T4349] vhci_hcd: disconnect device [ 158.416118][ T4349] vhci_hcd: stop threads [ 158.420418][ T4349] vhci_hcd: release socket [ 158.435972][ T4349] vhci_hcd: disconnect device [ 158.444464][ T4349] vhci_hcd: stop threads [ 158.450325][ T4349] vhci_hcd: release socket [ 158.467188][ T4349] vhci_hcd: disconnect device [ 158.835401][ T4453] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 159.029168][ T4453] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.068082][ T4453] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.130380][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.145532][ T4294] Bluetooth: hci3: command 0x0409 tx timeout [ 159.217807][ T4453] usb 1-1: config 0 descriptor?? [ 159.320451][ T4453] pwc: Askey VC010 type 2 USB webcam detected. [ 159.750356][ T4453] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.926816][ T4453] pwc: recv_control_msg error -32 req 02 val 2700 [ 160.179765][ T4453] pwc: recv_control_msg error -32 req 02 val 2c00 [ 160.203651][ T4453] pwc: recv_control_msg error -32 req 04 val 1000 [ 160.218431][ T4453] pwc: recv_control_msg error -32 req 04 val 1300 [ 160.237588][ T4453] pwc: recv_control_msg error -32 req 04 val 1400 [ 160.260461][ T4453] pwc: recv_control_msg error -32 req 02 val 2000 [ 160.480994][ T4453] pwc: recv_control_msg error -71 req 04 val 1500 [ 160.490680][ T4453] pwc: recv_control_msg error -71 req 02 val 2500 [ 160.500479][ T4453] pwc: recv_control_msg error -71 req 02 val 2400 [ 160.511822][ T4453] pwc: recv_control_msg error -71 req 02 val 2600 [ 160.542754][ T4453] pwc: recv_control_msg error -71 req 02 val 2900 [ 160.575047][ T4453] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.594874][ T4453] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.609310][ T4453] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.620640][ T4453] pwc: Registered as video103. [ 160.631993][ T4453] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 160.662110][ T4453] usb 1-1: USB disconnect, device number 8 [ 161.216125][ T4294] Bluetooth: hci3: command 0x041b tx timeout [ 163.065563][ T5094] vhci_hcd: vhci_device speed not set [ 163.207550][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 163.295780][ T4294] Bluetooth: hci3: command 0x040f tx timeout [ 163.335500][ T5089] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.492738][ T5385] syz.4.203: attempt to access beyond end of device [ 163.492738][ T5385] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 163.575530][ T5089] usb 4-1: Using ep0 maxpacket: 32 [ 163.602076][ T5089] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 163.720016][ T5089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.744253][ T5385] syz.4.203: attempt to access beyond end of device [ 163.744253][ T5385] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 163.978825][ T5089] usb 4-1: config 0 descriptor?? [ 164.035461][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.045276][ T5385] syz.4.203: attempt to access beyond end of device [ 164.045276][ T5385] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 164.059144][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.071347][ T5385] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 164.079191][ T5385] UDF-fs: Scanning with blocksize 512 failed [ 164.086013][ T5385] syz.4.203: attempt to access beyond end of device [ 164.086013][ T5385] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 164.099496][ T5385] syz.4.203: attempt to access beyond end of device [ 164.099496][ T5385] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 164.113328][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.123139][ T5385] syz.4.203: attempt to access beyond end of device [ 164.123139][ T5385] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 164.137479][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.147068][ T5385] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 164.154651][ T5385] UDF-fs: Scanning with blocksize 1024 failed [ 164.161449][ T5385] syz.4.203: attempt to access beyond end of device [ 164.161449][ T5385] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 164.174720][ T5385] syz.4.203: attempt to access beyond end of device [ 164.174720][ T5385] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 164.188105][ T5089] as10x_usb: device has been detected [ 164.212664][ T5089] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 164.235470][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.300283][ T5089] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 164.323847][ T5385] syz.4.203: attempt to access beyond end of device [ 164.323847][ T5385] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 164.368589][ T5089] as10x_usb: error during firmware upload part1 [ 164.390186][ T5089] Registered device nBox DVB-T Dongle [ 164.395686][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.420037][ T5089] usb 4-1: USB disconnect, device number 6 [ 164.442746][ T5385] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 164.487316][ T5385] UDF-fs: Scanning with blocksize 2048 failed [ 164.493942][ T5385] syz.4.203: attempt to access beyond end of device [ 164.493942][ T5385] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 164.507744][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 164.517520][ T5385] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 164.527343][ T5385] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 164.534929][ T5385] UDF-fs: Scanning with blocksize 4096 failed [ 164.541368][ T5385] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 164.571419][ T5089] Unregistered device nBox DVB-T Dongle [ 164.576127][ T5089] as10x_usb: device has been disconnected [ 164.845573][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.852904][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.861225][ T5247] device bridge_slave_0 entered promiscuous mode [ 164.915685][ T1174] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 165.067201][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.084667][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.147806][ T5247] device bridge_slave_1 entered promiscuous mode [ 165.178633][ T1174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.219812][ T1174] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.255220][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.272268][ T5417] loop0: detected capacity change from 0 to 1024 [ 165.290287][ T1174] usb 2-1: config 0 descriptor?? [ 165.362144][ T5417] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 165.375447][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 165.377056][ T1174] pwc: Askey VC010 type 2 USB webcam detected. [ 165.414177][ T5417] EXT4-fs (loop0): barriers disabled [ 165.429511][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.440257][ T5417] JBD2: no valid journal superblock found [ 165.462745][ T5417] EXT4-fs (loop0): error loading journal [ 165.745888][ T1174] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.779439][ T1174] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.796297][ T1174] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.913944][ T1174] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.980611][ T1174] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.524712][ T1174] pwc: recv_control_msg error -32 req 04 val 1400 [ 166.607550][ T1174] pwc: recv_control_msg error -32 req 02 val 2000 [ 166.668964][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.795578][ T5090] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.815019][ T1174] pwc: recv_control_msg error -71 req 04 val 1500 [ 166.832659][ T1174] pwc: recv_control_msg error -71 req 02 val 2500 [ 166.900095][ T1174] pwc: recv_control_msg error -71 req 02 val 2400 [ 167.025537][ T5090] usb 4-1: Using ep0 maxpacket: 16 [ 167.031239][ T1174] pwc: recv_control_msg error -71 req 02 val 2600 [ 167.048134][ T5090] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 167.085622][ T9] device hsr_slave_0 left promiscuous mode [ 167.097400][ T1174] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.103981][ T5090] usb 4-1: config 0 has no interface number 0 [ 167.185199][ T1174] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.209186][ T5090] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.227110][ T9] device hsr_slave_1 left promiscuous mode [ 167.262596][ T1174] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.287707][ T5090] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.299958][ T1174] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.306617][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.306731][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.338352][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.341834][ T5090] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.359274][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.370214][ T1174] pwc: Registered as video103. [ 167.376906][ T1174] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 167.387056][ T5090] usb 4-1: Product: syz [ 167.388381][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.391447][ T5090] usb 4-1: SerialNumber: syz [ 167.398645][ T4456] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.426420][ T1174] usb 2-1: USB disconnect, device number 8 [ 167.435682][ T5090] usb 4-1: config 0 descriptor?? [ 167.443170][ T9] device bridge_slave_1 left promiscuous mode [ 167.471973][ T5090] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 167.479446][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.499319][ T5090] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 167.597626][ T4456] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.628361][ T4456] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.665686][ T4456] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.722228][ T4456] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 167.732594][ T9] device bridge_slave_0 left promiscuous mode [ 167.749458][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.769514][ T4456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 167.769544][ T4456] usb 5-1: Product: syz [ 167.769561][ T4456] usb 5-1: Manufacturer: syz [ 167.769577][ T4456] usb 5-1: SerialNumber: syz [ 167.910157][ T9] device veth1_macvtap left promiscuous mode [ 167.917128][ T9] device veth0_macvtap left promiscuous mode [ 167.924720][ T9] device veth1_vlan left promiscuous mode [ 167.931651][ T9] device veth0_vlan left promiscuous mode [ 167.992649][ T4456] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 168.021070][ T4456] usb 5-1: USB disconnect, device number 7 [ 168.054185][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.062427][ T4456] usblp0: removed [ 168.065938][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.073386][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.087916][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.095570][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.115544][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.125437][ T1174] usb 4-1: USB disconnect, device number 7 [ 168.132120][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 168.139117][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 168.156575][ T1174] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 169.359405][ T9] team0 (unregistering): Port device team_slave_1 removed [ 169.705247][ T5481] bio_check_eod: 2 callbacks suppressed [ 169.705263][ T5481] syz.3.218: attempt to access beyond end of device [ 169.705263][ T5481] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 169.725604][ T5481] syz.3.218: attempt to access beyond end of device [ 169.725604][ T5481] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 169.738697][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 169.748604][ T5481] syz.3.218: attempt to access beyond end of device [ 169.748604][ T5481] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 169.752805][ T9] team0 (unregistering): Port device team_slave_0 removed [ 169.770377][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 169.780622][ T5481] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 169.788318][ T5481] UDF-fs: Scanning with blocksize 512 failed [ 169.795207][ T5481] syz.3.218: attempt to access beyond end of device [ 169.795207][ T5481] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 169.808346][ T5481] syz.3.218: attempt to access beyond end of device [ 169.808346][ T5481] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 169.822151][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 169.844143][ T5481] syz.3.218: attempt to access beyond end of device [ 169.844143][ T5481] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 169.905630][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 169.915950][ T5481] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 169.939328][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.950104][ T5481] UDF-fs: Scanning with blocksize 1024 failed [ 169.972526][ T5481] syz.3.218: attempt to access beyond end of device [ 169.972526][ T5481] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 170.003796][ T5481] syz.3.218: attempt to access beyond end of device [ 170.003796][ T5481] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 170.024936][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.034610][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 170.072975][ T5481] syz.3.218: attempt to access beyond end of device [ 170.072975][ T5481] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 170.103922][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 170.131638][ T5481] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 170.155986][ T5481] UDF-fs: Scanning with blocksize 2048 failed [ 170.162599][ T5481] syz.3.218: attempt to access beyond end of device [ 170.162599][ T5481] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 170.193807][ T5476] loop4: detected capacity change from 0 to 32768 [ 170.205461][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 170.215398][ T5481] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 170.237823][ T5481] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 170.253043][ T5481] UDF-fs: Scanning with blocksize 4096 failed [ 170.262589][ T5476] JBD2: Ignoring recovery information on journal [ 170.283958][ T5481] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 170.332079][ T5476] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 170.539076][ T4287] ocfs2: Unmounting device (7,4) on (node local) [ 171.450019][ T9] bond0 (unregistering): Released all slaves [ 172.578029][ T4378] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.777138][ T4378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.788417][ T4378] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.798406][ T4378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.817722][ T4378] usb 5-1: config 0 descriptor?? [ 172.838438][ T4378] pwc: Askey VC010 type 2 USB webcam detected. [ 173.255407][ T4378] pwc: recv_control_msg error -32 req 02 val 2b00 [ 173.265640][ T4378] pwc: recv_control_msg error -32 req 02 val 2700 [ 173.278214][ T4378] pwc: recv_control_msg error -32 req 02 val 2c00 [ 173.289845][ T4378] pwc: recv_control_msg error -32 req 04 val 1000 [ 173.297317][ T4378] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.310288][ T4378] pwc: recv_control_msg error -32 req 04 val 1400 [ 173.317752][ T4378] pwc: recv_control_msg error -32 req 02 val 2000 [ 173.528122][ T4378] pwc: recv_control_msg error -71 req 04 val 1500 [ 173.545738][ T4378] pwc: recv_control_msg error -71 req 02 val 2500 [ 173.553047][ T4378] pwc: recv_control_msg error -71 req 02 val 2400 [ 173.564547][ T4378] pwc: recv_control_msg error -71 req 02 val 2600 [ 173.572405][ T4378] pwc: recv_control_msg error -71 req 02 val 2900 [ 173.579655][ T4378] pwc: recv_control_msg error -71 req 02 val 2800 [ 173.595074][ T4378] pwc: recv_control_msg error -71 req 04 val 1100 [ 173.602366][ T4378] pwc: recv_control_msg error -71 req 04 val 1200 [ 173.623203][ T4378] pwc: Registered as video103. [ 173.640046][ T4378] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 173.676571][ T4378] usb 5-1: USB disconnect, device number 8 [ 173.984576][ T5247] team0: Port device team_slave_0 added [ 174.032588][ T5247] team0: Port device team_slave_1 added [ 174.157237][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.164849][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.244699][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.348699][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.392462][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.464527][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.517145][ T5247] device hsr_slave_0 entered promiscuous mode [ 174.541308][ T5247] device hsr_slave_1 entered promiscuous mode [ 174.551006][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.592548][ T5247] Cannot create hsr debugfs directory [ 175.930136][ T5089] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 176.388404][ T5089] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.408612][ T5089] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.456907][ T5089] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.472768][ T5247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.528999][ T5089] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 176.553646][ T5247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.562759][ T5540] bio_check_eod: 2 callbacks suppressed [ 176.562775][ T5540] syz.1.229: attempt to access beyond end of device [ 176.562775][ T5540] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 176.593531][ T5089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 176.620796][ T5089] usb 4-1: Product: syz [ 176.635283][ T5089] usb 4-1: Manufacturer: syz [ 176.643583][ T5089] usb 4-1: SerialNumber: syz [ 176.677419][ T5540] syz.1.229: attempt to access beyond end of device [ 176.677419][ T5540] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 176.730630][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 176.756866][ T5540] syz.1.229: attempt to access beyond end of device [ 176.756866][ T5540] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 176.836520][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 176.909812][ T5089] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.930014][ T5540] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 176.945567][ T5089] usb 4-1: USB disconnect, device number 8 [ 176.976265][ T5089] usblp0: removed [ 176.982425][ T5540] UDF-fs: Scanning with blocksize 512 failed [ 177.014165][ T5540] syz.1.229: attempt to access beyond end of device [ 177.014165][ T5540] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 177.071905][ T5540] syz.1.229: attempt to access beyond end of device [ 177.071905][ T5540] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 177.132247][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.157369][ T5541] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.175752][ T5540] syz.1.229: attempt to access beyond end of device [ 177.175752][ T5540] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 177.211534][ T5541] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.249294][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 177.303530][ T5247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.310052][ T5540] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 177.333676][ T5247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.356298][ T5540] UDF-fs: Scanning with blocksize 1024 failed [ 177.395968][ T5540] syz.1.229: attempt to access beyond end of device [ 177.395968][ T5540] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 177.504866][ T5540] syz.1.229: attempt to access beyond end of device [ 177.504866][ T5540] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 177.565361][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.604853][ T5540] syz.1.229: attempt to access beyond end of device [ 177.604853][ T5540] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 177.649912][ T5546] loop0: detected capacity change from 0 to 32768 [ 177.671426][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.688563][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 177.715190][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.765606][ T5540] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 177.773384][ T5540] UDF-fs: Scanning with blocksize 2048 failed [ 177.834475][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.842583][ T5540] syz.1.229: attempt to access beyond end of device [ 177.842583][ T5540] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 177.867207][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.875696][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.884852][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.893668][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 177.956339][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.963626][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.975558][ T5540] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 178.001478][ T5546] JBD2: Ignoring recovery information on journal [ 178.027719][ T5247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.039227][ T5540] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 178.049585][ T5540] UDF-fs: Scanning with blocksize 4096 failed [ 178.057713][ T5247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.078274][ T5540] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 178.097523][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.138163][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.169806][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.212699][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.220056][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.372488][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.382082][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.391896][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.400402][ T5546] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 178.456564][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.204211][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.223459][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.243804][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.260691][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.372353][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.411900][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.461319][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.529153][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.536923][ T4278] ocfs2: Unmounting device (7,0) on (node local) [ 179.756010][ T5585] gfs2: error 10 reading superblock [ 180.045465][ T4322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.487167][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.997537][ T4322] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.075623][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.138643][ T4322] usb 2-1: config 0 descriptor?? [ 181.186153][ T4322] pwc: Askey VC010 type 2 USB webcam detected. [ 181.548556][ T4322] pwc: recv_control_msg error -32 req 02 val 2b00 [ 181.589554][ T4322] pwc: recv_control_msg error -32 req 02 val 2700 [ 181.609904][ T4322] pwc: recv_control_msg error -32 req 02 val 2c00 [ 181.634504][ T4322] pwc: recv_control_msg error -32 req 04 val 1000 [ 181.661844][ T4322] pwc: recv_control_msg error -32 req 04 val 1300 [ 181.687185][ T4322] pwc: recv_control_msg error -32 req 04 val 1400 [ 181.709242][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.717396][ T4322] pwc: recv_control_msg error -32 req 02 val 2000 [ 181.735748][ T1174] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 181.743769][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.776052][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.927785][ T1174] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.938398][ T4322] pwc: recv_control_msg error -71 req 04 val 1500 [ 181.955558][ T1174] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.966002][ T4322] pwc: recv_control_msg error -71 req 02 val 2500 [ 181.985699][ T4322] pwc: recv_control_msg error -71 req 02 val 2400 [ 182.001110][ T4322] pwc: recv_control_msg error -71 req 02 val 2600 [ 182.012177][ T1174] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.026624][ T4322] pwc: recv_control_msg error -71 req 02 val 2900 [ 182.041220][ T4322] pwc: recv_control_msg error -71 req 02 val 2800 [ 182.051717][ T1174] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 182.078586][ T4322] pwc: recv_control_msg error -71 req 04 val 1100 [ 182.085234][ T1174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 182.110553][ T4322] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.127604][ T1174] usb 1-1: Product: syz [ 182.147152][ T1174] usb 1-1: Manufacturer: syz [ 182.160086][ T4322] pwc: Registered as video103. [ 182.169730][ T1174] usb 1-1: SerialNumber: syz [ 182.178230][ T4322] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 182.208362][ T4322] usb 2-1: USB disconnect, device number 9 [ 182.398488][ T1174] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 182.475450][ T1174] usb 1-1: USB disconnect, device number 9 [ 182.504373][ T1174] usblp0: removed [ 185.140196][ T5646] bio_check_eod: 3 callbacks suppressed [ 185.140208][ T5646] syz.1.246: attempt to access beyond end of device [ 185.140208][ T5646] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 185.159385][ T5646] gfs2: error 10 reading superblock [ 185.345119][ T5661] FAULT_INJECTION: forcing a failure. [ 185.345119][ T5661] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 185.397914][ T5661] CPU: 1 PID: 5661 Comm: syz.3.248 Not tainted syzkaller #0 [ 185.405379][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.415493][ T5661] Call Trace: [ 185.418798][ T5661] [ 185.421760][ T5661] dump_stack_lvl+0x188/0x24e [ 185.426481][ T5661] ? show_regs_print_info+0x12/0x12 [ 185.431754][ T5661] ? load_image+0x410/0x410 [ 185.436294][ T5661] ? __lock_acquire+0x7c40/0x7c40 [ 185.441367][ T5661] should_fail_ex+0x390/0x4c0 [ 185.446074][ T5661] prepare_alloc_pages+0x1e1/0x5b0 [ 185.451214][ T5661] __alloc_pages+0x130/0x4f0 [ 185.455864][ T5661] ? zone_statistics+0x170/0x170 [ 185.460893][ T5661] ? _raw_spin_lock_irqsave+0x100/0x100 [ 185.466490][ T5661] ? copy_page_from_iter+0xe4/0x100 [ 185.471725][ T5661] pipe_write+0x616/0x1ae0 [ 185.476188][ T5661] ? pipe_read+0x12d0/0x12d0 [ 185.480818][ T5661] ? end_current_label_crit_section+0x14b/0x170 [ 185.487093][ T5661] ? common_file_perm+0x171/0x1c0 [ 185.492163][ T5661] vfs_write+0x482/0x9a0 [ 185.496441][ T5661] ? file_end_write+0x250/0x250 [ 185.501359][ T5661] ? __fget_files+0x3fc/0x460 [ 185.506077][ T5661] ? __fdget_pos+0x1d4/0x360 [ 185.510700][ T5661] ? ksys_write+0x70/0x260 [ 185.515155][ T5661] ksys_write+0x14d/0x260 [ 185.519515][ T5661] ? __ia32_sys_read+0x80/0x80 [ 185.524314][ T5661] ? lockdep_hardirqs_on+0x94/0x140 [ 185.529544][ T5661] do_syscall_64+0x4c/0xa0 [ 185.533989][ T5661] ? clear_bhb_loop+0x60/0xb0 [ 185.538711][ T5661] ? clear_bhb_loop+0x60/0xb0 [ 185.543420][ T5661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.549365][ T5661] RIP: 0033:0x7f578059e159 [ 185.553806][ T5661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.573434][ T5661] RSP: 002b:00007f5781389028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.581877][ T5661] RAX: ffffffffffffffda RBX: 00007f5780825fa0 RCX: 00007f578059e159 [ 185.589868][ T5661] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 185.597858][ T5661] RBP: 00007f578063506b R08: 0000000000000000 R09: 0000000000000000 [ 185.605844][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.613837][ T5661] R13: 00007f5780826038 R14: 00007f5780825fa0 R15: 00007ffdb80ceef8 [ 185.621841][ T5661] [ 185.756505][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.790751][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.911550][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.926148][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.975704][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.029658][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.058390][ T5247] device veth0_vlan entered promiscuous mode [ 186.109062][ T5247] device veth1_vlan entered promiscuous mode [ 186.168868][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.182459][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.191744][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.200875][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.214534][ T5247] device veth0_macvtap entered promiscuous mode [ 186.215257][ T5680] Bluetooth: MGMT ver 1.22 [ 186.287705][ T5247] device veth1_macvtap entered promiscuous mode [ 186.349171][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.380368][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.410557][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.415862][ T4322] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.445965][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.457439][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.468439][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.478766][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.489637][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.504272][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.518744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.530943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.539958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.552426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.563196][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.574909][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.586151][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.596965][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.607584][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.619138][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.625923][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 186.630133][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.644984][ T4453] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.656797][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.668393][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.680336][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.690615][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.703255][ T5247] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.713414][ T5247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.724736][ T5247] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.734132][ T5247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.755490][ T4456] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 186.795624][ T5090] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.847229][ T4453] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.866025][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.883401][ T4453] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.893702][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.906888][ T4611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.927731][ T4453] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.954017][ T4611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.962295][ T4611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.973146][ T4456] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.985701][ T5090] usb 4-1: Using ep0 maxpacket: 8 [ 186.990652][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.998750][ T5090] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.005512][ T4453] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.018309][ T4456] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 187.019824][ T5090] usb 4-1: config 0 has no interface number 0 [ 187.036635][ T5090] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.045464][ T4453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.065351][ T4456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.077728][ T5090] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.082482][ T4456] usb 1-1: config 0 descriptor?? [ 187.092536][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.101373][ T4453] usb 5-1: Product: syz [ 187.111971][ T4453] usb 5-1: Manufacturer: syz [ 187.120979][ T5090] usb 4-1: config 0 descriptor?? [ 187.142479][ T4456] pwc: Askey VC010 type 2 USB webcam detected. [ 187.148991][ T4453] usb 5-1: SerialNumber: syz [ 187.171284][ T5090] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.366965][ T4453] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 187.406184][ T4453] usb 5-1: USB disconnect, device number 9 [ 187.416460][ T4453] usblp1: removed [ 187.682563][ T4456] pwc: recv_control_msg error -32 req 02 val 2b00 [ 187.698962][ T4456] pwc: recv_control_msg error -32 req 02 val 2700 [ 187.716726][ T4456] pwc: recv_control_msg error -32 req 02 val 2c00 [ 187.723977][ T4456] pwc: recv_control_msg error -32 req 04 val 1000 [ 187.731750][ T4456] pwc: recv_control_msg error -32 req 04 val 1300 [ 187.746002][ T4456] pwc: recv_control_msg error -32 req 04 val 1400 [ 187.758338][ T4456] pwc: recv_control_msg error -32 req 02 val 2000 [ 188.172634][ T4456] pwc: recv_control_msg error -71 req 04 val 1500 [ 188.205491][ T4456] pwc: recv_control_msg error -71 req 02 val 2500 [ 188.234181][ T4456] pwc: recv_control_msg error -71 req 02 val 2400 [ 188.244925][ T4456] pwc: recv_control_msg error -71 req 02 val 2600 [ 188.257861][ T4456] pwc: recv_control_msg error -71 req 02 val 2900 [ 188.413447][ T4456] pwc: recv_control_msg error -71 req 02 val 2800 [ 188.425684][ T4456] pwc: recv_control_msg error -71 req 04 val 1100 [ 188.432726][ T4456] pwc: recv_control_msg error -71 req 04 val 1200 [ 188.444723][ T4456] pwc: Registered as video103. [ 188.451992][ T4456] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 188.470394][ T4456] usb 1-1: USB disconnect, device number 10 [ 188.601131][ T4453] usb 4-1: USB disconnect, device number 9 [ 188.723761][ T5707] syz.5.258: attempt to access beyond end of device [ 188.723761][ T5707] nbd5: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 188.737034][ T5707] gfs2: error 10 reading superblock [ 189.733742][ T4322] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.748084][ T4322] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 189.755918][ T4322] usb 2-1: can't read configurations, error -71 [ 189.916625][ T5724] netlink: 'syz.5.260': attribute type 1 has an invalid length. [ 190.506185][ T4453] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 190.674351][ T5746] loop4: detected capacity change from 0 to 32768 [ 190.722822][ T5746] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.733406][ T5746] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 190.742544][ T5746] BTRFS info (device loop4): setting nodatasum [ 190.748827][ T5746] BTRFS info (device loop4): force zlib compression, level 3 [ 190.756317][ T5746] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 190.765627][ T5746] BTRFS info (device loop4): use lzo compression, level 0 [ 190.772783][ T5746] BTRFS info (device loop4): turning on flush-on-commit [ 190.779824][ T5746] BTRFS info (device loop4): enabling auto defrag [ 190.786426][ T5746] BTRFS info (device loop4): max_inline at 4096 [ 190.792737][ T5746] BTRFS info (device loop4): using free space tree [ 190.817365][ T4322] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.947479][ T4453] usb 4-1: config 0 has no interfaces? [ 190.953225][ T4453] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 191.054210][ T4453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.112840][ T4453] usb 4-1: config 0 descriptor?? [ 191.189858][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 191.207419][ T4322] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 191.234278][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.882260][ T4322] usb 2-1: config 0 descriptor?? [ 192.062930][ T5746] BTRFS info (device loop4): enabling ssd optimizations [ 192.200476][ T4322] as10x_usb: device has been detected [ 192.215780][ T4322] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 192.288173][ T4322] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 192.331420][ T4322] as10x_usb: error during firmware upload part1 [ 192.367794][ T4322] Registered device nBox DVB-T Dongle [ 192.392311][ T4378] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.426600][ T4322] usb 2-1: USB disconnect, device number 11 [ 192.623950][ T4378] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 192.750342][ T4378] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 192.806374][ T4378] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.864860][ T4378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 192.904487][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 192.937828][ T4378] usb 1-1: Product: syz [ 192.958621][ T4378] usb 1-1: Manufacturer: syz [ 193.011712][ T4378] usb 1-1: SerialNumber: syz [ 193.076479][ T4287] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.087069][ T4322] Unregistered device nBox DVB-T Dongle [ 193.092595][ T4322] as10x_usb: device has been disconnected [ 193.200504][ T4453] usb 4-1: USB disconnect, device number 10 [ 193.257475][ T4378] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 193.323023][ T4378] usb 1-1: USB disconnect, device number 11 [ 193.366490][ T4378] usblp0: removed [ 193.469591][ T5793] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 193.513733][ T5793] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 193.767905][ T5793] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 194.098986][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.106702][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.494309][ T5090] smpboot: CPU 1 is now offline [ 201.528762][ T5859] loop4: detected capacity change from 0 to 1024 [ 201.634275][ T5859] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.800308][ T26] audit: type=1800 audit(1789696640.945:3): pid=5859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.287" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 202.047821][ T4287] EXT4-fs (loop4): unmounting filesystem. [ 202.575851][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 202.581922][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 203.949209][ T5906] ksmbd: Unknown IPC event: 4, ignore. [ 206.415371][ T4280] Bluetooth: hci2: command 0x0406 tx timeout [ 206.421433][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 214.665864][ T4520] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.925357][ T4520] usb 4-1: Using ep0 maxpacket: 32 [ 214.958521][ T4520] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 215.011303][ T4520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.060791][ T4520] usb 4-1: config 0 descriptor?? [ 215.113015][ T4520] as10x_usb: device has been detected [ 215.151541][ T4520] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 