last executing test programs: 16m35.256697163s ago: executing program 4 (id=5): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newsa={0x160, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@multicast1, {0x0, 0x2, 0x5, 0x80000000000010, 0xffffffffffffffff, 0x0, 0x20000000007}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x1, 0x9, 0x110}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x60, "2b7af5a146b417cb2710e3ec375909c55a93f8c4b2a2d9d3512203268cb4eaf335060ca9"}}]}, 0x160}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 16m32.702315481s ago: executing program 4 (id=7): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1204480, &(0x7f00000004c0)={[{@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x453, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000040)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x84100, 0x0) 16m31.226517445s ago: executing program 4 (id=8): r0 = io_uring_setup(0x55a6, &(0x7f0000000100)={0x0, 0xaa03, 0x0, 0x0, 0x2c1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 16m27.518614513s ago: executing program 4 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100000000) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x20000, 0xffffffffffffff81, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x5f}, 0x28) 16m24.275074015s ago: executing program 4 (id=16): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000d00)='./cgroup/../file0/file0\x00', 0x1000411, &(0x7f0000000d40)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@dax_never}, {@commit={'commit', 0x3d, 0x1}}, {@nodiscard}, {@nomblk_io_submit}, {@journal_path={'journal_path', 0x3d, './cgroup/../file0'}}, {@nomblk_io_submit}, {@journal_path={'journal_path', 0x3d, './file1/file0'}}, {@dax_inode}]}, 0x8, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaaaa100604"], 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="010125bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000101010700010000080026006c09ef03040008011e0029ee"], 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000e00)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xa4000}, 0x808) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x1000000000000001, 0x5, 0x42, 0x4, 0xfffffffffffffffd, 0x66c}) 16m21.602435653s ago: executing program 4 (id=20): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x800, 0x2) 16m4.560836061s ago: executing program 32 (id=20): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x800, 0x2) 14m44.505889324s ago: executing program 3 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x6b, [@private=0xa010100]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x20000000, 0x0) r5 = inotify_init1(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x5) ioctl$UI_SET_RELBIT(r7, 0x40045566, 0xffffffffffffff49) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1820000001000000004e2c00ffffffff9500000000000000c3a9a8dd783f19e981685bb4938437d9ebb5e26a4ad28bc1019f59eccd6f248e26163a95a47a684d6c478f9b627a8a817dbbbc2827ac6b7b259fa478bb80c8872c9e82d68d0d66fff02843a17b7f919ea3"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 14m42.069494042s ago: executing program 3 (id=221): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) 14m38.48862342s ago: executing program 3 (id=225): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x9000, 0x0, 0x2}, 0x18, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) landlock_restrict_self(r0, 0x2) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 14m38.243056698s ago: executing program 3 (id=226): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 14m38.109274503s ago: executing program 3 (id=228): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e1e, @local}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00005f74756600000000000000000008001a"], 0x3c}}, 0x0) add_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f0000000400)="ce61", 0x2, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x2) socket$inet6(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10800, &(0x7f0000000440)=ANY=[], 0x4, 0x18c, &(0x7f0000000200)="$eJzskj2r01AYx38nyU2vohcFp7vYofgyaNNUxU3Huru5WNpYi6naJqAtBSMiHRzE0U/QryH4BXQQwbVzkeLiIpHzknCqH+Ge35B/nn+e85znOTmPs2nWAP7slgPuovA54qsQBMBFob2tp/WD0W9G32vhi8m7Z/w3Ro+z+SI0OU3Oa+NJP02TWRP4pbzayu689tiqUt93y4F8eQiUZVlKbwgynTNWjg9MrZzjAC6oIco6Rw4ig8tAO588b2fzxbXxpD9KRsnT2O/eim5E0c24/WicJpF+CmsLMwpSrwKNQ2rk9wPgrYl/so+wWpOcBnGKB/XasDrDI8G/eNbaSgWf6r4aYfW/4D6XkG29KKo60m2pKgFqpB4C3wSdwOpP73WoPlwfPEuHKwSiWrYmqGt0NhzUQWwH3dsFZ3WplSnZMtozuja6AXW1fvzevzJBIZ/vTHSlgJCX/TyfdeSc+k3wCsjzWexVXnyusA9M7vrR2x/us/ff2TocDofD4XA4HA7HSeNvAAAA//99JHhE") chdir(&(0x7f00000000c0)='./file0\x00') read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 14m35.393689942s ago: executing program 3 (id=231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffff1b702000008000000b7030000020000008500000017000000950000000000007f9b98748c7938f386dc6744e3d6d89dbdf43ede8f58460129058ebde3ff9fdedc963b3b2ed11c52ac0df8c2e2b4b7a5d582b907311fdb5fba79f63ec004f5e62591dc6c302034855dbb1e464e2e6ff4ea7787406aae2f01b5a090c4abca7fde91c7afcbd10e10165639e4ae7f335bb535a772005fd6cc286372fad47e0d902b0d060951881881ea4d1057fa402b8ddd3b92bc127020e1e20ecb233418d10c415b60b50b6368f30feece373753e7b9129bf27a1843e3dc6bb2215c4baa48fef7a41773bea1376e88feeeb0"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) socket(0xa, 0x3, 0x3a) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) 14m19.003035437s ago: executing program 33 (id=231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) socket(0xa, 0x3, 0x3a) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) 6m37.957679236s ago: executing program 1 (id=1021): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m37.088968315s ago: executing program 1 (id=1022): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6m33.288564839s ago: executing program 1 (id=1029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) dup3(r1, r0, 0x0) 6m33.190006627s ago: executing program 1 (id=1030): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m32.669505829s ago: executing program 1 (id=1031): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0xcb1, 0x4000, 0x0, 0x80000000, 0x20000}) 6m32.503114861s ago: executing program 1 (id=1032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e23, 0xfffffff6, @mcast1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="e886ce6ba46e48876319e2e16e9bd56e2d7e71c3ca6853309a09205950efe1f9f8c2994e8ce5dc612132d90107dbf419d5985038b2dfba2c564760669d9f32e278facc926c9a7c4f53efe609f8f81a9e53", 0x51}, {&(0x7f0000000140)="bceb646a5429784e15b6a2", 0xb}, {&(0x7f00000002c0)="45d862ad196c13906582c8705dc73bc11cb53fb9cafd3121ca7438962461f42ce8d9c0d25fe7433e10cbfe47cdba4d4c72b60b060125bb7d93695fe4c8b9d5f285a478bfc306aac8b102d692681e1672a798acf0bcf4e4646332e9e86cdde5abc45b39038808d5b14693a1b673e2d0862f9f19476e29ad43760c289550ec030e2e60b29fe1343df1d29f310794d574f888ace2943893567d118a2d0d0b5b2a5ece6b4ad74b03d748f8f5d64cf55fbd9ea831ad6dd54b0661a365432aeb39983a6e", 0xc1}, {&(0x7f00000003c0)="8afa9cea4f3bdaa087a1f1fb928bfc3dab6c04f9b1d275ef6babdfd9a126b89784f6f99d3cc99e5b7883b4b71b8fb8f45f35f7d45df16ab7fc8c023be8862b8a5ea42af5333037e6836742524b4905e3389e00fda1445d8c58a36d6edd245b830c3f445d479e2efe64fd770c230cbe6a66c258c89151a1b2e8dede732b1ae445648537d41081047dd4580857eca38b42627b09eef2c919ce5eb00c613227e08fbb035c3a3ed8ffee00408ac92fa6e5d8b98fa13ec2640b118a6adac076faf028b9eb1487dcb0abcf7be1258ef2d28990", 0xd0}, {&(0x7f0000000180)="014607f0d6d222d580e670f11f4b1c8c4353db0b34c20843d776806f36b8df8bc7eabcb93ccadd9bb4c241f1e40fa45ce065b38c49a281d4c9d6b3b88d6bbf520e40737d511a7493992c9edb1134c737ba7fc40cfa445e74b06aa8d6f8cfcd8eb12529e3272200a2f2d2d641a492a9cb1fe828c0576a8f192035aab8f41ad72d29f97fd1f4272fac6b38bd3aa5dbf2bb19f6dd", 0x93}], 0x5, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@generic={0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x1, 0xd, '\x00', [@ra={0x5, 0x2, 0x100}, @enc_lim={0x4, 0x1, 0x37}, @calipso={0x7, 0x48, {0x2, 0x10, 0x21, 0x7, [0x300000, 0x1, 0x3, 0xfffffffffffffff6, 0x0, 0x2, 0x0, 0x0]}}, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x10, {0x1, 0x2, 0xd2, 0x90f3, [0x6]}}, @pad1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0xb, 0x0, [@mcast1]}}}, @dstopts={{0x38, 0x29, 0x37, {0xff, 0x4, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0xdd3c}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x62, 0x10, '\x00', [@ra={0x5, 0x2, 0xa090}, @generic={0x8, 0x7e, "bf4ebeadf4c8a12659f363da8c19717f95a44b5e8140378f945b7df475f0ba8ae69f021a01ef2194e4e15692cca5a74eb7665b1f9c0e0075110ac79c6e1276458e498cc402498338defc0c376193ebba99af463d98c3df4176af014820d10fb0720d871fcb6ca437ff7d8c8e9761c1b25f6c077151b902ec47a4d951a997"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x220}, 0x0) 6m17.035844866s ago: executing program 34 (id=1032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e23, 0xfffffff6, @mcast1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="e886ce6ba46e48876319e2e16e9bd56e2d7e71c3ca6853309a09205950efe1f9f8c2994e8ce5dc612132d90107dbf419d5985038b2dfba2c564760669d9f32e278facc926c9a7c4f53efe609f8f81a9e53", 0x51}, {&(0x7f0000000140)="bceb646a5429784e15b6a2", 0xb}, {&(0x7f00000002c0)="45d862ad196c13906582c8705dc73bc11cb53fb9cafd3121ca7438962461f42ce8d9c0d25fe7433e10cbfe47cdba4d4c72b60b060125bb7d93695fe4c8b9d5f285a478bfc306aac8b102d692681e1672a798acf0bcf4e4646332e9e86cdde5abc45b39038808d5b14693a1b673e2d0862f9f19476e29ad43760c289550ec030e2e60b29fe1343df1d29f310794d574f888ace2943893567d118a2d0d0b5b2a5ece6b4ad74b03d748f8f5d64cf55fbd9ea831ad6dd54b0661a365432aeb39983a6e", 0xc1}, {&(0x7f00000003c0)="8afa9cea4f3bdaa087a1f1fb928bfc3dab6c04f9b1d275ef6babdfd9a126b89784f6f99d3cc99e5b7883b4b71b8fb8f45f35f7d45df16ab7fc8c023be8862b8a5ea42af5333037e6836742524b4905e3389e00fda1445d8c58a36d6edd245b830c3f445d479e2efe64fd770c230cbe6a66c258c89151a1b2e8dede732b1ae445648537d41081047dd4580857eca38b42627b09eef2c919ce5eb00c613227e08fbb035c3a3ed8ffee00408ac92fa6e5d8b98fa13ec2640b118a6adac076faf028b9eb1487dcb0abcf7be1258ef2d28990", 0xd0}, {&(0x7f0000000180)="014607f0d6d222d580e670f11f4b1c8c4353db0b34c20843d776806f36b8df8bc7eabcb93ccadd9bb4c241f1e40fa45ce065b38c49a281d4c9d6b3b88d6bbf520e40737d511a7493992c9edb1134c737ba7fc40cfa445e74b06aa8d6f8cfcd8eb12529e3272200a2f2d2d641a492a9cb1fe828c0576a8f192035aab8f41ad72d29f97fd1f4272fac6b38bd3aa5dbf2bb19f6dd", 0x93}], 0x5, &(0x7f0000000580)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@generic={0x2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x1, 0xd, '\x00', [@ra={0x5, 0x2, 0x100}, @enc_lim={0x4, 0x1, 0x37}, @calipso={0x7, 0x48, {0x2, 0x10, 0x21, 0x7, [0x300000, 0x1, 0x3, 0xfffffffffffffff6, 0x0, 0x2, 0x0, 0x0]}}, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x10, {0x1, 0x2, 0xd2, 0x90f3, [0x6]}}, @pad1]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0xb, 0x0, [@mcast1]}}}, @dstopts={{0x38, 0x29, 0x37, {0xff, 0x4, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0xdd3c}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x62, 0x10, '\x00', [@ra={0x5, 0x2, 0xa090}, @generic={0x8, 0x7e, "bf4ebeadf4c8a12659f363da8c19717f95a44b5e8140378f945b7df475f0ba8ae69f021a01ef2194e4e15692cca5a74eb7665b1f9c0e0075110ac79c6e1276458e498cc402498338defc0c376193ebba99af463d98c3df4176af014820d10fb0720d871fcb6ca437ff7d8c8e9761c1b25f6c077151b902ec47a4d951a997"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3a, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x220}, 0x0) 5m8.735416908s ago: executing program 0 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r3, 0xffffffffffffffff, &(0x7f0000000100)=0x89, 0x8) 5m7.958189173s ago: executing program 0 (id=1210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(r1, r0, 0x0) 5m4.743639008s ago: executing program 0 (id=1213): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c000000080001", @ANYRES16=r0], 0x1c}}, 0x4048004) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a3770ea) 5m3.998598104s ago: executing program 0 (id=1215): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42", 0x93}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9af", 0x32}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5", 0x6d}], 0x1}}], 0x2, 0x2090) 5m2.765122725s ago: executing program 0 (id=1216): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)) 4m57.212147627s ago: executing program 0 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m40.591809408s ago: executing program 35 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m45.410894376s ago: executing program 6 (id=2311): fanotify_init(0x0, 0xc0d9e5268d9d54da) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x31df6826721218db) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100340, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x80000018}) pipe2(0x0, 0x0) 1m44.928364845s ago: executing program 6 (id=2312): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82c0, 0x8) r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) 1m44.472092749s ago: executing program 6 (id=2314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000880)=""/83, 0x53}], 0x2}, 0x0) 1m44.032056779s ago: executing program 6 (id=2315): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000007b00)=[{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000000000)="0dda240631fb92299e93fbc7f9bde119b9f99ee5fab21aa483d7c35d6b8979a210f026475262f8a8eb6014398d052d31742fc66ee7ee152e089fca4f8d8c9ee044560bd05d89bc2ad12ada223473b6947b86431bd03fb47b1e51834d19cae49f9cde4bc6d7d12d5313f895f2a7361e37b00fa6f88999e5263c8b28363c2833384ec4e7fe8da44c793e18789d3559718c4373881a993d6696131b822d4f09aa3140768fc3e270c4d0ff3623b1831933542aa4108ff4c3f7ba", 0xb8}, {&(0x7f0000000600)="e75b5f173bb0995cc7179a32ad0504d3c9cec75f6d1b01604f5cccce64c68b311a1a9690f38ebc92eb2482b668c8ebdeabeb9501b3019a1b3e0b2ae1054deb2eaa313edad44746889aeee49247bb1f1b286469302f20cd3a954d35931780d9d6de1d54605d6acb6d29b84038871824dff433e7dbaf83b1edcc93c927292bdfe2cefc6507d7957a26c5dfc0f73d7171e4c662e13abb48bf2eab92f6f6163a281319e173d3186b34a3eb7da6a1406d6c46465d01405a566d6ff1714614ae1348e5926175def3d71b53a680921d650cc912a806ba839e270dd265b5bace46b4d2bc0479ba2933e290b0f0107ff462", 0xed}, {&(0x7f0000002b40)="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", 0xc98}, {&(0x7f0000003bc0)="10fce81ebef125e1791ad1b4f7968561e47c17ec71419c582fe6ea9318efeae64b552f7c9a6ac22b9710245ef780e418787deff0e86d2f897dda6de311d019d1cdc9cc5344c52ca2171073bf43f46ce45d81bce6b12693e777512ea905eefc0ce1098c6b17201d31c51eb6", 0x6b}, {&(0x7f0000003c40)="8afc15c3ac94fee1bbb27a556eca1870d4995ed155834efe4aad55b129de29966f046808e70f1a16b5208a9a6167a721c56c48f5aa38353b68a63137653ac4a34d0ed74e58445add8e200521efa01d93b7e1f6e37bd45b3da6cc6ebdaea102ded8950d825488148d59cf15696cfecad2c7b6e9a7a010dc3b6303bf14528c2628ad8a8918e8d410bd91b1498de1694dd70614bc6d82b0686226d3fc1e0a0b15", 0x9f}], 0x5, 0x0, 0x0, 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m43.825105247s ago: executing program 6 (id=2318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0x80dc5521, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nodioread_nolock}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x835, 0x0) open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x225203, 0x0) 1m43.52782403s ago: executing program 6 (id=2320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}}, 0x0) 26.509347948s ago: executing program 8 (id=2437): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 22.531654937s ago: executing program 8 (id=2446): r0 = socket$packet(0x11, 0x2, 0x300) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000540)={{0x0, 0x4, 0xbd23, 0x15, 0x6, 0x3, 0x80, 0x981a, 0x8, 0x6, 0x1ff, 0x7, 0xffffffffffffff5e, 0x80000000, 0x8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r6, &(0x7f00000003c0), 0x0}, 0x20) lseek(r5, 0x9, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_emit_ethernet(0x3e, 0x0, 0x0) 20.750421534s ago: executing program 8 (id=2448): socket$netlink(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40400b0}, 0x0) 18.869060701s ago: executing program 7 (id=2451): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents(r2, &(0x7f0000000680)=""/160, 0xa0) 13.13799469s ago: executing program 7 (id=2455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3fffffff8000, 0x80000000000, 0x0, 0x3bb, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x1000000000000000, 0xfffffffffffffffc, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@base={0x1, 0x3, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x74ebdffb}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0xb1, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) 12.659503118s ago: executing program 8 (id=2456): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x14, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a80)={r0, &(0x7f0000000c00), 0x0}, 0x20) 11.728593948s ago: executing program 8 (id=2458): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x8, {}, {}, {0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "d501ff9222645f49"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@loopback}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000"], 0x80}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 11.670023292s ago: executing program 7 (id=2459): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.759701559s ago: executing program 5 (id=2460): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@nojournal_checksum}, {@acl}, {@nogrpid}, {@errors_remount}, {@dioread_lock}]}, 0xff, 0x578, &(0x7f0000000c00)="$eJzs3V1rFFcYAOB3NonfbSKItL0ogV7UYt2YpJ9Q0F63UqG91yUZg2TjSnYjJhXUi3pdpFBKhdIf0PteSv9Af0WhFaSItJTebJnNrFmTXTeJq4md54HRc2bGfffszDn7npldN4DCGs/+KEW8GhFfJxGjHduGI984vrrfwwfXZrIliWbz8z+TSPJ17f2T/O+DeeWViPjlq4jjpY1x68sr85VqNV3M6xONhcsT9eWVExcXKnPpXHppanr6g3enpz58/72BtfWts39/99ndoexZf/vTvcO3kzgdh/Jtne14Cjc6K+Mxnr8mI3F63Y6TAwi2myT9duhyDrDzhvJ+PhLZGDAaQ3mvB/7/rkdEEyioRP+HgmrnAe25/YDmwS+M+x+vToA2tn949dpI7GvNjQ48TB6bGWXz3bEBxM9i/PzHndvZEn2uQ1wfQDyAths3I+Lk8PDG8S/Jx7/tO7mJq37rYxTt/Qd20t0s/3m7W/5TepT/RJf852CXvrsda49x/kx07f+lewMI01OW/33UJf/dv7bL2FB+++KlVs43kly4WE1PRsTLEXEsRvZm9S3cz3nsAntn/pctWfx2LriqdG947+MPMFtpVLbd4HXu34x4bS3/TWLD+L+vleuuP/7Z63F2kzGOpnde77Wtf/s7DT4Dbv4Y8WbX+c/aHa3kyfcnJ1rnw0T7rNjor1tHf+0Vf2vtH7zs+B94cvvHks77tfWtx/hh379pr23bPf/3JF+0ynvydVcrjcbiZMSe5NON66fW/m1e/6eZ75+1/9gbTx7/up3/2fhwfpPtv3Wkdxq0G47/7JaO/9YLv33y5fe94m/u+L/TKh3L12xm/NvsE3ya1w4AAAAAAAB2m1JEHIqkVH5ULpXK5dXPdxyJA6Vqrd44fqG2dGk2Wt+VHYuRUvtO92jH5yEm88/DtutT6+rTEXE4Ir4Z2t+ql2dq1dmdbjwAAAAAAAAAAAAAAAAAAADsEgd7fP8/8/vQo92e2/9HDjxnfvIbiqtv/x/ELz0Bu5L3fygu/R+KS/+H4tL/obj0fygu/R+KS/+H4tL/AQAAAAAAAAAAAAAAAAAAAAAAAAAAYKDOnjmTLc2HD67NZPXZK8tL87UrJ2bT+nx5YWmmPFNbvFyeq9Xmqml5prbQ7/GqtdrlyalYujrRSOuNifryyrmF2tKlxrmLC5W59Fw68lxaBQAAAAAAAAAAAAAAAAAAAC+W+vLKfKVaTRdfgML1HYp+Kna+7U9TSPod5VP5ybCtEMM730CFZ1DoP3Y0R5/16AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAq/4LAAD//6d0Moc=") mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) 9.039846314s ago: executing program 5 (id=2461): write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x2, 0xfffffff7ffffffff}}, 0x47) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_create_resource$binfmt(0x0) r0 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x3, [0xbc8, 0x1df, 0x854, 0xc5e]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x14a0, 0x0, 0x21, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) r4 = accept4$unix(r0, 0x0, &(0x7f0000000340), 0x1000) listen(r4, 0x2) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.606172033s ago: executing program 5 (id=2464): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x24}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="09000000e7001400000000803500008100000088a80000000000810000000000", 0x20, 0x4044800, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) 6.368050591s ago: executing program 7 (id=2467): syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc8080) 6.155927776s ago: executing program 5 (id=2469): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syslog(0x4, &(0x7f0000000600)=""/156, 0x9c) 5.940499294s ago: executing program 5 (id=2470): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0xf3}, 'syz0\x00', 0x2a}) ioctl$UI_DEV_CREATE(r0, 0x5501) 5.560309235s ago: executing program 5 (id=2473): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) ppoll(&(0x7f0000000280)=[{r1, 0x40}, {r0, 0x20}, {0xffffffffffffffff, 0x4000}], 0x3, 0x0, 0x0, 0x0) 3.250593011s ago: executing program 8 (id=2476): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.248313189s ago: executing program 2 (id=2477): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x184a81) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8, 0x4002011, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x7, 0x4, 0x1d, 0x1, "5cb65e21d82324a0459edaa3370ebe64fe1b12b37b42cf3bc7e033b263de7cf1a39a5dee8b5e2ff336f753632b19d0531420f0692af45fd48bb1ae7ea54b22b4", "c6bd87177cc1194a3789bdbbb1678c0c023d8d3e9430f89db375196e0bc1ce22", [0x3, 0x100000000]}) 3.055203366s ago: executing program 2 (id=2478): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x20, 0xc, 0x100, 0x6, 0x0, 0xf7ffffec, 0x0}) 2.932967263s ago: executing program 2 (id=2479): r0 = syz_open_dev$evdev(&(0x7f0000004280), 0x0, 0x8000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000004340)=""/164) 2.777151356s ago: executing program 7 (id=2480): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x4c) 2.187666719s ago: executing program 2 (id=2481): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0}}, 0x30) socket(0xa, 0x1, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x10000000}) 2.185585187s ago: executing program 7 (id=2482): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000300) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) tkill(0x0, 0x21) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8a}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) 873.814636ms ago: executing program 2 (id=2483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004801}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) 0s ago: executing program 2 (id=2484): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) kernel console output (not intermixed with test programs): SB device number 43 using dummy_hcd [ 935.211450][T11839] veth0_macvtap: entered promiscuous mode [ 935.271062][T10684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.271114][T10684] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 935.271139][T10684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.314552][T10684] usb 3-1: config 0 descriptor?? [ 935.794325][T11839] veth1_macvtap: entered promiscuous mode [ 936.174016][ T5640] Bluetooth: hci1: command tx timeout [ 936.390348][T11839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.475967][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.496673][T11839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.846657][T10684] usbhid 3-1:0.0: can't add hid device: -71 [ 936.846783][T10684] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 936.905396][T10684] usb 3-1: USB disconnect, device number 43 [ 937.056225][ T149] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.178712][ T149] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.229326][ T149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.273723][ T149] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.381055][T10684] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 937.546525][T10684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.546563][T10684] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.552534][T10684] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 937.552574][T10684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.552597][T10684] usb 3-1: Product: syz [ 937.552614][T10684] usb 3-1: Manufacturer: syz [ 937.552630][T10684] usb 3-1: SerialNumber: syz [ 937.573859][T10684] usb 3-1: config 0 descriptor?? [ 937.829326][ T5350] usb 3-1: USB disconnect, device number 44 [ 938.258221][ T5640] Bluetooth: hci1: command tx timeout [ 938.878084][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.878107][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.083285][ T5636] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 939.133718][ T6638] bridge_slave_1: left allmulticast mode [ 939.133756][ T6638] bridge_slave_1: left promiscuous mode [ 939.136846][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.238274][ T5636] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 939.238307][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.238328][ T5636] usb 3-1: Product: syz [ 939.238345][ T5636] usb 3-1: Manufacturer: syz [ 939.238360][ T5636] usb 3-1: SerialNumber: syz [ 939.325995][ T6638] bridge_slave_0: left allmulticast mode [ 939.326034][ T6638] bridge_slave_0: left promiscuous mode [ 939.326306][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.574484][ T5636] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 939.574544][ T5636] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 939.574567][ T5636] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 939.635154][ T5636] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 939.695485][ T5636] usb 3-1: USB disconnect, device number 45 [ 940.333528][ T5640] Bluetooth: hci1: command tx timeout [ 940.352588][T13278] binder: BINDER_SET_CONTEXT_MGR already set [ 940.352629][T13278] binder: 13277:13278 ioctl 4018620d 200000004a80 returned -16 [ 940.837065][ T6638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.918176][ T6638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.959344][ T6638] bond0 (unregistering): Released all slaves [ 941.435836][T12432] veth0_vlan: entered promiscuous mode [ 941.440609][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.440632][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.697230][T12432] veth1_vlan: entered promiscuous mode [ 941.915966][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.967438][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.972737][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 942.003280][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 942.008867][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 942.259586][ T6638] hsr_slave_0: left promiscuous mode [ 942.307426][ T6638] hsr_slave_1: left promiscuous mode [ 942.310107][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.342552][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.413248][ T5640] Bluetooth: hci1: command tx timeout [ 944.306193][ T5640] Bluetooth: hci2: command tx timeout [ 945.274135][ T6638] team0 (unregistering): Port device team_slave_1 removed [ 945.361007][ T6638] team0 (unregistering): Port device team_slave_0 removed [ 947.757847][ T5632] Bluetooth: hci2: command tx timeout [ 947.922550][T13374] loop2: detected capacity change from 0 to 4096 [ 947.928595][T13374] EXT4-fs: Ignoring removed orlov option [ 947.935467][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.964424][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.964644][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.965405][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.966864][T13374] EXT4-fs (loop2): Test dummy encryption mode enabled [ 947.966968][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.969369][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.969446][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.971650][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.972459][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 947.972461][ T3367] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 948.055866][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.056031][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.083612][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.087110][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.087899][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.088623][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.089381][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.090094][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.090811][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.091498][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.092247][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.092983][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.169285][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.198831][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.202925][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.203892][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.248144][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.257045][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.280806][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.292883][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.300292][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.321168][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.387057][T13374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.437854][T13374] tmpfs: Bad value for 'size' [ 948.608323][ T5619] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.705070][ T149] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 948.715343][ T5619] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 948.919550][T13391] loop2: detected capacity change from 0 to 256 [ 948.920355][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 948.940398][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.958898][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.973118][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.998363][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.998412][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.998441][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.998468][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 948.998494][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.002921][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.074650][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.083265][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.101253][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.101318][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.106804][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.120681][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.120836][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.120911][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.133063][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.133310][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.133499][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.133582][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.133654][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.133721][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.210466][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.216754][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.242745][ T3419] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.264547][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.264814][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.265058][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.265292][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.265945][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.266648][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.266915][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.267174][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.267300][T13391] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23633cdc, utbl_chksum : 0xe619d30d) [ 949.268051][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.268098][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.269583][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 949.630611][T13122] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.630951][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.631278][T13122] bridge_slave_0: entered allmulticast mode [ 949.699197][T13122] bridge_slave_0: entered promiscuous mode [ 949.773258][ T5632] Bluetooth: hci2: command tx timeout [ 949.799365][T13122] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.799611][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.799877][T13122] bridge_slave_1: entered allmulticast mode [ 949.802477][T13122] bridge_slave_1: entered promiscuous mode [ 950.042448][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.130704][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.466278][T13122] team0: Port device team_slave_0 added [ 950.733967][T13122] team0: Port device team_slave_1 added [ 950.914033][T12432] veth0_macvtap: entered promiscuous mode [ 951.060276][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.060296][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.060328][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.146510][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.146527][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.146555][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.306291][T12432] veth1_macvtap: entered promiscuous mode [ 951.714349][T13122] hsr_slave_0: entered promiscuous mode [ 951.720847][T13122] hsr_slave_1: entered promiscuous mode [ 951.732387][T13122] debugfs: 'hsr0' already exists in 'hsr' [ 951.732481][T13122] Cannot create hsr debugfs directory [ 951.853296][ T5632] Bluetooth: hci2: command tx timeout [ 952.035313][T12432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.547054][ T5619] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 952.631867][ T6638] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.874281][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 952.998963][T12432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.234694][T10697] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 953.277311][ T6638] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.399477][T10697] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 953.399509][T10697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.399530][T10697] usb 3-1: config 0 has no interface number 0 [ 953.399578][T10697] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 953.399603][T10697] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.414062][T10697] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 953.414143][T10697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.414175][T10697] usb 3-1: Product: syz [ 953.414207][T10697] usb 3-1: Manufacturer: syz [ 953.414251][T10697] usb 3-1: SerialNumber: syz [ 953.492432][T10697] usb 3-1: config 0 descriptor?? [ 953.515154][T10697] cyberjack 3-1:0.69: required endpoints missing [ 953.691691][ T1043] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.718945][ T824] usb 3-1: USB disconnect, device number 46 [ 953.784490][ T1043] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.857946][ T1043] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.117196][ T6638] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.171816][ T1043] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.733392][ T8297] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 954.781177][ T6638] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.883542][ T8297] usb 3-1: device descriptor read/64, error -71 [ 955.133595][ T8297] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 955.303375][ T8297] usb 3-1: device descriptor read/64, error -71 [ 955.417248][ T8297] usb usb3-port1: attempt power cycle [ 955.662334][T13313] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.662661][T13313] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.663901][T13313] bridge_slave_0: entered allmulticast mode [ 955.746466][T13313] bridge_slave_0: entered promiscuous mode [ 955.813365][ T8297] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 955.839140][ T8297] usb 3-1: device descriptor read/8, error -71 [ 956.093421][ T8297] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 956.115234][ T8297] usb 3-1: device descriptor read/8, error -71 [ 956.119369][T13313] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.122219][T13313] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.123014][T13313] bridge_slave_1: entered allmulticast mode [ 956.149674][T13313] bridge_slave_1: entered promiscuous mode [ 956.228851][ T8297] usb usb3-port1: unable to enumerate USB device [ 956.988303][T13313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.988755][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.988774][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.041812][T13313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.182586][T13313] team0: Port device team_slave_0 added [ 959.253691][T13313] team0: Port device team_slave_1 added [ 959.326276][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 959.502528][ T3367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.502550][ T3367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.509462][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.509495][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.509544][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 959.509568][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.550882][ T10] usb 3-1: config 0 descriptor?? [ 959.820411][ T6638] bridge_slave_1: left allmulticast mode [ 959.820451][ T6638] bridge_slave_1: left promiscuous mode [ 959.820953][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.032916][ T6638] bridge_slave_0: left allmulticast mode [ 960.032958][ T6638] bridge_slave_0: left promiscuous mode [ 960.045029][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.090442][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 960.090483][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 960.090512][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 960.090541][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 960.090568][ T10] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 960.165367][ T10] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 960.491847][ T10] playstation 0003:054C:0DF2.000A: Invalid byte count transferred, expected 64 got 0 [ 960.491879][ T10] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense firmware info: -22 [ 960.491933][ T10] playstation 0003:054C:0DF2.000A: Failed to get firmware info from DualSense [ 960.491951][ T10] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 960.540196][ T10] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 960.709594][ T10] usb 3-1: USB disconnect, device number 51 [ 961.425725][ T6638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.537309][ T6638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.580795][ T6638] bond0 (unregistering): Released all slaves [ 961.637163][T13313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.637181][T13313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.637214][T13313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.734386][T13313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.734406][T13313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.734439][T13313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.843309][T10684] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 962.020137][T10684] usb 3-1: no configurations [ 962.020159][T10684] usb 3-1: can't read configurations, error -22 [ 962.198620][T13313] hsr_slave_0: entered promiscuous mode [ 962.226370][T10684] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 962.308361][T13313] hsr_slave_1: entered promiscuous mode [ 962.310488][T13313] debugfs: 'hsr0' already exists in 'hsr' [ 962.310517][T13313] Cannot create hsr debugfs directory [ 962.374139][T10684] usb 3-1: no configurations [ 962.374161][T10684] usb 3-1: can't read configurations, error -22 [ 962.374767][T10684] usb usb3-port1: attempt power cycle [ 962.743267][T10684] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 962.767313][T10684] usb 3-1: no configurations [ 962.767335][T10684] usb 3-1: can't read configurations, error -22 [ 962.904814][T10684] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 964.586087][T10684] usb 3-1: no configurations [ 964.586117][T10684] usb 3-1: can't read configurations, error -22 [ 964.636699][T10684] usb usb3-port1: unable to enumerate USB device [ 966.033363][ T5350] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 966.248867][ T5350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.248904][ T5350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.248946][ T5350] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 966.248972][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.277762][ T5350] usb 3-1: config 0 descriptor?? [ 966.739619][ T5350] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 966.739656][ T5350] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 966.739684][ T5350] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 966.739710][ T5350] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 966.739737][ T5350] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 966.817112][ T5350] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 967.122874][ T5350] playstation 0003:054C:0DF2.000B: Invalid byte count transferred, expected 64 got 32 [ 967.122906][ T5350] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -22 [ 967.122960][ T5350] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense [ 967.122977][ T5350] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 967.207971][ T6638] hsr_slave_0: left promiscuous mode [ 967.304488][ T6638] hsr_slave_1: left promiscuous mode [ 967.305715][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.305742][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.308122][ T5350] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 967.373710][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.373741][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.476270][ T5350] usb 3-1: USB disconnect, device number 56 [ 969.248661][ T6638] veth1_macvtap: left promiscuous mode [ 969.248770][ T6638] veth0_macvtap: left promiscuous mode [ 969.249198][ T6638] veth1_vlan: left promiscuous mode [ 969.250995][ T6638] veth0_vlan: left promiscuous mode [ 970.205656][ T5350] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 970.463278][ T5350] usb 3-1: Using ep0 maxpacket: 16 [ 970.465678][ T5350] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 970.465715][ T5350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 970.470117][ T5350] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 970.470200][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.470256][ T5350] usb 3-1: Product: syz [ 970.470299][ T5350] usb 3-1: Manufacturer: syz [ 970.470343][ T5350] usb 3-1: SerialNumber: syz [ 970.568963][ T5350] usb 3-1: config 0 descriptor?? [ 970.595449][ T5350] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 970.595482][ T5350] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 971.182907][ T5350] em28xx 3-1:0.0: unknown em28xx chip ID (232) [ 971.385247][ T5350] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 971.401632][ T6638] team0 (unregistering): Port device team_slave_1 removed [ 971.477942][ T6638] team0 (unregistering): Port device team_slave_0 removed [ 971.787397][ T5350] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 971.787422][ T5350] em28xx 3-1:0.0: No AC97 audio processor [ 971.862721][ T5350] usb 3-1: USB disconnect, device number 57 [ 971.891653][ T5350] em28xx 3-1:0.0: Disconnecting em28xx [ 971.896735][ T5350] em28xx 3-1:0.0: Freeing device [ 972.079731][T13122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 972.120575][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.187407][T13122] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.219049][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.475508][T13122] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.561789][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.614464][T13122] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 972.686936][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 972.705730][T13122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.882565][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.882596][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 972.882636][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 972.882663][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.947169][ T9] usb 3-1: config 0 descriptor?? [ 975.633211][T11254] usb 3-1: USB disconnect, device number 58 [ 976.426070][T13928] syz.2.2218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 978.040820][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.182463][T13122] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.519911][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.520106][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.612929][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.622163][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.461058][T13967] loop7: detected capacity change from 0 to 2048 [ 979.501910][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 979.506222][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 979.508092][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 979.546599][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 979.548730][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 979.549675][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.617986][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.622359][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.625789][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.628133][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.630461][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.637326][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.638218][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.643907][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.646639][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647613][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647669][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647698][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647726][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647754][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647782][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.647811][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.650474][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 980.979168][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.017047][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.084249][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.084549][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.568841][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.569121][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.569314][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.602309][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.602856][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.619217][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.622288][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.622592][T13967] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 981.622612][T13967] UDF-fs: Scanning with blocksize 512 failed [ 981.669386][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.669829][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.670369][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.670914][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.671141][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.671329][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.671523][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.672139][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.738916][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.752682][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.752918][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.782357][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.791483][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.791670][T13967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 981.821666][ T44] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 981.833039][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 981.945614][T13967] input: syz1 as /devices/virtual/input/input59 [ 982.272714][T13313] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 982.337244][T13313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.340884][T13313] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 982.495822][T13313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.499267][T13313] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 982.571125][T13313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.628267][T13313] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 983.655302][T13313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 984.058751][T14041] loop2: detected capacity change from 0 to 2048 [ 984.140366][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.158467][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.174040][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.229178][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.236884][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.262882][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.279759][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.279807][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.279835][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.279862][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.279888][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.279915][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.323330][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.400073][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.414958][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428636][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428696][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428726][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428754][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428781][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428809][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.428836][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.451693][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.452616][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.458021][ T188] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.481486][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.481554][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.485948][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.488100][ T188] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.490938][ T188] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.501612][ T188] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.505013][T14041] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 984.511229][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.511725][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.511766][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.511794][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.511821][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.519693][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.522720][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.530259][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 984.533700][T14041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 984.534058][ T165] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 984.542689][ T165] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 985.374296][ T188] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 985.401163][T13313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.423577][ T165] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 985.466454][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 985.673537][T13313] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.737772][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.738770][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 985.739426][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 985.739701][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 985.741875][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.783211][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 985.783396][ T57] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 985.791455][ T158] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 985.846420][ T5619] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 986.070669][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.070851][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.085508][T10684] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 986.317134][T10684] usb 8-1: unable to get BOS descriptor or descriptor too short [ 986.320118][T10684] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 986.320154][T10684] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 986.320180][T10684] usb 8-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 986.320209][T10684] usb 8-1: config 1 interface 0 has no altsetting 0 [ 986.461297][T10684] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 986.461331][T10684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.461354][T10684] usb 8-1: Product: syz [ 986.461372][T10684] usb 8-1: Manufacturer: syz [ 986.461388][T10684] usb 8-1: SerialNumber: syz [ 986.498171][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.531801][T14060] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 986.532004][T14060] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 986.800091][T10684] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 986.885198][T10684] usb 8-1: USB disconnect, device number 2 [ 987.753384][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 987.913245][ T10] usb 8-1: device descriptor read/64, error -71 [ 988.025457][T13122] veth0_vlan: entered promiscuous mode [ 988.074288][T13122] veth1_vlan: entered promiscuous mode [ 988.153279][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 988.219661][T13122] veth0_macvtap: entered promiscuous mode [ 988.261552][T13122] veth1_macvtap: entered promiscuous mode [ 988.288560][ T10] usb 8-1: device descriptor read/64, error -71 [ 988.394173][ T10] usb usb8-port1: attempt power cycle [ 988.448899][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.645279][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.724398][ T6638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.724457][ T6638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.724499][ T6638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.724538][ T6638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.744442][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 988.779826][ T10] usb 8-1: device descriptor read/8, error -71 [ 988.913307][T10684] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 988.918468][T13313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.024314][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 989.055668][ T10] usb 8-1: device descriptor read/8, error -71 [ 989.114351][T10684] usb 3-1: Using ep0 maxpacket: 32 [ 989.118347][T10684] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 989.118377][T10684] usb 3-1: config 0 has no interface number 0 [ 989.118425][T10684] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 989.118456][T10684] usb 3-1: config 0 interface 85 has no altsetting 0 [ 989.124553][T10684] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 989.124583][T10684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.124607][T10684] usb 3-1: Product: syz [ 989.124624][T10684] usb 3-1: Manufacturer: syz [ 989.124642][T10684] usb 3-1: SerialNumber: syz [ 989.195102][ T10] usb usb8-port1: unable to enumerate USB device [ 989.221326][T10684] usb 3-1: config 0 descriptor?? [ 989.751853][T14142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.757394][T14142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.761657][T10684] appletouch 3-1:0.85: Geyser mode initialized. [ 990.029108][T10684] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input60 [ 990.277063][ T10] usb 3-1: USB disconnect, device number 59 [ 990.551141][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.551165][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.827791][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 991.131537][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.131561][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.431475][T13313] veth0_vlan: entered promiscuous mode [ 991.538118][T13313] veth1_vlan: entered promiscuous mode [ 991.661776][T13313] veth0_macvtap: entered promiscuous mode [ 991.751470][T13313] veth1_macvtap: entered promiscuous mode [ 991.793461][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 991.899340][T13313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.953744][T13313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.970702][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 991.979894][ T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 991.979933][ T9] usb 8-1: config 0 has no interface number 0 [ 991.979989][ T9] usb 8-1: config 0 interface 184 has no altsetting 0 [ 992.009823][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 992.009856][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.009877][ T9] usb 8-1: Product: syz [ 992.009892][ T9] usb 8-1: Manufacturer: syz [ 992.009906][ T9] usb 8-1: SerialNumber: syz [ 992.072243][ T9] usb 8-1: config 0 descriptor?? [ 992.205140][ T6638] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.253728][ T6638] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.270209][ T6638] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.274346][ T6638] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.900335][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 992.900371][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 993.089661][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 993.089694][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 993.089715][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 993.089735][ T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 993.090047][ T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 993.119109][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.119655][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.202537][ T9] usb 8-1: USB disconnect, device number 7 [ 994.639333][ T5350] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 995.115873][ T5350] usb 8-1: Using ep0 maxpacket: 32 [ 995.118445][ T5350] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 995.118467][ T5350] usb 8-1: config 0 has no interface number 0 [ 995.118501][ T5350] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 995.118521][ T5350] usb 8-1: config 0 interface 85 has no altsetting 0 [ 995.120821][ T5350] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 995.120843][ T5350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.120859][ T5350] usb 8-1: Product: syz [ 995.120870][ T5350] usb 8-1: Manufacturer: syz [ 995.120881][ T5350] usb 8-1: SerialNumber: syz [ 995.216443][ T5350] usb 8-1: config 0 descriptor?? [ 995.697470][T14225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.711036][T14225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.721053][ T5350] appletouch 8-1:0.85: Geyser mode initialized. [ 995.760536][ T5350] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input61 [ 995.973293][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.973317][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.553870][ T5350] usb 8-1: USB disconnect, device number 8 [ 996.977571][ T5350] appletouch 8-1:0.85: input: appletouch disconnected [ 997.003503][ T5756] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 997.100066][ T3367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.100083][ T3367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.236233][ T5756] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.236256][ T5756] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 997.266515][ T5756] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 997.266540][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.266555][ T5756] usb 6-1: Product: syz [ 997.266566][ T5756] usb 6-1: Manufacturer: syz [ 997.266578][ T5756] usb 6-1: SerialNumber: syz [ 997.320218][ T5756] usb 6-1: config 0 descriptor?? [ 999.241470][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 999.300713][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 999.331964][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 999.359242][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 999.359934][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 999.553231][T11254] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 999.733233][T11254] usb 3-1: Using ep0 maxpacket: 32 [ 999.736103][T11254] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 999.736130][T11254] usb 3-1: config 0 has no interface number 0 [ 999.736181][T11254] usb 3-1: config 0 interface 184 has no altsetting 0 [ 999.738598][T11254] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 999.738629][T11254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.738652][T11254] usb 3-1: Product: syz [ 999.738668][T11254] usb 3-1: Manufacturer: syz [ 999.738684][T11254] usb 3-1: SerialNumber: syz [ 999.817123][T11254] usb 3-1: config 0 descriptor?? [ 1000.079169][ T1247] usb 6-1: USB disconnect, device number 2 [ 1000.567801][T11254] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1000.567834][T11254] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1001.174966][T11254] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1001.175001][T11254] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1001.175086][T11254] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1001.175413][T11254] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1001.302407][T11254] usb 3-1: USB disconnect, device number 60 [ 1002.788863][ T5632] Bluetooth: hci3: command tx timeout [ 1003.753387][ T5350] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1003.948014][ T5350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.948044][ T5350] usb 3-1: config 0 has no interfaces? [ 1003.979903][ T5350] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1003.979928][ T5350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.979943][ T5350] usb 3-1: Product: syz [ 1003.979955][ T5350] usb 3-1: Manufacturer: syz [ 1003.979966][ T5350] usb 3-1: SerialNumber: syz [ 1004.028987][ T5350] usb 3-1: config 0 descriptor?? [ 1004.188238][T14307] loop5: detected capacity change from 0 to 1024 [ 1004.277797][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.298611][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.374187][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.380696][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.381642][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.382412][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.384625][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.396032][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.428992][ T188] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.438318][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1004.538073][T12188] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1004.734143][ T3413] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.896070][ T5632] Bluetooth: hci3: command tx timeout [ 1005.693392][T13573] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1005.852855][ T3413] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.896082][T13573] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.896117][T13573] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.896168][T13573] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1005.896186][T13573] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.900699][T13573] usb 9-1: config 0 descriptor?? [ 1006.341710][T13573] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1006.341750][T13573] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1006.341780][T13573] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1006.341808][T13573] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1006.341836][T13573] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 1006.658987][ T1247] usb 3-1: USB disconnect, device number 61 [ 1006.670493][T14321] loop7: detected capacity change from 0 to 1024 [ 1006.718062][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.811473][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.841845][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.842686][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.864622][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.870987][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.900196][T13573] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 1006.918199][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.919375][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.957769][T13573] playstation 0003:054C:0DF2.000C: Invalid byte count transferred, expected 64 got 60 [ 1006.957791][T13573] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense firmware info: -22 [ 1006.957826][T13573] playstation 0003:054C:0DF2.000C: Failed to get firmware info from DualSense [ 1006.957837][T13573] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 1006.959913][T13573] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 1006.963270][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1006.973500][ T5632] Bluetooth: hci3: command tx timeout [ 1007.024957][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1007.026908][ T165] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1008.731504][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1008.770102][ T3413] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.056441][ T5632] Bluetooth: hci3: command tx timeout [ 1009.118090][ T5940] usb 9-1: USB disconnect, device number 2 [ 1009.272675][T14328] fido_id[14328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1009.353713][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.354866][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.429618][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.461706][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.461777][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.484535][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.486824][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.491106][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.528583][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.549351][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.579681][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.582565][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.585391][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1009.735349][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.089264][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.092155][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.187026][T14321] hfsplus: failed to load extents file [ 1010.325322][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1010.338956][ T3413] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.544567][T14336] loop7: detected capacity change from 0 to 512 [ 1010.657488][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.660120][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.688797][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.691546][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.692235][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.692800][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.733420][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.769041][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.769724][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.772083][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.803236][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.872466][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.874945][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.878309][T14336] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1010.906165][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.906202][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.906230][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.915421][ T6638] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1010.918796][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.995062][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1010.995572][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1011.149697][T14336] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1011.188829][T14170] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1011.192959][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1011.223254][T14336] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2339: bg 0: block 248: padding at end of block bitmap is not set [ 1011.223283][T14336] loop7: lost filesystem error report for type 5 error -117 [ 1011.294110][ C0] EXT4-fs (loop7): last error at time 1779192864: ext4_validate_block_bitmap:441 [ 1011.344566][ T149] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1011.363432][T14170] usb 9-1: Using ep0 maxpacket: 32 [ 1011.365484][T14170] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1011.383572][T14170] usb 9-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1011.383668][T14170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.383725][T14170] usb 9-1: Product: syz [ 1011.383767][T14170] usb 9-1: Manufacturer: syz [ 1011.383818][T14170] usb 9-1: SerialNumber: syz [ 1011.445281][T14336] __quota_error: 21 callbacks suppressed [ 1011.445299][T14336] Quota error (device loop7): write_blk: dquota write failed [ 1011.445362][T14336] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 1011.445411][T14336] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2339: Failed to acquire dquot type 1 [ 1011.445428][T14336] loop7: lost filesystem error report for type 5 error -28 [ 1011.507890][ T149] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1011.523875][T14170] usb 9-1: config 0 descriptor?? [ 1011.528367][T14339] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1011.565872][T14170] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1011.711945][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1013.420974][ T3367] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1013.473909][T14336] EXT4-fs (loop7): 1 truncate cleaned up [ 1013.482654][T14336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1013.482839][ T3367] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1013.667208][ T6638] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1013.667258][ T6638] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1013.693287][T12432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1013.755280][ T3367] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1013.776336][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1014.206706][ T5350] usb 9-1: USB disconnect, device number 3 [ 1016.817876][ T1247] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1017.052180][ T1247] usb 6-1: config 0 has no interfaces? [ 1017.104379][T13573] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1017.143959][ T1247] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1017.143995][ T1247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.144017][ T1247] usb 6-1: Product: syz [ 1017.144033][ T1247] usb 6-1: Manufacturer: syz [ 1017.144059][ T1247] usb 6-1: SerialNumber: syz [ 1017.255768][ T1247] usb 6-1: config 0 descriptor?? [ 1017.268047][T13573] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.268077][T13573] usb 8-1: config 0 has no interfaces? [ 1017.272928][T13573] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1017.272961][T13573] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.272984][T13573] usb 8-1: Product: syz [ 1017.273001][T13573] usb 8-1: Manufacturer: syz [ 1017.273017][T13573] usb 8-1: SerialNumber: syz [ 1017.370622][T13573] usb 8-1: config 0 descriptor?? [ 1017.500356][T13573] usb 6-1: USB disconnect, device number 3 [ 1018.249289][T14380] loop8: detected capacity change from 0 to 512 [ 1018.384698][T14270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.386639][T14270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.386973][T14270] bridge_slave_0: entered allmulticast mode [ 1018.403746][ T3367] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.406895][T14270] bridge_slave_0: entered promiscuous mode [ 1018.407988][T14380] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1018.408041][T14380] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1018.408084][T14380] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1018.475236][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.480892][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.481049][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.482792][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.521391][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.522201][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.522531][ T12] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1018.545952][ T1043] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.578104][ T1043] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.580808][ T3367] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.598240][ T188] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.605075][ T149] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1018.758549][ T5350] usb 8-1: USB disconnect, device number 9 [ 1018.789305][ T3413] bridge_slave_1: left allmulticast mode [ 1018.789344][ T3413] bridge_slave_1: left promiscuous mode [ 1018.789631][ T3413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.817780][T14380] EXT4-fs (loop8): 1 truncate cleaned up [ 1018.874272][T14380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.166342][ T158] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1019.210462][ T12] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1019.212267][ T3413] bridge_slave_0: left allmulticast mode [ 1019.212300][ T3413] bridge_slave_0: left promiscuous mode [ 1019.212548][ T3413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.599614][ T149] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1019.601048][ T149] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1019.601087][ T149] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1019.601112][ T149] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1019.601145][ T149] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1019.616593][T13313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.685673][ T158] lo_rw_aio(loop8) starting write with raw_refcnt=0x0, refcnt=1 [ 1019.758593][T13313] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1019.763218][T13573] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1019.941879][T13573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.941906][T13573] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.941936][T13573] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1019.941954][T13573] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.993376][ T5756] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1020.037442][T13573] usb 3-1: config 0 descriptor?? [ 1020.200959][ T5756] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1020.200985][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.201000][ T5756] usb 6-1: Product: syz [ 1020.201454][ T5756] usb 6-1: Manufacturer: syz [ 1020.201471][ T5756] usb 6-1: SerialNumber: syz [ 1020.262371][ T5756] usb 6-1: config 0 descriptor?? [ 1020.282782][ T5756] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1020.475043][T14401] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2355'. [ 1020.533413][T13573] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 1020.533456][T13573] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 1020.533486][T13573] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 1020.533517][T13573] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 1020.533600][T13573] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 1020.542817][ T5756] gspca_sunplus: reg_r err -32 [ 1020.612482][T13573] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 1020.867770][T13573] playstation 0003:054C:0DF2.000D: Invalid byte count transferred, expected 64 got 60 [ 1020.867803][T13573] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense firmware info: -22 [ 1020.867900][T13573] playstation 0003:054C:0DF2.000D: Failed to get firmware info from DualSense [ 1020.867917][T13573] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 1020.966980][T13573] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 1022.280256][T10684] usb 3-1: USB disconnect, device number 62 [ 1022.868782][T10684] usb 6-1: USB disconnect, device number 4 [ 1023.364867][ T3413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.458645][ T3413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.500388][ T3413] bond0 (unregistering): Released all slaves [ 1023.558053][T14270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.558383][T14270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.561916][T14270] bridge_slave_1: entered allmulticast mode [ 1023.600622][T14270] bridge_slave_1: entered promiscuous mode [ 1024.007471][T14270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.069777][T14270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.493253][T10684] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1024.645875][T10684] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.645906][T10684] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1024.649041][T10684] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1024.649072][T10684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.649094][T10684] usb 8-1: Product: syz [ 1024.649111][T10684] usb 8-1: Manufacturer: syz [ 1024.649127][T10684] usb 8-1: SerialNumber: syz [ 1024.735605][T10684] usb 8-1: config 0 descriptor?? [ 1025.103207][T10684] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1025.201763][T14270] team0: Port device team_slave_0 added [ 1025.238002][T14270] team0: Port device team_slave_1 added [ 1025.318674][T10684] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1025.318715][T10684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.318731][T10684] usb 3-1: Product: syz [ 1025.318742][T10684] usb 3-1: Manufacturer: syz [ 1025.318753][T10684] usb 3-1: SerialNumber: syz [ 1025.455224][T10684] usb 3-1: config 0 descriptor?? [ 1025.478618][T10684] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1025.671087][T10684] gspca_sunplus: reg_r err -32 [ 1026.295230][T14270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.295245][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.295268][T14270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.298308][T14270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.298321][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.298342][T14270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.544780][ T5279] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1026.674106][T14270] hsr_slave_0: entered promiscuous mode [ 1026.678097][T14270] hsr_slave_1: entered promiscuous mode [ 1026.681112][T14270] debugfs: 'hsr0' already exists in 'hsr' [ 1026.681132][T14270] Cannot create hsr debugfs directory [ 1026.968518][ T3413] hsr_slave_0: left promiscuous mode [ 1027.003292][ T3413] hsr_slave_1: left promiscuous mode [ 1027.005765][ T3413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.005788][ T3413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.072323][ T3413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.072347][ T3413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.227778][ T3413] veth1_macvtap: left promiscuous mode [ 1027.227853][ T3413] veth0_macvtap: left promiscuous mode [ 1027.228068][ T3413] veth1_vlan: left promiscuous mode [ 1027.287318][ T3413] veth0_vlan: left promiscuous mode [ 1027.332220][T10684] usb 8-1: USB disconnect, device number 10 [ 1027.917285][T10684] usb 3-1: USB disconnect, device number 63 [ 1029.072696][T14487] loop5: detected capacity change from 0 to 2048 [ 1029.185795][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1029.190886][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.900691][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.915022][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.917905][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.918781][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.918901][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.919018][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.919119][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.919218][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.919316][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.919417][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.920099][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.920889][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.921683][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.922479][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.924170][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.924904][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.926143][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1030.927354][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1031.470550][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 1031.702681][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1031.859211][ T3413] team0 (unregistering): Port device team_slave_1 removed [ 1031.919451][ T3413] team0 (unregistering): Port device team_slave_0 removed [ 1032.080493][ T1043] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.166921][ T3419] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.173719][T14487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1032.268456][ T3419] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.287911][ T3419] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.411077][T14496] loop7: detected capacity change from 0 to 512 [ 1032.424958][T14496] EXT4-fs: Ignoring removed i_version option [ 1032.424987][T14496] EXT4-fs: Ignoring removed bh option [ 1032.425988][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.429831][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.430191][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.431415][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.432373][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.432637][ T3419] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.437689][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.440103][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.450824][ T158] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.524428][ T158] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.549866][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.561584][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.561810][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.572482][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.576451][ T3367] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.582094][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.596148][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.602186][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.626180][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.637252][T14496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.647461][ T3367] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.709098][T14496] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.741797][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.769071][ T3367] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.769171][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1032.857713][T11219] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1032.879347][T13122] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1033.062095][T11219] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1033.062162][T11219] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1033.111786][T12432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.281107][T14503] loop2: detected capacity change from 0 to 8 [ 1033.293506][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1033.300747][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1033.341097][ T3419] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1033.907360][ T57] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1033.952935][ T3367] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1034.775659][T14509] loop5: detected capacity change from 0 to 2048 [ 1034.783711][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1034.783953][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1034.784332][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1034.940478][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1034.996255][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.018163][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.044564][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.046272][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.062574][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.062702][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.062775][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.062841][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.062916][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.062989][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.124918][ T6638] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.135276][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.135413][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.135518][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.135651][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.135763][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.135897][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.136018][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.139874][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.140607][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.142188][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.226560][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.229507][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.609125][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.609360][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.609564][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.610888][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.615905][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.616955][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.617295][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.670317][T14517] loop7: detected capacity change from 0 to 2048 [ 1035.701731][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.737052][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.746981][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.751242][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.759747][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.771095][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.776521][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.778352][ T3367] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.786322][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.788761][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.821226][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.893976][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.915637][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.938121][ T188] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.939377][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.967092][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.969552][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.970781][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.985781][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1035.996295][T14517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1035.996670][ T44] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1036.013474][T14509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1036.018950][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.020094][ T44] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.075426][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.113662][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.115709][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.156392][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.156449][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.156479][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.156505][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.156533][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.156930][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.157907][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.157952][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.157980][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.158008][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.158036][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.158063][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.206771][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.206912][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.206985][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.207013][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.207057][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.207150][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.207228][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.233904][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.243305][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.288175][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.351521][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.352571][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.375832][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.384071][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.384210][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.472408][ T5619] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1036.614320][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1036.907062][T13122] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1037.045496][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1037.237755][ T38] audit: type=1800 audit(1779192890.758:34): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2381" name="file1" dev="loop7" ino=1415 res=0 errno=0 [ 1037.542228][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.542405][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.542535][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.542654][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.542801][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.542980][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.550999][ T67] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1037.695526][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1038.224722][ T3413] IPVS: stop unused estimator thread 0... [ 1038.295741][ T5279] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1038.319441][T14546] binder: 14545:14546 ioctl 4018620d 0 returned -22 [ 1042.301134][T14568] Bluetooth: MGMT ver 1.23 [ 1042.628020][T14572] loop7: detected capacity change from 0 to 8 [ 1042.629327][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.632538][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.712226][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1042.906757][T14572] SQUASHFS error: Failed to read block 0x4de: -5 [ 1042.907125][T14572] SQUASHFS error: Failed to read block 0x4de: -5 [ 1042.926846][ T38] audit: type=1800 audit(1779192896.578:35): pid=14572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2399" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1043.241489][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1044.202309][T14591] binder: 14589:14591 ioctl c0306201 0 returned -14 [ 1044.374285][T11254] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 1044.538178][T11254] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1044.538792][T11254] usb 8-1: not running at top speed; connect to a high speed hub [ 1044.540073][T11254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1044.576268][T11254] usb 8-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 1044.576301][T11254] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.576323][T11254] usb 8-1: Product: syz [ 1044.576340][T11254] usb 8-1: Manufacturer: syz [ 1044.576356][T11254] usb 8-1: SerialNumber: syz [ 1044.789109][T14596] loop2: detected capacity change from 0 to 256 [ 1044.817431][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817486][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817515][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817543][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817570][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817596][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817622][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.817649][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.819322][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.821439][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.822198][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.822388][T14596] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1044.822406][T14596] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1044.825789][ T3419] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.827345][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924121][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924194][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924252][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924319][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924370][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924438][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1044.924494][ T12] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.031149][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.032302][ T3367] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.045768][ T3419] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.066415][ T3419] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.069595][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.069643][ T67] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.125707][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.163513][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.172166][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.190092][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.190229][T11254] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.190292][T11254] usb 8-1: MIDIStreaming interface descriptor not found [ 1045.190312][T11254] usb 8-1: too many endpoints [ 1045.198067][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.202547][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.207268][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.216433][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.219299][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.222040][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.224861][T14596] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1045.411492][ T188] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1045.416253][T14596] exFAT-fs (loop2): failed to load alloc-bitmap [ 1045.416273][T14596] exFAT-fs (loop2): failed to recognize exfat type [ 1045.441196][T14370] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1045.507461][T11254] usb 8-1: USB disconnect, device number 11 [ 1050.194552][T14615] syz_tun: entered allmulticast mode [ 1050.195098][T14615] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1050.416568][T14613] udevd[14613]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.288260][T14625] process 'syz.7.2410' launched './file1' with NULL argv: empty string added [ 1052.483205][T13573] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1052.680201][T13573] usb 8-1: Using ep0 maxpacket: 32 [ 1052.683417][T13573] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1052.683446][T13573] usb 8-1: config 0 has no interface number 0 [ 1052.707386][T13573] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1052.707418][T13573] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.707440][T13573] usb 8-1: Product: syz [ 1052.707456][T13573] usb 8-1: Manufacturer: syz [ 1052.707473][T13573] usb 8-1: SerialNumber: syz [ 1052.836652][T13573] usb 8-1: config 0 descriptor?? [ 1053.073268][ T5350] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1053.253214][ T5350] usb 6-1: Using ep0 maxpacket: 16 [ 1053.268470][ T5350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1053.330929][ T5350] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1053.330964][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.330986][ T5350] usb 6-1: Product: syz [ 1053.331002][ T5350] usb 6-1: Manufacturer: syz [ 1053.331018][ T5350] usb 6-1: SerialNumber: syz [ 1053.343540][T13573] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1053.343620][T13573] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1053.401350][ T5350] usb 6-1: config 0 descriptor?? [ 1053.420893][ T5350] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1053.420931][ T5350] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1053.594413][T13573] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1053.607124][T13573] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 1054.166489][ T5350] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1054.512686][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512805][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.669491][ T5350] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1054.669526][ T5350] em28xx 6-1:0.0: board has no eeprom [ 1055.623241][ T5350] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1055.623273][ T5350] em28xx 6-1:0.0: dvb set to bulk mode. [ 1055.640357][T14170] em28xx 6-1:0.0: Binding DVB extension [ 1055.708815][ T5350] usb 6-1: USB disconnect, device number 5 [ 1055.729284][ T5350] em28xx 6-1:0.0: Disconnecting em28xx [ 1055.859818][ T1247] usb 8-1: USB disconnect, device number 12 [ 1056.151488][T14170] em28xx 6-1:0.0: Registering input extension [ 1056.151731][ T5350] em28xx 6-1:0.0: Closing input extension [ 1056.203395][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1056.358490][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.358525][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.358570][ T10] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1056.358588][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.533672][ T10] usb 9-1: config 0 descriptor?? [ 1056.575335][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 1056.720798][T14270] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1057.463516][T14270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1057.521566][T14270] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1057.582308][ T10] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1057.582338][ T10] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1057.582359][ T10] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1057.582378][ T10] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1057.582398][ T10] playstation 0003:054C:0DF2.000E: unknown main item tag 0x0 [ 1057.703980][ T10] playstation 0003:054C:0DF2.000E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 1057.778182][T14270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1057.779422][T14270] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1057.808468][ T10] playstation 0003:054C:0DF2.000E: Invalid byte count transferred, expected 64 got 63 [ 1057.808500][ T10] playstation 0003:054C:0DF2.000E: Failed to retrieve DualSense firmware info: -22 [ 1057.808554][ T10] playstation 0003:054C:0DF2.000E: Failed to get firmware info from DualSense [ 1057.808571][ T10] playstation 0003:054C:0DF2.000E: Failed to create dualsense. [ 1057.867335][T14270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1057.904427][ T5350] em28xx 6-1:0.0: Freeing device [ 1057.932090][T14270] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1057.997063][T13573] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1058.114870][T14270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1058.150346][T13573] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1058.150381][T13573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.150404][T13573] usb 3-1: Product: syz [ 1058.150420][T13573] usb 3-1: Manufacturer: syz [ 1058.150438][T13573] usb 3-1: SerialNumber: syz [ 1058.186890][ T10] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 1058.293298][ T10] usb 9-1: USB disconnect, device number 4 [ 1058.373291][ T5350] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1058.573365][ T5350] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1058.659912][T14690] loop7: detected capacity change from 0 to 1024 [ 1058.668203][ T5350] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1058.668299][ T5350] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.668355][ T5350] usb 6-1: Product: syz [ 1058.668391][ T5350] usb 6-1: Manufacturer: syz [ 1058.668433][ T5350] usb 6-1: SerialNumber: syz [ 1058.732121][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.732935][T13573] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1058.771529][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.784373][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.785325][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.785882][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.787560][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.859217][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.921471][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.930678][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1058.974519][ T5350] usb 6-1: config 0 descriptor?? [ 1059.027513][ T3413] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.053755][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.069674][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.069841][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.069916][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.069988][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.082977][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.124584][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.126318][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.126483][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.126613][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.132034][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.132080][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.132110][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.132146][ T57] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.256150][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.339587][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.360170][ T67] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.362548][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.404300][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.421531][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1059.421772][T13573] usb 3-1: USB disconnect, device number 64 [ 1062.676796][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1063.107390][ T10] usb 6-1: USB disconnect, device number 6 [ 1063.250148][T14690] hfsplus: failed to load root directory [ 1063.268468][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1063.268520][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1063.268549][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1063.538001][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1063.555364][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1063.584893][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1063.586704][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1063.587509][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1063.787689][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1063.992583][T12502] udevd[12502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1064.155591][T14714] loop7: detected capacity change from 0 to 512 [ 1064.156660][T14714] EXT4-fs: Ignoring removed i_version option [ 1064.156686][T14714] EXT4-fs: Ignoring removed bh option [ 1064.164082][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.202480][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.230415][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.239624][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.249749][ T188] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1064.281394][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.313265][ T3419] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1064.316538][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.316605][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.321967][ T6638] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1064.367757][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.383419][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.414372][ T3367] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.460793][T14714] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.461003][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.462258][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.470163][ T6638] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1064.470239][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.475823][T14714] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.522418][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.534731][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.578284][T11219] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1064.585345][ T6638] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1065.082689][ T149] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.343526][ T3419] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.344275][ T3419] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1065.749063][ T188] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.749160][ T188] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.749200][ T188] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.749236][ T188] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.749311][ T188] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.773293][ T5640] Bluetooth: hci5: command tx timeout [ 1065.864919][T12432] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.917863][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1065.936375][ T12] lo_rw_aio(loop7) starting write with raw_refcnt=0x0, refcnt=1 [ 1066.001489][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1066.179171][T14738] loop5: detected capacity change from 0 to 512 [ 1066.219171][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.219365][T14738] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1066.279096][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.285822][ T149] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.285966][ T149] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.289851][ T149] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.407104][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.407484][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.434417][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.441663][T11219] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.441854][T11219] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1066.534872][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.650856][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1066.813272][ T5640] Bluetooth: hci2: command 0x0406 tx timeout [ 1066.926011][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1067.050730][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1067.078574][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1067.173342][T14738] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1067.173477][T14738] EXT4-fs (loop5): 1 truncate cleaned up [ 1067.477577][T14738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.478196][ T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1067.549902][ T149] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1067.853214][ T5632] Bluetooth: hci5: command tx timeout [ 1067.890103][T14755] loop8: detected capacity change from 0 to 1024 [ 1067.925025][T14755] hfsplus: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙' [ 1067.966228][ T6638] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.012207][T11219] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.037353][T11219] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1068.040991][T13122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.115210][ T3413] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.116195][ T6638] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1068.144081][T13122] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1068.297544][ T188] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.298448][ T188] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.298580][ T188] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.301479][ T188] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.302469][ T188] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.304276][ T3413] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.351664][ T3413] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.378040][ T6638] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.380463][ T6638] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1068.474917][ T5636] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1069.938140][ T5632] Bluetooth: hci5: command tx timeout [ 1070.064931][ T5636] usb 3-1: Using ep0 maxpacket: 16 [ 1070.077941][ T5636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1070.080477][ T5636] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1070.080508][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.080530][ T5636] usb 3-1: Product: syz [ 1070.080546][ T5636] usb 3-1: Manufacturer: syz [ 1070.080562][ T5636] usb 3-1: SerialNumber: syz [ 1070.186914][ T5636] usb 3-1: config 0 descriptor?? [ 1070.296981][ T5636] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1070.297016][ T5636] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1070.875880][ T5636] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1071.080144][ T149] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1071.123722][T11219] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1071.137352][T11219] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1071.161782][T11219] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1071.167458][T11219] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1071.238381][T11219] lo_rw_aio(loop8) starting read with raw_refcnt=0x0, refcnt=1 [ 1071.436834][T14769] __loop_clr_fd(loop8) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1071.499087][ T5636] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1071.499123][ T5636] em28xx 3-1:0.0: board has no eeprom [ 1071.825616][ T5636] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1071.825649][ T5636] em28xx 3-1:0.0: dvb set to bulk mode. [ 1071.826075][ T32] em28xx 3-1:0.0: Binding DVB extension [ 1071.843834][ T5756] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1071.927807][ T5636] usb 3-1: USB disconnect, device number 65 [ 1071.940035][ T5636] em28xx 3-1:0.0: Disconnecting em28xx [ 1072.080507][ T32] em28xx 3-1:0.0: Registering input extension [ 1072.080760][ T5636] em28xx 3-1:0.0: Closing input extension [ 1072.094156][ T5632] Bluetooth: hci5: command tx timeout [ 1072.099643][ T5756] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1072.106475][ T5756] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1072.106508][ T5756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.106531][ T5756] usb 9-1: Product: syz [ 1072.106546][ T5756] usb 9-1: Manufacturer: syz [ 1072.106560][ T5756] usb 9-1: SerialNumber: syz [ 1072.145596][ T5756] usb 9-1: config 0 descriptor?? [ 1075.028569][ T32] usb 9-1: USB disconnect, device number 5 [ 1075.033895][ T5636] em28xx 3-1:0.0: Freeing device [ 1076.181492][T14799] loop7: detected capacity change from 0 to 512 [ 1076.205991][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.221639][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.232359][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.268535][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.269401][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.270138][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.270877][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.271608][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.272341][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.302122][T14799] EXT4-fs: Mount option(s) incompatible with ext3 [ 1076.306493][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.317678][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.594824][ T188] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1076.692774][T12530] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1078.824352][T14813] loop7: detected capacity change from 0 to 8 [ 1078.831007][ T149] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1078.859585][ T1043] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1078.919668][ T12] lo_rw_aio(loop7) starting read with raw_refcnt=0x0, refcnt=1 [ 1078.954409][ T5636] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1080.504332][ T5636] usb 6-1: Using ep0 maxpacket: 16 [ 1080.844543][T12432] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1080.879962][ T5636] usb 6-1: device descriptor read/all, error -71 [ 1086.821871][T14706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.822176][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.822813][T14706] bridge_slave_0: entered allmulticast mode [ 1086.841929][T14706] bridge_slave_0: entered promiscuous mode [ 1086.887254][T14706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.887580][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.887922][T14706] bridge_slave_1: entered allmulticast mode [ 1086.937697][T14706] bridge_slave_1: entered promiscuous mode [ 1087.458408][T14706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.881136][T14706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.421100][T14846] loop2: detected capacity change from 0 to 1024 [ 1088.431456][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.458719][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.459248][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.459393][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.459847][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.459957][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.460559][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.460674][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.472743][T14706] team0: Port device team_slave_0 added [ 1088.562358][ T188] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1088.616988][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.649921][T14706] team0: Port device team_slave_1 added [ 1088.658324][ T6638] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.667763][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.684149][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.684946][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.685633][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.686403][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1088.687147][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1089.000453][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1089.009965][T11219] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1089.012998][ T1043] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1089.622945][ T149] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1089.948209][T14858] loop5: detected capacity change from 0 to 8 [ 1089.952486][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1089.958595][ T3419] bridge_slave_1: left allmulticast mode [ 1089.958622][ T3419] bridge_slave_1: left promiscuous mode [ 1089.958859][ T3419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.044971][ T44] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1090.049585][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2458'. [ 1090.050708][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1090.052768][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1090.140130][T14858] SQUASHFS error: Failed to read block 0x4de: -5 [ 1090.140328][T14858] SQUASHFS error: Failed to read block 0x4de: -5 [ 1090.152874][ T38] audit: type=1800 audit(1779192943.818:36): pid=14858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2454" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 1090.655514][T14858] SQUASHFS error: Failed to read block 0x4de: -5 [ 1090.656155][T14858] SQUASHFS error: Failed to read block 0x4de: -5 [ 1090.656300][T14858] SQUASHFS error: Failed to read block 0x4de: -5 [ 1090.656431][T14858] SQUASHFS error: Failed to read block 0x4de: -5 [ 1090.792271][ T188] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1090.818019][T14370] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1090.864557][ T3419] bridge_slave_0: left allmulticast mode [ 1090.864601][ T3419] bridge_slave_0: left promiscuous mode [ 1090.872378][ T3419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.879114][T14865] loop5: detected capacity change from 0 to 1024 [ 1090.887256][ T5619] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1090.917949][ T5636] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1090.938845][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1090.944098][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.026543][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.028862][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.028908][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.028947][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1091.071744][ T149] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.090815][ T6638] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1091.112347][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.112418][ T158] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.123317][ T5636] usb 8-1: Using ep0 maxpacket: 32 [ 1091.125591][ T1043] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1091.135967][ T5636] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1091.135995][ T5636] usb 8-1: config 0 has no interface number 0 [ 1091.161648][ T5636] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1091.161679][ T5636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.161701][ T5636] usb 8-1: Product: syz [ 1091.161716][ T5636] usb 8-1: Manufacturer: syz [ 1091.161732][ T5636] usb 8-1: SerialNumber: syz [ 1091.202082][ T5636] usb 8-1: config 0 descriptor?? [ 1091.226600][ T6638] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.227911][ T6638] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.231736][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.237116][ T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1091.269277][T14865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.217428][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.226115][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.226172][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.226341][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.259521][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.261213][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.288711][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.289728][ T3413] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 1092.294783][T14865] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2460: deleted inode referenced: 12 [ 1092.423240][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1092.431996][T14865] EXT4-fs (loop5): Remounting filesystem read-only [ 1092.766576][T13122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.861870][ T3413] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 1092.884698][T12530] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1092.917758][ T5636] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1092.917789][ T5636] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1094.089839][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2465'. [ 1094.352220][ T5636] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1094.352550][ T5636] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 1094.400754][ T5636] usb 8-1: USB disconnect, device number 13 [ 1094.555033][T14888] loop2: detected capacity change from 0 to 128 [ 1094.577785][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.597454][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.598053][ T44] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.622520][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.623744][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.623787][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.648894][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.658165][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.660400][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.682019][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.692921][ T3413] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1094.770513][ T3413] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1094.805265][T14888] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1094.841705][ T67] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1094.842046][T14888] ext4 filesystem being mounted at /565/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.953347][ T158] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 1095.274122][ T1043] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1095.276753][ T1043] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1095.277429][ T1043] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1095.309334][ T5619] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1095.351878][ T3413] lo_rw_aio(loop2) starting write with raw_refcnt=0x0, refcnt=1 [ 1095.362845][ T5619] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1095.523311][T14170] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1095.603901][ T3419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.660637][T14897] input: syz0 as /devices/virtual/input/input67 [ 1095.660687][T14897] input: failed to attach handler leds to device input67, error: -6 [ 1095.725901][T14170] usb 8-1: Using ep0 maxpacket: 32 [ 1095.729244][ T3419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.730213][T14170] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1095.753663][T14170] usb 8-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1095.753755][T14170] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.753811][T14170] usb 8-1: Product: syz [ 1095.753856][T14170] usb 8-1: Manufacturer: syz [ 1095.753909][T14170] usb 8-1: SerialNumber: syz [ 1095.805130][T14170] usb 8-1: config 0 descriptor?? [ 1095.806293][T14891] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1095.854616][ T3419] bond0 (unregistering): Released all slaves [ 1095.878236][T14170] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1098.169871][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2475'. [ 1098.328673][T14706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.328693][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.328727][T14706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.531396][T14706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.531416][T14706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.531448][T14706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.794280][ T9] usb 8-1: USB disconnect, device number 14 [ 1098.869006][T14170] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1099.027359][T14170] usb 9-1: Using ep0 maxpacket: 32 [ 1099.041596][T14170] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1099.041627][T14170] usb 9-1: config 0 has no interface number 0 [ 1099.075719][T14170] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1099.075753][T14170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.075781][T14170] usb 9-1: Product: syz [ 1099.075798][T14170] usb 9-1: Manufacturer: syz [ 1099.075814][T14170] usb 9-1: SerialNumber: syz [ 1099.285768][T14170] usb 9-1: config 0 descriptor?? [ 1099.698093][ T3419] hsr_slave_0: left promiscuous mode [ 1099.716802][T14170] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1099.716836][T14170] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1099.734206][ T3419] hsr_slave_1: left promiscuous mode [ 1099.754737][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.795145][ T3419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.918472][T14170] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1099.918785][T14170] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 1101.544897][T14941] ================================================================== [ 1101.544920][T14941] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 1101.544954][T14941] Read of size 8 at addr ffff88803f475700 by task syz.7.2482/14941 [ 1101.544975][T14941] [ 1101.545003][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.7.2482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1101.545038][T14941] Tainted: [L]=SOFTLOCKUP [ 1101.545047][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.545071][T14941] Call Trace: [ 1101.545081][T14941] [ 1101.545096][T14941] dump_stack_lvl+0xe8/0x150 [ 1101.545129][T14941] print_address_description+0x55/0x1e0 [ 1101.545159][T14941] ? reverse_path_check_proc+0x5b/0x240 [ 1101.545185][T14941] print_report+0x58/0x70 [ 1101.545211][T14941] kasan_report+0x117/0x150 [ 1101.545236][T14941] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1101.545262][T14941] ? reverse_path_check_proc+0x5b/0x240 [ 1101.545290][T14941] ? ep_insert+0xbbb/0x1820 [ 1101.545311][T14941] reverse_path_check_proc+0x5b/0x240 [ 1101.545340][T14941] ? ep_insert+0xbbb/0x1820 [ 1101.545361][T14941] ep_insert+0xc6c/0x1820 [ 1101.545400][T14941] ? __pfx_ep_insert+0x10/0x10 [ 1101.545426][T14941] ? lockdep_hardirqs_on+0x7a/0x110 [ 1101.545450][T14941] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1101.545473][T14941] ? mutex_lock_nested+0x152/0x1d0 [ 1101.545503][T14941] ? do_epoll_ctl_file+0xc69/0xed0 [ 1101.545539][T14941] do_epoll_ctl_file+0x8bb/0xed0 [ 1101.545577][T14941] ? do_epoll_ctl_file+0xac3/0xed0 [ 1101.545615][T14941] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1101.545652][T14941] ? __fget_files+0x3a6/0x420 [ 1101.545684][T14941] ? __fget_files+0x2a/0x42[ 1101.545684][T14941] ? __fget_files+0x2a/0x420 [ 1101.545721][T14941] __se_sys_epoll_ctl+0x14e/0x210 [ 1101.545746][T14941] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1101.545779][T14941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.545805][T14941] do_syscall_64+0x15f/0xf80 [ 1101.545829][T14941] ? trace_irq_disable+0x3b/0x140 [ 1101.545852][T14941] ? clear_bhb_loop+0x40/0x90 [ 1101.545879][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.545903][T14941] RIP: 0033:0x7fa7837fce59 [ 1101.545931][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.545952][T14941] RSP: 002b:00007fa7811ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1101.545979][T14941] RAX: ffffffffffffffda RBX: 00007fa783a76360 RCX: 00007fa7837fce59 [ 1101.545998][T14941] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1101.546013][T14941] RBP: 00007fa783892d6f R08: 0000000000000000 R09: 0000000000000000 [ 1101.546029][T14941] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.546046][T14941] R13: 00007fa783a763f8 R14: 00007fa783a76360 R15: 00007ffd9809c008 [ 1101.546074][T14941] [ 1101.546083][T14941] [ 1101.546089][T14941] Allocated by task 14938: [ 1101.546107][T14941] kasan_save_track+0x3e/0x80 [ 1101.546142][T14941] __kasan_slab_alloc+0x6c/0x80 [ 1101.546162][T14941] kmem_cache_alloc_noprof+0x33b/0x680 [ 1101.546200][T14941] ep_insert+0x512/0x1820 [ 1101.546218][T14941] do_epoll_ctl_file+0x8bb/0xed0 [ 1101.546250][T14941] __se_sys_epoll_ctl+0x14e/0x210 [ 1101.546270][T14941] do_syscall_64+0x15f/0xf80 [ 1101.546291][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.546312][T14941] [ 1101.546318][T14941] Freed by task 14938: [ 1101.546329][T14941] kasan_save_track+0x3e/0x80 [ 1101.546360][T14941] kasan_save_free_info+0x46/0x50 [ 1101.546396][T14941] __kasan_slab_free+0x5c/0x80 [ 1101.546415][T14941] kmem_cache_free+0x187/0x6c0 [ 1101.546437][T14941] eventpoll_release_file+0xc2/0x240 [ 1101.546468][T14941] __fput+0x83c/0xa70 [ 1101.546496][T14941] task_work_run+0x1d9/0x270 [ 1101.546521][T14941] get_signal+0x11eb/0x1330 [ 1101.546550][T14941] arch_do_signal_or_restart+0xbc/0x840 [ 1101.546574][T14941] exit_to_user_mode_loop+0x8c/0x4d0 [ 1101.546596][T14941] do_syscall_64+0x33e/0xf80 [ 1101.546617][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.546638][T14941] [ 1101.546645][T14941] The buggy address belongs to the object at ffff88803f475700 [ 1101.546645][T14941] which belongs to the cache ep_head of size 16 [ 1101.546665][T14941] The buggy address is located 0 bytes inside of [ 1101.546665][T14941] freed 16-byte region [ffff88803f475700, ffff88803f475710) [ 1101.546688][T14941] [ 1101.546695][T14941] The buggy address belongs to the physical page: [ 1101.546718][T14941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f475fc0 pfn:0x3f475 [ 1101.546745][T14941] memcg:ffff888034f58801 [ 1101.546757][T14941] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1101.546782][T14941] page_type: f5(slab) [ 1101.546803][T14941] raw: 0080000000000200 ffff888140419000 ffffea0000c82e50 ffff888020e97f88 [ 1101.546826][T14941] raw: ffff88803f475fc0 000000080080003b 00000000f5000000 ffff888034f58801 [ 1101.546839][T14941] page dumped because: kasan: bad access detected [ 1101.546855][T14941] page_owner tracks the page as allocated [ 1101.546865][T14941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4989, tgid 4989 (udevd), ts 49361423483, free_ts 0 [ 1101.546903][T14941] post_alloc_hook+0x1f9/0x250 [ 1101.546937][T14941] get_page_from_freelist+0x27d6/0x2850 [ 1101.546962][T14941] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1101.546987][T14941] allocate_slab+0x74/0x5e0 [ 1101.547013][T14941] refill_objects+0x33c/0x3d0 [ 1101.547038][T14941] __pcs_replace_empty_main+0x373/0x720 [ 1101.547068][T14941] kmem_cache_alloc_noprof+0x433/0x680 [ 1101.547100][T14941] ep_insert+0x512/0x1820 [ 1101.547118][T14941] do_epoll_ctl_file+0x8bb/0xed0 [ 1101.547151][T14941] __se_sys_epoll_ctl+0x14e/0x210 [ 1101.547171][T14941] do_syscall_64+0x15f/0xf80 [ 1101.547192][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.547214][T14941] page_owner free stack trace missing [ 1101.547223][T14941] [ 1101.547229][T14941] Memory state around the buggy address: [ 1101.547242][T14941] ffff88803f475600: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 1101.547257][T14941] ffff88803f475680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1101.547273][T14941] >ffff88803f475700: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1101.547285][T14941] ^ [ 1101.547296][T14941] ffff88803f475780: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1101.547311][T14941] ffff88803f475800: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1101.547324][T14941] ================================================================== [ 1101.751343][T14941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1101.751435][T14941] CPU: 1 UID: 0 PID: 14941 Comm: syz.7.2482 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1101.751470][T14941] Tainted: [L]=SOFTLOCKUP [ 1101.751479][T14941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.751494][T14941] Call Trace: [ 1101.751503][T14941] [ 1101.751513][T14941] vpanic+0x56c/0xa60 [ 1101.751550][T14941] ? __pfx_vpanic+0x10/0x10 [ 1101.751583][T14941] panic+0xc5/0xd0 [ 1101.751609][T14941] ? __pfx_panic+0x10/0x10 [ 1101.751641][T14941] ? preempt_schedule_thunk+0x16/0x40 [ 1101.751666][T14941] ? preempt_schedule_thunk+0x16/0x40 [ 1101.751689][T14941] ? reverse_path_check_proc+0x5b/0x240 [ 1101.751714][T14941] check_panic_on_warn+0x89/0xb0 [ 1101.751742][T14941] ? reverse_path_check_proc+0x5b/0x240 [ 1101.751766][T14941] end_report+0x73/0x170 [ 1101.751791][T14941] ? reverse_path_check_proc+0x5b/0x240 [ 1101.751815][T14941] kasan_report+0x128/0x150 [ 1101.751835][T14941] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1101.751858][T14941] ? reverse_path_check_proc+0x5b/0x240 [ 1101.751884][T14941] ? ep_insert+0xbbb/0x1820 [ 1101.751903][T14941] reverse_path_check_proc+0x5b/0x240 [ 1101.751927][T14941] ? ep_insert+0xbbb/0x1820 [ 1101.751945][T14941] ep_insert+0xc6c/0x1820 [ 1101.751970][T14941] ? __pfx_ep_insert+0x10/0x10 [ 1101.751993][T14941] ? lockdep_hardirqs_on+0x7a/0x110 [ 1101.752013][T14941] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1101.752034][T14941] ? mutex_lock_nested+0x152/0x1d0 [ 1101.752059][T14941] ? do_epoll_ctl_file+0xc69/0xed0 [ 1101.752091][T14941] do_epoll_ctl_file+0x8bb/0xed0 [ 1101.752123][T14941] ? do_epoll_ctl_file+0xac3/0xed0 [ 1101.752159][T14941] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1101.752196][T14941] ? __fget_files+0x3a6/0x420 [ 1101.752227][T14941] ? __fget_files+0x2a/0x420 [ 1101.752263][T14941] __se_sys_epoll_ctl+0x14e/0x210 [ 1101.752286][T14941] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1101.752313][T14941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.752337][T14941] do_syscall_64+0x15f/0xf80 [ 1101.752372][T14941] ? trace_irq_disable+0x3b/0x140 [ 1101.752395][T14941] ? clear_bhb_loop+0x40/0x90 [ 1101.752422][T14941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.752445][T14941] RIP: 0033:0x7fa7837fce59 [ 1101.752466][T14941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.752485][T14941] RSP: 002b:00007fa7811ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1101.752510][T14941] RAX: ffffffffffffffda RBX: 00007fa783a76360 RCX: 00007fa7837fce59 [ 1101.752526][T14941] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 1101.752540][T14941] RBP: 00007fa783892d6f R08: 0000000000000000 R09: 0000000000000000 [ 1101.752554][T14941] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.752568][T14941] R13: 00007fa783a763f8 R14: 00007fa783a76360 R15: 00007ffd9809c008 [ 1101.752593][T14941] [ 1101.753205][T14941] Kernel Offset: disabled