215.315582][ T4520] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 215.451317][ T4520] as10x_usb: error during firmware upload part1 [ 215.558395][ T4520] Registered device nBox DVB-T Dongle [ 215.574532][ T4520] usb 4-1: USB disconnect, device number 11 [ 215.652891][ T4520] Unregistered device nBox DVB-T Dongle [ 215.661155][ T4520] as10x_usb: device has been disconnected [ 219.149335][ T6015] loop3: detected capacity change from 0 to 32768 [ 220.030385][ T6015] loop3: detected capacity change from 0 to 32768 [ 220.073377][ T6015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.319 (6015) [ 220.161089][ T6015] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.210781][ T6015] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 220.254840][ T6015] BTRFS info (device loop3): using free space tree [ 220.355247][ T6015] BTRFS error (device loop3): open_ctree failed: -12 [ 220.428468][ T4359] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4359) [ 220.893298][ T6043] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 223.056913][ T1174] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.267452][ T1174] usb 2-1: Using ep0 maxpacket: 16 [ 223.280545][ T1174] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.312036][ T1174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.339396][ T1174] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 223.361999][ T1174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.384833][ T1174] usb 2-1: Product: syz [ 223.396813][ T1174] usb 2-1: Manufacturer: syz [ 223.411669][ T1174] usb 2-1: SerialNumber: syz [ 223.434509][ T1174] usb 2-1: config 0 descriptor?? [ 223.662996][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 223.710576][ T1174] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 223.744891][ T1174] imon:send_packet: packet tx failed (-71) [ 223.778856][ T1174] imon 2-1:0.0: panel buttons/knobs setup failed [ 223.935461][ T1174] rc_core: IR keymap rc-imon-pad not found [ 223.942691][ T1174] Registered IR keymap rc-empty [ 223.952036][ T1174] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 223.972722][ T1174] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 224.000317][ T1174] imon:send_packet: packet tx failed (-71) [ 224.025596][ T1174] imon 2-1:0.0: remote input dev register failed [ 225.683402][ T1174] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 225.752467][ T1174] imon 2-1:0.0: unable to initialize intf0, err 0 [ 225.772211][ T1174] imon:imon_probe: failed to initialize context! [ 225.790619][ T1174] imon 2-1:0.0: unable to register, err -19 [ 225.828681][ T1174] usb 2-1: USB disconnect, device number 12 [ 226.084525][ T6075] loop5: detected capacity change from 0 to 4096 [ 226.172503][ T6075] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 226.253904][ T6075] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 226.330411][ T1174] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.369600][ T5247] EXT4-fs (loop5): unmounting filesystem. [ 226.536074][ T1174] usb 2-1: Using ep0 maxpacket: 32 [ 226.557213][ T1174] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 226.576369][ T1174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.597083][ T1174] usb 2-1: config 0 descriptor?? [ 226.620614][ T1174] as10x_usb: device has been detected [ 226.629085][ T1174] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 226.656226][ T1174] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 226.671040][ T1174] as10x_usb: error during firmware upload part1 [ 226.678685][ T1174] Registered device nBox DVB-T Dongle [ 226.821196][ T5094] usb 2-1: USB disconnect, device number 13 [ 227.073769][ T5094] Unregistered device nBox DVB-T Dongle [ 227.083818][ T5094] as10x_usb: device has been disconnected [ 227.210274][ T1174] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 227.471348][ T1174] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 227.484723][ T1174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.498473][ T1174] usb 6-1: Product: syz [ 227.502656][ T1174] usb 6-1: Manufacturer: syz [ 227.508740][ T1174] usb 6-1: SerialNumber: syz [ 227.523910][ T1174] usb 6-1: config 0 descriptor?? [ 227.704717][ T6084] Error parsing options; rc = [-22] [ 227.765103][ T1174] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 002 [ 228.654204][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.841495][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.893468][ T6087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.447660][ T6101] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 229.696862][ T5083] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.838229][ T6089] i2c i2c-1: failure sending STOP [ 231.448460][ T6101] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 231.628958][ T5083] usb 5-1: Using ep0 maxpacket: 16 [ 231.645230][ T5083] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 231.707620][ T5083] usb 5-1: config 0 has no interface number 0 [ 231.769973][ T5083] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.613841][ T5083] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.695582][ T4365] usb 6-1: USB disconnect, device number 2 [ 233.705510][ T5083] usb 5-1: string descriptor 0 read error: -71 [ 233.711721][ T5083] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 233.822762][ T5083] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 233.861122][ T6119] gadgetfs: bound to dummy_udc driver [ 233.902193][ T5083] usb 5-1: config 0 descriptor?? [ 233.921460][ T6123] Error parsing options; rc = [-22] [ 233.950799][ T5083] usb 5-1: can't set config #0, error -71 [ 234.019103][ T5083] usb 5-1: USB disconnect, device number 10 [ 236.415570][ T4294] Bluetooth: hci4: command 0x0406 tx timeout [ 236.586920][ T6149] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 236.904779][ T6149] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 237.365361][ T5094] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 239.321888][ T5094] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 239.358045][ T6174] rnbd_client L600: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 239.376237][ T4614] rtrs_client L2019: : CM error (CM event: address error, err: -19) [ 239.408342][ T5094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.423564][ T6174] rtrs_client L2619: : init_conns() failed: err=-113 path=@ip:27.0.0.1 [:0] [ 239.444634][ T5094] usb 5-1: Product: syz [ 239.462765][ T5094] usb 5-1: Manufacturer: syz [ 239.471968][ T5094] usb 5-1: SerialNumber: syz [ 239.525757][ T5094] usb 5-1: config 0 descriptor?? [ 239.869479][ T5094] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 011 [ 241.869507][ T6198] loop3: detected capacity change from 0 to 32768 [ 241.888192][ T6198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.364 (6198) [ 241.902835][ T6198] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 241.913645][ T6198] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 241.922434][ T6198] BTRFS info (device loop3): setting nodatasum [ 241.928661][ T6198] BTRFS info (device loop3): force zlib compression, level 3 [ 241.936110][ T6198] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 241.945370][ T6198] BTRFS info (device loop3): use lzo compression, level 0 [ 241.952511][ T6198] BTRFS info (device loop3): turning on flush-on-commit [ 241.959497][ T6198] BTRFS info (device loop3): enabling auto defrag [ 241.965999][ T6198] BTRFS info (device loop3): max_inline at 4096 [ 241.972270][ T6198] BTRFS info (device loop3): using free space tree [ 242.213963][ T6198] BTRFS info (device loop3): enabling ssd optimizations [ 243.755495][ T6195] i2c i2c-1: failure sending STOP [ 243.768308][ T4277] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.796007][ T6223] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 243.881241][ T6223] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 244.016189][ T4359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4359) [ 244.263331][ T4323] usb 5-1: USB disconnect, device number 11 [ 247.006621][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 248.141875][ T6247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 248.990498][ T6252] netlink: 168 bytes leftover after parsing attributes in process `syz.3.371'. [ 250.948293][ T6261] FAULT_INJECTION: forcing a failure. [ 250.948293][ T6261] name fail_futex, interval 1, probability 0, space 0, times 1 [ 251.222656][ T6261] CPU: 0 PID: 6261 Comm: syz.0.372 Not tainted syzkaller #0 [ 251.230089][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.240170][ T6261] Call Trace: [ 251.243486][ T6261] [ 251.246441][ T6261] dump_stack_lvl+0x188/0x24e [ 251.251151][ T6261] ? show_regs_print_info+0x12/0x12 [ 251.256359][ T6261] ? load_image+0x410/0x410 [ 251.260887][ T6261] should_fail_ex+0x390/0x4c0 [ 251.265585][ T6261] get_futex_key+0x1b1/0x1000 [ 251.270273][ T6261] ? futex_setup_timer+0xc0/0xc0 [ 251.275235][ T6261] ? keyctl_session_to_parent+0xb1/0xa00 [ 251.280882][ T6261] futex_wake+0x123/0x4f0 [ 251.285223][ T6261] ? futex_wake_mark+0x150/0x150 [ 251.290172][ T6261] ? __se_sys_keyctl+0x4f9/0x870 [ 251.295121][ T6261] do_futex+0x2e2/0x320 [ 251.299283][ T6261] ? __ia32_sys_get_robust_list+0x100/0x100 [ 251.305186][ T6261] __se_sys_futex+0x381/0x410 [ 251.309878][ T6261] ? __x64_sys_futex+0xf0/0xf0 [ 251.314653][ T6261] ? __x64_sys_futex+0x1d/0xf0 [ 251.319444][ T6261] do_syscall_64+0x4c/0xa0 [ 251.323866][ T6261] ? clear_bhb_loop+0x60/0xb0 [ 251.328569][ T6261] ? clear_bhb_loop+0x60/0xb0 [ 251.333276][ T6261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.339204][ T6261] RIP: 0033:0x7fc550b9e159 [ 251.343641][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.363277][ T6261] RSP: 002b:00007fc551a0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 251.371715][ T6261] RAX: ffffffffffffffda RBX: 00007fc550e25fa8 RCX: 00007fc550b9e159 [ 251.379693][ T6261] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc550e25fac [ 251.387668][ T6261] RBP: 00007fc550e25fa0 R08: 00361f3c301c2300 R09: 0000000000000000 [ 251.395648][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.403641][ T6261] R13: 00007fc550e26038 R14: 00007ffd9a7a0010 R15: 00007ffd9a7a00f8 [ 251.411648][ T6261] [ 251.626234][ T6270] loop1: detected capacity change from 0 to 32768 [ 251.652151][ T6270] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 253.493174][ T5622] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 253.682528][ T6283] loop4: detected capacity change from 0 to 32768 [ 253.771399][ T6283] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 254.005453][ T4323] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.342221][ T4323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.358147][ T4359] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 254.651714][ T4323] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 254.730373][ T4323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.824941][ T4323] usb 4-1: config 0 descriptor?? [ 254.902502][ T4323] pwc: Askey VC010 type 2 USB webcam detected. [ 255.332702][ T4323] pwc: recv_control_msg error -32 req 02 val 2b00 [ 255.368947][ T4323] pwc: recv_control_msg error -32 req 02 val 2700 [ 255.423810][ T4323] pwc: recv_control_msg error -32 req 02 val 2c00 [ 255.502663][ T4323] pwc: recv_control_msg error -32 req 04 val 1000 [ 255.538101][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.544460][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.573859][ T4323] pwc: recv_control_msg error -32 req 04 val 1300 [ 255.635176][ T4323] pwc: recv_control_msg error -32 req 04 val 1400 [ 255.700789][ T4323] pwc: recv_control_msg error -32 req 02 val 2000 [ 255.757963][ T4323] pwc: recv_control_msg error -32 req 02 val 2100 [ 255.811318][ T4323] pwc: recv_control_msg error -32 req 04 val 1500 [ 255.859013][ T4323] pwc: recv_control_msg error -32 req 02 val 2500 [ 255.923946][ T4323] pwc: recv_control_msg error -32 req 02 val 2400 [ 256.217301][ T4323] pwc: recv_control_msg error -71 req 02 val 2900 [ 256.261159][ T4323] pwc: recv_control_msg error -71 req 02 val 2800 [ 257.682442][ T4323] pwc: recv_control_msg error -71 req 04 val 1100 [ 257.747328][ T4323] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.921342][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.930650][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.939101][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.946748][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.955671][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 257.962913][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 258.028709][ T4323] pwc: Registered as video103. [ 258.034325][ T4323] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 258.222001][ T4323] usb 4-1: USB disconnect, device number 12 [ 258.381769][ T6324] loop1: detected capacity change from 0 to 32768 [ 258.399479][ T6324] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 258.583803][ T4382] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.115886][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 260.935490][ T6334] tmpfs: Unknown parameter 'usrquota' [ 262.150143][ T6344] loop1: detected capacity change from 0 to 32768 [ 262.165402][ T6344] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 262.177164][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 262.647498][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 264.255906][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 265.043820][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.132415][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.233150][ T6317] device bridge_slave_0 entered promiscuous mode [ 265.430915][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.695227][ T5083] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 265.745968][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.810711][ T6317] device bridge_slave_1 entered promiscuous mode [ 265.917121][ T5083] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.988988][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.004481][ T5083] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.074410][ T5083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.203306][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.258579][ T5083] usb 4-1: config 0 descriptor?? [ 266.309083][ T5083] pwc: Askey VC010 type 2 USB webcam detected. [ 266.335910][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 266.416695][ T6317] team0: Port device team_slave_0 added [ 266.500879][ T6317] team0: Port device team_slave_1 added [ 266.616892][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.639409][ T4327] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 266.672192][ T6404] loop0: detected capacity change from 0 to 1024 [ 266.712582][ T5083] pwc: recv_control_msg error -32 req 02 val 2b00 [ 266.725610][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.782488][ T5083] pwc: recv_control_msg error -32 req 02 val 2700 [ 266.829561][ T5083] pwc: recv_control_msg error -32 req 02 val 2c00 [ 266.856864][ T4327] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 266.907594][ T5083] pwc: recv_control_msg error -32 req 04 val 1000 [ 266.921839][ T4327] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 266.962087][ T5083] pwc: recv_control_msg error -32 req 04 val 1300 [ 267.122885][ T6407] loop4: detected capacity change from 0 to 32768 [ 267.141025][ T6407] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 267.175111][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.201818][ T4327] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.220452][ T5083] pwc: recv_control_msg error -32 req 04 val 1400 [ 267.270349][ T5083] pwc: recv_control_msg error -32 req 02 val 2000 [ 267.340423][ T4382] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.374064][ T4327] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 267.455425][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 267.463593][ T4327] usb 2-1: Product: syz [ 267.589313][ T4327] usb 2-1: Manufacturer: syz [ 267.594832][ T5083] pwc: recv_control_msg error -71 req 04 val 1500 [ 267.655665][ T5083] pwc: recv_control_msg error -71 req 02 val 2500 [ 267.666241][ T4327] usb 2-1: SerialNumber: syz [ 267.718098][ T5083] pwc: recv_control_msg error -71 req 02 val 2400 [ 267.804561][ T5083] pwc: recv_control_msg error -71 req 02 val 2600 [ 267.854988][ T5083] pwc: recv_control_msg error -71 req 02 val 2900 [ 267.924150][ T5083] pwc: recv_control_msg error -71 req 02 val 2800 [ 267.936427][ T4327] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 267.998366][ T5083] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.030042][ T4327] usb 2-1: USB disconnect, device number 14 [ 268.060039][ T5083] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.085155][ T4327] usblp0: removed [ 268.130388][ T5083] pwc: Registered as video103. [ 268.169594][ T5083] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 268.300790][ T5083] usb 4-1: USB disconnect, device number 13 [ 268.389709][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.465373][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.775009][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.850394][ T6434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 270.856956][ T6434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.015501][ T6434] vhci_hcd vhci_hcd.0: Device attached [ 271.301713][ T6435] vhci_hcd: connection closed [ 271.302445][ T4961] vhci_hcd: stop threads [ 271.372560][ T4961] vhci_hcd: release socket [ 271.393582][ T6445] loop0: detected capacity change from 0 to 164 [ 271.400174][ T5087] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 271.425394][ T4961] vhci_hcd: disconnect device [ 271.485471][ T4325] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 271.815471][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 271.841944][ T4325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.925454][ T4325] usb 4-1: config 0 has no interfaces? [ 271.982859][ T4325] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 272.042746][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 272.093231][ T4325] usb 4-1: Product: syz [ 272.113411][ T4325] usb 4-1: Manufacturer: syz [ 272.156661][ T4325] usb 4-1: SerialNumber: syz [ 272.202310][ T4325] usb 4-1: config 0 descriptor?? [ 273.845521][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 273.853071][ T4325] usb 4-1: can't set config #0, error -32 [ 273.934464][ T4323] usb 4-1: USB disconnect, device number 14 [ 276.575369][ T5087] vhci_hcd: vhci_device speed not set [ 276.640457][ T6317] device hsr_slave_0 entered promiscuous mode [ 276.685521][ T5092] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 276.765788][ T6317] device hsr_slave_1 entered promiscuous mode [ 276.850207][ T6317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.883918][ T6317] Cannot create hsr debugfs directory [ 276.916708][ T5092] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.977716][ T5092] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.037410][ T5092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.090890][ T5092] usb 4-1: config 0 descriptor?? [ 277.139685][ T5092] pwc: Askey VC010 type 2 USB webcam detected. [ 277.297804][ T4466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.404822][ T6482] lo: Caught tx_queue_len zero misconfig [ 277.435561][ T5083] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.470073][ T4466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.534903][ T5092] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.592355][ T5092] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.620177][ T5092] pwc: recv_control_msg error -32 req 02 val 2c00 [ 277.650542][ T5083] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.671294][ T5092] pwc: recv_control_msg error -32 req 04 val 1000 [ 277.696718][ T5083] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 277.728577][ T5092] pwc: recv_control_msg error -32 req 04 val 1300 [ 277.756786][ T5083] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.773074][ T5092] pwc: recv_control_msg error -32 req 04 val 1400 [ 277.804236][ T5092] pwc: recv_control_msg error -32 req 02 val 2000 [ 277.834483][ T4466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.851084][ T5083] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 277.901085][ T5083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 277.938450][ T5083] usb 5-1: Product: syz [ 277.970092][ T5083] usb 5-1: Manufacturer: syz [ 277.995180][ T5083] usb 5-1: SerialNumber: syz [ 278.052530][ T5092] pwc: recv_control_msg error -71 req 04 val 1500 [ 278.093063][ T5092] pwc: recv_control_msg error -71 req 02 val 2500 [ 278.123342][ T5092] pwc: recv_control_msg error -71 req 02 val 2400 [ 278.135138][ T4466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.179264][ T5092] pwc: recv_control_msg error -71 req 02 val 2600 [ 278.216586][ T5092] pwc: recv_control_msg error -71 req 02 val 2900 [ 278.227798][ T5083] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.285616][ T5092] pwc: recv_control_msg error -71 req 02 val 2800 [ 278.313614][ T5083] usb 5-1: USB disconnect, device number 12 [ 278.341819][ T5092] pwc: recv_control_msg error -71 req 04 val 1100 [ 278.380593][ T5083] usblp0: removed [ 278.399051][ T5092] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.455426][ T5092] pwc: Registered as video103. [ 278.511258][ T5092] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 278.615099][ T5092] usb 4-1: USB disconnect, device number 15 [ 279.036018][ T6317] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.128416][ T6317] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.221470][ T6317] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.307566][ T6317] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.473218][ T6488] loop1: detected capacity change from 0 to 40427 [ 279.643435][ T6488] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 279.711379][ T6488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 279.876642][ T6488] F2FS-fs (loop1): Unrecognized mount option "errors=remount-ro" or missing value [ 280.288130][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.299247][ T6514] loop3: detected capacity change from 0 to 512 [ 280.474861][ T6514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 280.575471][ T6514] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.611598][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.696564][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.760374][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.025866][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.041413][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 281.090809][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.195933][ T4961] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.203134][ T4961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.398635][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.448135][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.536121][ T4961] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.543376][ T4961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.647164][ T4327] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 281.861150][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.876703][ T4327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.900926][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.935539][ T4327] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 281.976671][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.003214][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.032129][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.061488][ T4327] usb 4-1: config 0 descriptor?? [ 282.092127][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.119454][ T4327] pwc: Askey VC010 type 2 USB webcam detected. [ 282.142026][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.181189][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.477855][ T4325] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 282.562952][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.607562][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.642709][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.691652][ T4327] pwc: recv_control_msg error -32 req 02 val 2b00 [ 282.710361][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.726887][ T4327] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.748824][ T4325] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.764751][ T4327] pwc: recv_control_msg error -32 req 02 val 2c00 [ 282.792425][ T4327] pwc: recv_control_msg error -32 req 04 val 1000 [ 282.803878][ T4325] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.843887][ T4327] pwc: recv_control_msg error -32 req 04 val 1300 [ 282.872588][ T4327] pwc: recv_control_msg error -32 req 04 val 1400 [ 282.887865][ T4325] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 282.924509][ T4327] pwc: recv_control_msg error -32 req 02 val 2000 [ 282.945341][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 282.999815][ T4325] usb 1-1: Product: syz [ 283.004062][ T4325] usb 1-1: Manufacturer: syz [ 283.042960][ T4325] usb 1-1: SerialNumber: syz [ 283.186914][ T4327] pwc: recv_control_msg error -71 req 04 val 1500 [ 283.205828][ T4327] pwc: recv_control_msg error -71 req 02 val 2500 [ 283.247613][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.259881][ T4327] pwc: recv_control_msg error -71 req 02 val 2400 [ 283.277527][ T4325] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 283.310035][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.319818][ T4327] pwc: recv_control_msg error -71 req 02 val 2600 [ 283.362526][ T4325] usb 1-1: USB disconnect, device number 12 [ 283.373014][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.380564][ T4327] pwc: recv_control_msg error -71 req 02 val 2900 [ 283.399439][ T6562] se_dev->se_dev_ptr already set for storage object [ 283.428208][ T4327] pwc: recv_control_msg error -71 req 02 val 2800 [ 283.438653][ T4325] usblp0: removed [ 283.476080][ T4327] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.508991][ T4327] pwc: recv_control_msg error -71 req 04 val 1200 [ 283.533626][ T6562] [ 283.536004][ T6562] ====================================================== [ 283.543022][ T6562] WARNING: possible circular locking dependency detected [ 283.550064][ T6562] syzkaller #0 Not tainted [ 283.554477][ T6562] ------------------------------------------------------ [ 283.561491][ T6562] syz.1.434/6562 is trying to acquire lock: [ 283.567382][ T6562] ffffffff8d805a08 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0 [ 283.576268][ T6562] [ 283.576268][ T6562] but task is already holding lock: [ 283.583653][ T6562] ffff888059313310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 283.592630][ T6562] [ 283.592630][ T6562] which lock already depends on the new lock. [ 283.592630][ T6562] [ 283.603041][ T6562] [ 283.603041][ T6562] the existing dependency chain (in reverse order) is: [ 283.612074][ T6562] [ 283.612074][ T6562] -> #2 (&gi->lock){+.+.}-{3:3}: [ 283.619224][ T6562] __mutex_lock+0x12d/0xae0 [ 283.624268][ T6562] config_usb_cfg_link+0x55/0x250 [ 283.629829][ T6562] configfs_symlink+0x5a4/0x13c0 [ 283.635293][ T6562] vfs_symlink+0x245/0x3d0 [ 283.640252][ T6562] do_symlinkat+0x1b6/0x400 [ 283.645280][ T6562] __x64_sys_symlinkat+0x95/0xa0 [ 283.650751][ T6562] do_syscall_64+0x4c/0xa0 [ 283.655691][ T6562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.662137][ T6562] [ 283.662137][ T6562] -> #1 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 283.670834][ T6562] down_write+0x36/0x60 [ 283.675533][ T6562] configfs_depend_item_unlocked+0x14f/0x430 [ 283.682046][ T6562] usbg_make_tpg+0x1dd/0x550 [ 283.687166][ T6562] target_fabric_make_tpg+0xa0/0x6d0 [ 283.692985][ T6562] configfs_mkdir+0x511/0x9e0 [ 283.698193][ T6562] vfs_mkdir+0x386/0x570 [ 283.702967][ T6562] do_mkdirat+0x1d8/0x440 [ 283.707836][ T6562] __x64_sys_mkdirat+0x85/0x90 [ 283.713126][ T6562] do_syscall_64+0x4c/0xa0 [ 283.718070][ T6562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.724499][ T6562] [ 283.724499][ T6562] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 283.732408][ T6562] __lock_acquire+0x2d18/0x7c40 [ 283.737789][ T6562] lock_acquire+0x1bb/0x4a0 [ 283.742837][ T6562] __mutex_lock+0x12d/0xae0 [ 283.747881][ T6562] tcm_alloc+0x1d/0x2c0 [ 283.752582][ T6562] usb_get_function+0x59/0xa0 [ 283.757787][ T6562] config_usb_cfg_link+0x144/0x250 [ 283.763425][ T6562] configfs_symlink+0x5a4/0x13c0 [ 283.768886][ T6562] vfs_symlink+0x245/0x3d0 [ 283.773841][ T6562] do_symlinkat+0x1b6/0x400 [ 283.778880][ T6562] __x64_sys_symlinkat+0x95/0xa0 [ 283.784344][ T6562] do_syscall_64+0x4c/0xa0 [ 283.789292][ T6562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.795717][ T6562] [ 283.795717][ T6562] other info that might help us debug this: [ 283.795717][ T6562] [ 283.805966][ T6562] Chain exists of: [ 283.805966][ T6562] tpg_instances_lock --> &sb->s_type->i_mutex_key#21 --> &gi->lock [ 283.805966][ T6562] [ 283.819792][ T6562] Possible unsafe locking scenario: [ 283.819792][ T6562] [ 283.827243][ T6562] CPU0 CPU1 [ 283.832619][ T6562] ---- ---- [ 283.837980][ T6562] lock(&gi->lock); [ 283.841879][ T6562] lock(&sb->s_type->i_mutex_key#21); [ 283.849866][ T6562] lock(&gi->lock); [ 283.856280][ T6562] lock(tpg_instances_lock); [ 283.860957][ T6562] [ 283.860957][ T6562] *** DEADLOCK *** [ 283.860957][ T6562] [ 283.869096][ T6562] 3 locks held by syz.1.434/6562: [ 283.874115][ T6562] #0: ffff8881472c2460 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 283.883357][ T6562] #1: ffff88805535c660 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 283.894240][ T6562] #2: ffff888059313310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 283.903646][ T6562] [ 283.903646][ T6562] stack backtrace: [ 283.909531][ T6562] CPU: 0 PID: 6562 Comm: syz.1.434 Not tainted syzkaller #0 [ 283.916814][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 283.926870][ T6562] Call Trace: [ 283.930155][ T6562] [ 283.933103][ T6562] dump_stack_lvl+0x188/0x24e [ 283.937817][ T6562] ? load_image+0x410/0x410 [ 283.942344][ T6562] ? show_regs_print_info+0x12/0x12 [ 283.947552][ T6562] ? print_circular_bug+0x12b/0x1a0 [ 283.952765][ T6562] check_noncircular+0x296/0x330 [ 283.957741][ T6562] ? add_chain_block+0x9b0/0x9b0 [ 283.962693][ T6562] ? lockdep_lock+0xf1/0x1f0 [ 283.967294][ T6562] ? _find_first_zero_bit+0xd2/0x100 [ 283.972605][ T6562] __lock_acquire+0x2d18/0x7c40 [ 283.977480][ T6562] ? pidfd_create+0xd0/0xf0 [ 283.982014][ T6562] ? stack_trace_save+0xf0/0xf0 [ 283.986888][ T6562] ? verify_lock_unused+0x140/0x140 [ 283.992128][ T6562] ? verify_lock_unused+0x140/0x140 [ 283.997349][ T6562] lock_acquire+0x1bb/0x4a0 [ 284.001867][ T6562] ? tcm_alloc+0x1d/0x2c0 [ 284.006234][ T6562] ? __might_sleep+0xd0/0xd0 [ 284.010825][ T6562] ? read_lock_is_recursive+0x10/0x10 [ 284.016211][ T6562] ? __mutex_trylock_common+0x15c/0x260 [ 284.021769][ T6562] __mutex_lock+0x12d/0xae0 [ 284.026279][ T6562] ? tcm_alloc+0x1d/0x2c0 [ 284.030618][ T6562] ? rcu_is_watching+0x11/0xa0 [ 284.035398][ T6562] ? trace_contention_end+0x5f/0x170 [ 284.040702][ T6562] ? __mutex_lock+0x1ab/0xae0 [ 284.045385][ T6562] ? tcm_alloc+0x1d/0x2c0 [ 284.049726][ T6562] ? mutex_lock_nested+0x10/0x10 [ 284.054668][ T6562] ? config_usb_cfg_link+0x55/0x250 [ 284.059877][ T6562] ? mutex_lock_nested+0x10/0x10 [ 284.064823][ T6562] tcm_alloc+0x1d/0x2c0 [ 284.068999][ T6562] usb_get_function+0x59/0xa0 [ 284.073680][ T6562] config_usb_cfg_link+0x144/0x250 [ 284.078802][ T6562] configfs_symlink+0x5a4/0x13c0 [ 284.083741][ T6562] ? end_current_label_crit_section+0x14b/0x170 [ 284.090003][ T6562] ? common_perm+0x15d/0x1b0 [ 284.094613][ T6562] ? from_kgid+0x14f/0x6a0 [ 284.099034][ T6562] ? make_kgid+0x650/0x650 [ 284.103454][ T6562] ? apparmor_path_symlink+0x1ac/0x230 [ 284.108919][ T6562] ? lookup_one_qstr_excl+0x11c/0x240 [ 284.114307][ T6562] ? detach_groups+0x370/0x370 [ 284.119081][ T6562] ? inode_permission+0xef/0x480 [ 284.124052][ T6562] ? bpf_lsm_inode_symlink+0x5/0x10 [ 284.129268][ T6562] ? security_inode_symlink+0xb2/0x100 [ 284.134724][ T6562] vfs_symlink+0x245/0x3d0 [ 284.139148][ T6562] do_symlinkat+0x1b6/0x400 [ 284.143668][ T6562] ? vfs_symlink+0x3d0/0x3d0 [ 284.148288][ T6562] __x64_sys_symlinkat+0x95/0xa0 [ 284.153240][ T6562] do_syscall_64+0x4c/0xa0 [ 284.157660][ T6562] ? clear_bhb_loop+0x60/0xb0 [ 284.162355][ T6562] ? clear_bhb_loop+0x60/0xb0 [ 284.167037][ T6562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.172960][ T6562] RIP: 0033:0x7f0e34f9e159 [ 284.177394][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.197006][ T6562] RSP: 002b:00007f0e35e06028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 284.205434][ T6562] RAX: ffffffffffffffda RBX: 00007f0e35225fa0 RCX: 00007f0e34f9e159 [ 284.213408][ T6562] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 284.221378][ T6562] RBP: 00007f0e3503506b R08: 0000000000000000 R09: 0000000000000000 [ 284.229351][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.237331][ T6562] R13: 00007f0e35226038 R14: 00007f0e35225fa0 R15: 00007fff861824c8 [ 284.245309][ T6562] [ 284.269465][ T4327] pwc: Registered as video103. [ 284.297273][ T4327] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 284.343467][ T4327] usb 4-1: USB disconnect, device number 16 [ 284.662248][ T4466] device hsr_slave_0 left promiscuous mode [ 284.679333][ T4466] device hsr_slave_1 left promiscuous mode [ 284.702492][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.728724][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.751453][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.769566][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.786238][ T4466] device bridge_slave_1 left promiscuous mode [ 284.802236][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.822398][ T4466] device bridge_slave_0 left promiscuous mode [ 284.838317][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.859521][ T4466] device veth1_macvtap left promiscuous mode [ 284.872153][ T4466] device veth0_macvtap left promiscuous mode [ 284.886927][ T4466] device veth1_vlan left promiscuous mode [ 284.903735][ T4466] device veth0_vlan left promiscuous mode [ 285.142697][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 285.169138][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 285.227634][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.283316][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.386372][ T4466] bond0 (unregistering): Released all slaves [ 285.665552][ T5089] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 285.689053][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.703972][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.738199][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.877520][ T5089] usb 1-1: Dual-Role OTG device on HNP port [ 285.890036][ T5089] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 285.924409][ T5089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.957529][ T4327] Using the BOT protocol [ 285.969127][ T4327] Using the UAS protocol [ 285.991884][ T5089] scsi host1: uas [ 286.019807][ T4466] scsi 1:0:0:0: Direct-Access LIO-ORG RAMDISK-MCP 4.0 PQ: 0 ANSI: 6 [ 286.060079][ T4589] sd 1:0:0:0: [sdb] 512 512-byte logical blocks: (262 kB/256 KiB) [ 286.077887][ T4466] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 286.104467][ T4589] sd 1:0:0:0: [sdb] Write Protect is off [ 286.130453][ T4589] sd 1:0:0:0: [sdb] Mode Sense: 43 00 00 08 [ 286.152482][ T4589] sd 1:0:0:0: [sdb] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA [ 286.216649][ T4589] sd 1:0:0:0: [sdb] Attached SCSI disk [ 286.389199][ T5089] target: Unknown data direction for SCSI Opcode 0xa1 [ 286.486253][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.508537][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.544235][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.563519][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.584203][ T6317] device veth0_vlan entered promiscuous mode [ 286.598334][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.611388][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.632190][ T6317] device veth1_vlan entered promiscuous mode [ 286.647153][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.682114][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.698688][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.719957][ T6317] device veth0_macvtap entered promiscuous mode [ 286.733710][ T6317] device veth1_macvtap entered promiscuous mode [ 286.764091][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.789464][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.811766][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.839246][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.858661][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.881977][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.906940][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.932737][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.953632][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.973580][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.988892][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 287.009032][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.033566][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.054537][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.077002][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.098088][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.124286][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.147369][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.169545][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.192251][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.214925][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.240149][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.260567][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.270888][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.291510][ T6317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.307647][ T6317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.316937][ T6317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.327160][ T6317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.374575][ T6317] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 287.421233][ T4961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.435136][ T6317] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 287.451415][ T4961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.473457][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.500378][ T4589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.516919][ T4589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.539283][ T4961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready