last executing test programs: 7.308199794s ago: executing program 0 (id=1130): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d"]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 7.016092205s ago: executing program 0 (id=1133): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x80, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80186e83, 0xfffffffffffffffe) 6.705492937s ago: executing program 0 (id=1135): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2010042, &(0x7f00000001c0)=ANY=[@ANYBLOB="63727566742c6d61703c61636f726e2c73686f776173736f632c757466382c636865636b3d72656c617865642c6e6f726f636b2c6e6f726f636b2c6f76657272696465726f636b7065726d2c636865636b3d73747269637464c3a5ce636b3d7374726963742c6769643d", @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c756e686964652c686964652c73657373696f6e3d3078303030303030303030303030303034392c6f76657272696465726f636b7065726d2c6e6f726f636b2c636865636b3d72656c617865642c6f626a5f757365723d6769642c6d6561737572652c646f6e745f686173682c736d61636b6673726f6f743d6835737369896e0dc6f356a059e0ddf8bb3aa3c1477b07c746e3d0b318a278e2c9d2514fa91c557a2c6673757569643d62653362363136342d006462322d303838312d663330332d2b326366646234372c00"], 0x1, 0x943, &(0x7f00000009c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) getsockopt$ax25_int(r0, 0x101, 0x19, 0x0, &(0x7f0000000040)) 6.366398599s ago: executing program 0 (id=1136): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x20, 0x0, 0x4, "000000a0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) 3.277041314s ago: executing program 3 (id=1156): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES16, @ANYRES16=r0, @ANYBLOB="fed87b0f36039188b859b8c24c945102542b9140b7b88b644d8fdec674431bc3503bc24ff18bd72b7ee1cae6a4cc989c17b241bc4f80c883752652a6bc993bb06891afc33adace1335bdce1fb6252d4fb2e0ec2e701bda861d4ac8a2321d3ee247bd018e2fc71fdd1011e83ca30f93c9e3982b2af696c32b7143171b", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000006c0)=""/165, 0xa5) 3.028826995s ago: executing program 1 (id=1159): openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 2.914969496s ago: executing program 1 (id=1160): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) 2.914230016s ago: executing program 2 (id=1161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x100007, 0xffff, 0x1, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2.668501607s ago: executing program 3 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1000048, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.629380787s ago: executing program 1 (id=1163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000009f00), 0x4) 2.628645587s ago: executing program 2 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x4, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e4}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.577495667s ago: executing program 0 (id=1165): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000047c0)={&(0x7f00000045c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile, @ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, &(0x7f00000046c0)=""/215, 0x4a, 0xd7, 0x1}, 0x20) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff}}}}}]}}]}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000002240)={'sit0\x00', &(0x7f00000001c0)={@multicast2, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}}) read$FUSE(r1, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000004980)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000049c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, 0x0, 0x20000080) read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000006a00)={0x2020}, 0x2020) sendfile(r3, r3, 0x0, 0x9b) syz_open_dev$vcsa(0x0, 0x5, 0x82141) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 2.357561969s ago: executing program 1 (id=1166): socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2440, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000000, 0x11, r0, 0xfffff000) 1.835817251s ago: executing program 2 (id=1167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0x5}) r2 = eventfd2(0x180, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x6, 0x0, r2}) 1.761559651s ago: executing program 3 (id=1168): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40186e8d, &(0x7f0000000040)={0x0, 0x42c00000015555, 0x400, 0x200000003, 0x6, 0x3, 0x2401}) 1.559772793s ago: executing program 2 (id=1169): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000680)='t\nf', 0x3}], 0x2}}], 0x1, 0x881) 1.511402623s ago: executing program 1 (id=1170): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES16, @ANYRES16=r0, @ANYBLOB="fed87b0f36039188b859b8c24c945102542b9140b7b88b644d8fdec674431bc3503bc24ff18bd72b7ee1cae6a4cc989c17b241bc4f80c883752652a6bc993bb06891afc33adace1335bdce1fb6252d4fb2e0ec2e701bda861d4ac8a2321d3ee247bd018e2fc71fdd1011e83ca30f93c9e3982b2af696c32b7143171b", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14a) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000006c0)=""/165, 0xa5) 1.333522934s ago: executing program 2 (id=1171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x8884}, @void, @eth={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x8, 0x2c, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts]}}}}}}, 0x42) 1.158546095s ago: executing program 3 (id=1172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a000000", @ANYRES32], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 972.330605ms ago: executing program 3 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 881.571666ms ago: executing program 2 (id=1174): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x10400, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d9e51ac3fbcdc77796469722c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c696f636861727365743d63703836362c636f6465706167653d3835372c73686f72746e616d653d6d697865642c646f733178666c6f7070792c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c00"], 0x1, 0x36b, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 804.606786ms ago: executing program 3 (id=1175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x4, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e4}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0), 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 579.303497ms ago: executing program 0 (id=1176): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2(0x0, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x8) splice(r4, 0x0, r2, 0x0, 0x6, 0xa) close_range(r2, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x60044144}, 0x0) 493.500998ms ago: executing program 1 (id=1177): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x280, 0x2d0, 0x3, @stepwise={{0x8001, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}}) 0s ago: executing program 32 (id=1177): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x280, 0x2d0, 0x3, @stepwise={{0x8001, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}}) kernel console output (not intermixed with test programs): sim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.779549][ T5789] veth1_vlan: entered promiscuous mode [ 88.853690][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.918209][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.935591][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.944719][ T5790] veth0_vlan: entered promiscuous mode [ 88.958987][ T5789] veth0_macvtap: entered promiscuous mode [ 89.013673][ T5789] veth1_macvtap: entered promiscuous mode [ 89.018967][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.039376][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.055256][ T5790] veth1_vlan: entered promiscuous mode [ 89.068181][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.080067][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.096591][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.127497][ T5792] veth0_vlan: entered promiscuous mode [ 89.162392][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.174086][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.188236][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.205655][ T5792] veth1_vlan: entered promiscuous mode [ 89.247646][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.274376][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.284690][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.294253][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.296558][ T5883] syz.3.4[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.342541][ T5790] veth0_macvtap: entered promiscuous mode [ 89.372709][ T5790] veth1_macvtap: entered promiscuous mode [ 89.384011][ T5792] veth0_macvtap: entered promiscuous mode [ 89.431945][ T5792] veth1_macvtap: entered promiscuous mode [ 89.471212][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.483905][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.494610][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.505468][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.518347][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.570172][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.578047][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.595500][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.606363][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.616675][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.628408][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642760][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.693394][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.705842][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.717125][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.728402][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.738808][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.750002][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.762520][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.774194][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.785114][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.796053][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.809401][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.819832][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.831115][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.843178][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.853766][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.863768][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.873187][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.885055][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.907398][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.922791][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.943896][ T5792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.956077][ T5792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.967334][ T5883] loop3: detected capacity change from 0 to 32768 [ 89.973088][ T5792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.983788][ T5792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.230454][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.247714][ T5885] loop1: detected capacity change from 0 to 64 [ 90.257283][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.279905][ T5804] Bluetooth: hci1: command tx timeout [ 90.427877][ T5804] Bluetooth: hci2: command tx timeout [ 90.435664][ T5801] Bluetooth: hci3: command tx timeout [ 90.449258][ T51] Bluetooth: hci0: command tx timeout [ 90.564751][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.600878][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.608504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.618366][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.667501][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.684650][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.758219][ T5887] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 90.766412][ T5887] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.595974][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.131350][ T5804] Bluetooth: hci1: command tx timeout [ 93.136824][ T5804] Bluetooth: hci2: command tx timeout [ 93.142807][ T5804] Bluetooth: hci3: command tx timeout [ 93.148244][ T5804] Bluetooth: hci0: command tx timeout [ 93.242560][ T5902] loop3: detected capacity change from 0 to 64 [ 93.497104][ T8] cfg80211: failed to load regulatory.db [ 93.648281][ T5907] loop0: detected capacity change from 0 to 64 [ 93.842566][ T5911] loop1: detected capacity change from 0 to 2048 [ 94.024265][ T5913] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.105243][ T5909] loop2: detected capacity change from 0 to 4096 [ 94.415345][ T5909] ======================================================= [ 94.415345][ T5909] WARNING: The mand mount option has been deprecated and [ 94.415345][ T5909] and is ignored by this kernel. Remove the mand [ 94.415345][ T5909] option from the mount to silence this warning. [ 94.415345][ T5909] ======================================================= [ 95.148368][ T5918] loop0: detected capacity change from 0 to 2048 [ 95.284048][ T5915] loop3: detected capacity change from 0 to 8192 [ 95.683340][ T5918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.167851][ T5915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.238353][ T5915] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 96.248945][ T5915] REISERFS (device loop3): using ordered data mode [ 96.285219][ T5915] reiserfs: using flush barriers [ 96.511039][ T5915] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 96.529284][ T5915] REISERFS (device loop3): checking transaction log (loop3) [ 96.722740][ T5915] REISERFS (device loop3): Using r5 hash to sort names [ 96.944583][ T5915] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 97.205148][ T5915] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 97.349512][ T5927] loop1: detected capacity change from 0 to 8192 [ 97.439412][ T5927] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "mask=^MAY_EXEC" [ 97.857345][ T5934] loop2: detected capacity change from 0 to 16 [ 97.960495][ T5934] erofs: (device loop2): mounted with root inode @ nid 36. [ 102.126043][ T5957] loop0: detected capacity change from 0 to 32768 [ 102.194098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.219463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.228140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.282491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.394438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.424259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.716541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 102.731630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.740272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.748521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.498883][ T5963] overlayfs: failed to resolve './file0': -2 [ 103.695690][ T5957] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 104.598001][ T5792] ocfs2: Unmounting device (7,0) on (node local) [ 104.926859][ T5974] loop1: detected capacity change from 0 to 1024 [ 105.017042][ T5976] bridge0: entered promiscuous mode [ 105.044932][ T5976] macvlan2: entered promiscuous mode [ 107.150643][ T6005] program syz.2.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.377751][ T6009] loop2: detected capacity change from 0 to 1024 [ 107.660142][ T6013] Zero length message leads to an empty skb [ 110.056054][ T6032] tipc: Started in network mode [ 110.069518][ T6032] tipc: Node identity 7f000001, cluster identity 4711 [ 110.078005][ T6032] tipc: Enabled bearer , priority 10 [ 110.092371][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 110.110742][ T6032] tipc: Enabled bearer , priority 0 [ 110.293071][ T6038] loop2: detected capacity change from 0 to 1024 [ 110.429626][ T5795] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.660438][ T5795] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 110.756093][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.836073][ T5795] usb 4-1: Product: syz [ 110.842835][ T6021] sctp: failed to load transform for md5: -4 [ 110.911392][ T5795] usb 4-1: Manufacturer: syz [ 110.939330][ T5795] usb 4-1: SerialNumber: syz [ 110.982375][ T5795] usb 4-1: config 0 descriptor?? [ 111.112130][ T6047] pimreg3: entered allmulticast mode [ 111.150893][ T6047] netlink: 'syz.0.47': attribute type 17 has an invalid length. [ 111.191128][ T5881] tipc: Node number set to 2130706433 [ 111.222387][ T6047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.446461][ T5795] usb 4-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 112.124860][ T6032] syz.3.42 uses obsolete (PF_INET,SOCK_PACKET) [ 112.310984][ T5795] usb 4-1: failed to fetch extended address, random address set [ 112.588452][ T5795] usb 4-1: USB disconnect, device number 2 [ 113.935242][ T6076] loop3: detected capacity change from 0 to 1024 [ 114.036628][ T6082] TCP: TCP_TX_DELAY enabled [ 114.315295][ T6084] syzkaller0: entered promiscuous mode [ 114.340494][ T6084] syzkaller0: entered allmulticast mode [ 116.067904][ T6111] loop1: detected capacity change from 0 to 1024 [ 116.097258][ T28] audit: type=1326 audit(1761729862.497:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.140523][ T28] audit: type=1326 audit(1761729862.527:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.173065][ T28] audit: type=1326 audit(1761729862.527:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.215068][ T28] audit: type=1326 audit(1761729862.537:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.245685][ T28] audit: type=1326 audit(1761729862.537:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.295449][ T28] audit: type=1326 audit(1761729862.537:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1639f8d810 code=0x7ffc0000 [ 116.342518][ T28] audit: type=1326 audit(1761729862.537:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.456166][ T28] audit: type=1326 audit(1761729862.537:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.478192][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.571262][ T28] audit: type=1326 audit(1761729862.537:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 116.628326][ T28] audit: type=1326 audit(1761729862.537:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 117.814256][ T6133] netlink: 32 bytes leftover after parsing attributes in process `syz.2.76'. [ 118.100141][ T6144] loop2: detected capacity change from 0 to 1024 [ 120.418424][ T6179] loop0: detected capacity change from 0 to 1024 [ 120.441959][ T6181] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.709422][ T2194] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 120.737310][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 120.886708][ T6187] binder: 6185:6187 ioctl 400c620e 200000000180 returned -22 [ 120.915614][ T2194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.949352][ T2194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.983828][ T2194] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 121.013333][ T2194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.071779][ T2194] usb 4-1: config 0 descriptor?? [ 121.303891][ T6195] loop2: detected capacity change from 0 to 64 [ 121.304640][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.397898][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 121.398041][ T28] audit: type=1326 audit(1761729867.797:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.0.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x0 [ 121.583855][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.661333][ T6200] netlink: 'syz.2.97': attribute type 3 has an invalid length. [ 121.669119][ T6200] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.97'. [ 122.326334][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.374200][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.722652][ T6178] dummy0: entered promiscuous mode [ 122.793758][ T6178] vlan2: entered promiscuous mode [ 123.288772][ T6210] loop2: detected capacity change from 0 to 1024 [ 123.532485][ T5881] usb 4-1: USB disconnect, device number 3 [ 123.919113][ T28] audit: type=1326 audit(1761729870.317:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.0.107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x0 [ 124.048861][ T6227] loop2: detected capacity change from 0 to 64 [ 124.298370][ T5795] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.432080][ T6237] netlink: 'syz.2.109': attribute type 3 has an invalid length. [ 124.442163][ T6237] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.109'. [ 125.312837][ T5795] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 125.328792][ T6236] loop1: detected capacity change from 0 to 1024 [ 125.359168][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.395413][ T5795] usb 4-1: Product: syz [ 125.429168][ T5795] usb 4-1: Manufacturer: syz [ 125.454240][ T5795] usb 4-1: SerialNumber: syz [ 125.825253][ T5795] rtl8150 4-1:1.0: couldn't reset the device [ 125.841897][ T5795] rtl8150: probe of 4-1:1.0 failed with error -5 [ 125.872419][ T5795] usb 4-1: USB disconnect, device number 4 [ 126.160059][ T6262] loop0: detected capacity change from 0 to 64 [ 126.519916][ T6267] netlink: 'syz.0.122': attribute type 3 has an invalid length. [ 126.527853][ T6267] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.122'. [ 127.343711][ T6275] loop0: detected capacity change from 0 to 1024 [ 127.782108][ T6287] loop1: detected capacity change from 0 to 64 [ 128.162365][ T6295] netlink: 'syz.1.133': attribute type 3 has an invalid length. [ 128.170172][ T6295] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.133'. [ 129.679427][ T6314] syzkaller0: entered promiscuous mode [ 129.719261][ T6314] syzkaller0: entered allmulticast mode [ 132.509205][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.700832][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 132.723828][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.809418][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.915570][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.997641][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.025025][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.036734][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.104673][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.137374][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.085368][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 134.096876][ T6359] binder: 6352:6359 ioctl c018620c 2000000002c0 returned -1 [ 134.109168][ T23] usbtmc 2-1:16.0: can't read capabilities [ 135.453729][ T23] usb 2-1: USB disconnect, device number 2 [ 135.519314][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 137.304476][ T6405] loop0: detected capacity change from 0 to 16 [ 137.320472][ T6405] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.579201][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 139.841676][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 139.872409][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 139.922889][ T23] usb 2-1: config 4 interface 0 has no altsetting 0 [ 139.980553][ T23] usb 2-1: string descriptor 0 read error: -22 [ 140.000586][ T23] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 140.035404][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.112938][ T23] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 140.315553][ T6434] loop3: detected capacity change from 0 to 16 [ 140.323937][ T6434] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.347166][ T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.366675][ T23] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 140.403848][ T23] usb 2-1: media controller created [ 140.456903][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.589279][ T2194] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.747333][ T23] usb 2-1: USB disconnect, device number 3 [ 140.806666][ T2194] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 140.838452][ T2194] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 140.850555][ T2194] usb 3-1: config 4 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 140.876086][ T2194] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 141.051141][ T2194] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 141.060455][ T2194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.282566][ T2194] ath6kl: Failed to submit usb control message: -110 [ 142.319259][ T2194] ath6kl: unable to send the bmi data to the device: -110 [ 142.361078][ T2194] ath6kl: Unable to send get target info: -110 [ 142.369440][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 142.394688][ T2194] ath6kl: Failed to init ath6kl core: -110 [ 142.425284][ T2194] ath6kl_usb: probe of 3-1:4.0 failed with error -110 [ 142.921606][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 143.263863][ T6456] loop1: detected capacity change from 0 to 16 [ 143.273440][ T6456] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.225111][ T23] usb 3-1: USB disconnect, device number 2 [ 145.799454][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 146.089644][ T6492] loop2: detected capacity change from 0 to 16 [ 146.097698][ T6492] erofs: (device loop2): mounted with root inode @ nid 36. [ 146.144560][ T9] usb 4-1: config 5 has an invalid interface number: 3 but max is 0 [ 146.163221][ T9] usb 4-1: config 5 has no interface number 0 [ 146.197903][ T9] usb 4-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 146.228947][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.264157][ T9] usb 4-1: Product: syz [ 146.268398][ T9] usb 4-1: Manufacturer: syz [ 146.323257][ T9] usb 4-1: SerialNumber: syz [ 146.541077][ T9] ftdi_sio 4-1:5.3: FTDI USB Serial Device converter detected [ 146.599747][ T9] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 147.328724][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 147.572095][ T6481] team_slave_0: entered promiscuous mode [ 147.578138][ T6481] team_slave_1: entered promiscuous mode [ 147.707001][ T6481] macvtap1: entered promiscuous mode [ 147.755599][ T6481] team0: entered promiscuous mode [ 147.798558][ T6481] macvtap1: entered allmulticast mode [ 147.853863][ T6481] team0: entered allmulticast mode [ 147.887452][ T6481] team_slave_0: entered allmulticast mode [ 147.925545][ T6481] team_slave_1: entered allmulticast mode [ 147.976457][ T6481] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 148.235588][ T6485] team0: left allmulticast mode [ 148.359965][ T6485] team_slave_0: left allmulticast mode [ 148.462936][ T6485] team_slave_1: left allmulticast mode [ 148.659392][ T6485] team0: left promiscuous mode [ 148.665160][ T6485] team_slave_0: left promiscuous mode [ 148.670785][ T6485] team_slave_1: left promiscuous mode [ 149.736054][ T5795] usb 4-1: USB disconnect, device number 5 [ 149.745460][ T5795] ftdi_sio 4-1:5.3: device disconnected [ 150.156343][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.173481][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.195665][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.209667][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.222556][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.232509][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.263089][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.316118][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.351672][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880304be400: rx timeout, send abort [ 150.388919][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.412627][ T6511] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 150.641283][ T28] audit: type=1400 audit(1761729896.987:45): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6520 comm="syz.0.214" [ 150.861368][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880304be400: abort rx timeout. Force session deactivation [ 151.417444][ T6537] loop2: detected capacity change from 0 to 16 [ 151.426751][ T6537] erofs: (device loop2): mounted with root inode @ nid 36. [ 151.441012][ T5795] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.659516][ T5795] usb 4-1: Using ep0 maxpacket: 32 [ 151.827636][ T5795] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 151.901922][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.938905][ T5795] usb 4-1: config 0 descriptor?? [ 152.289765][ T6544] loop2: detected capacity change from 0 to 128 [ 152.323844][ T5795] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 152.382076][ T5795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.407120][ T6544] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.408905][ T5795] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.427173][ T5795] usb 4-1: media controller created [ 152.454101][ T5795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.511104][ T6544] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.526767][ T5795] az6027: usb out operation failed. (-71) [ 152.557043][ T5795] az6027: usb out operation failed. (-71) [ 152.585785][ T5795] stb0899_attach: Driver disabled by Kconfig [ 152.604651][ T5795] az6027: no front-end attached [ 152.604651][ T5795] [ 152.629562][ T5795] az6027: usb out operation failed. (-71) [ 152.635522][ T5795] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.654528][ T5795] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 152.852593][ T5795] dvb-usb: schedule remote query interval to 400 msecs. [ 152.881428][ T5795] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 152.919422][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.463421][ T5795] usb 4-1: USB disconnect, device number 6 [ 153.512136][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.692628][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 153.779684][ T5881] usb 1-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.831042][ T5795] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.847650][ T5881] usb 1-1: config 1 interface 0 has no altsetting 0 [ 153.876937][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40 [ 153.906807][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.916967][ T5881] usb 1-1: Product: syz [ 153.927109][ T5881] usb 1-1: Manufacturer: ᭤鿋ᶂ쭄㥙_ჵ [ 153.938484][ T5881] usb 1-1: SerialNumber: syz [ 154.639147][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.829333][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 154.855256][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.880913][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.911470][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.922214][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.949985][ T23] usb 3-1: Product: syz [ 154.965299][ T23] usb 3-1: Manufacturer: syz [ 154.984511][ T23] usb 3-1: SerialNumber: syz [ 155.029847][ T23] usb 3-1: config 0 descriptor?? [ 155.427033][ T6569] loop3: detected capacity change from 0 to 16 [ 155.438062][ T6569] erofs: (device loop3): mounted with root inode @ nid 36. [ 155.716282][ T5881] usbhid 1-1:1.0: can't add hid device: -71 [ 155.726404][ T5881] usbhid: probe of 1-1:1.0 failed with error -71 [ 155.737208][ T5881] usb 1-1: USB disconnect, device number 2 [ 156.549330][ T6587] loop0: detected capacity change from 0 to 128 [ 156.648386][ T6587] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.729606][ T6587] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.763554][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.373002][ T6606] loop0: detected capacity change from 0 to 1024 [ 158.564641][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 158.972802][ T27] usb 3-1: USB disconnect, device number 3 [ 161.990713][ T6651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.247'. [ 163.778249][ T6677] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.286512][ T6694] loop0: detected capacity change from 0 to 64 [ 165.025790][ T6699] netlink: 'syz.0.261': attribute type 3 has an invalid length. [ 165.033600][ T6699] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.261'. [ 165.470185][ T28] audit: type=1326 audit(1761729911.877:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.0.266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x0 [ 166.591750][ T6733] loop0: detected capacity change from 0 to 64 [ 167.775250][ T6741] netlink: 'syz.0.274': attribute type 3 has an invalid length. [ 167.783119][ T6741] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.274'. [ 168.959385][ T6754] netlink: 36 bytes leftover after parsing attributes in process `syz.0.280'. [ 170.318030][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 170.591717][ T6771] netlink: 92 bytes leftover after parsing attributes in process `syz.1.283'. [ 170.760344][ T6773] binder_alloc: 6772: binder_alloc_buf, no vma [ 170.834664][ T6775] loop3: detected capacity change from 0 to 64 [ 171.536663][ T6781] netlink: 'syz.3.286': attribute type 3 has an invalid length. [ 171.545533][ T6781] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.286'. [ 173.314930][ T6803] loop3: detected capacity change from 0 to 16 [ 173.326990][ T6803] erofs: (device loop3): mounted with root inode @ nid 36. [ 173.461918][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 173.598728][ T6807] binder_alloc: 6806: binder_alloc_buf, no vma [ 173.856386][ T6800] netlink: 68 bytes leftover after parsing attributes in process `syz.0.292'. [ 174.022491][ T6809] loop3: detected capacity change from 0 to 64 [ 174.467070][ T6811] netlink: 'syz.3.295': attribute type 3 has an invalid length. [ 174.475067][ T6811] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.295'. [ 177.059689][ T6834] loop3: detected capacity change from 0 to 64 [ 177.951932][ T6843] netlink: 'syz.3.304': attribute type 3 has an invalid length. [ 177.960019][ T6843] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.304'. [ 178.839606][ T6849] netlink: 76 bytes leftover after parsing attributes in process `syz.1.309'. [ 178.870129][ T6849] netlink: 248 bytes leftover after parsing attributes in process `syz.1.309'. [ 178.888353][ T6849] netlink: 248 bytes leftover after parsing attributes in process `syz.1.309'. [ 178.912978][ T6849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'. [ 179.181999][ T6863] misc userio: Invalid payload size [ 180.226373][ T6873] loop0: detected capacity change from 0 to 64 [ 181.542399][ T6886] netlink: 'syz.0.317': attribute type 3 has an invalid length. [ 181.550261][ T6886] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.317'. [ 182.245889][ T6898] loop6: detected capacity change from 0 to 7 [ 182.267180][ T6898] Dev loop6: unable to read RDB block 7 [ 182.284099][ T6898] loop6: unable to read partition table [ 182.304543][ T6898] loop6: partition table beyond EOD, truncated [ 182.339668][ T6904] misc userio: Invalid payload size [ 182.347157][ T6898] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.266989][ T6919] capability: warning: `syz.0.329' uses 32-bit capabilities (legacy support in use) [ 184.365927][ T6922] process 'syz.0.329' launched '/dev/uinput' with NULL argv: empty string added [ 184.591838][ T6931] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 184.619437][ T6931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 185.135170][ T6936] bridge0: port 3(syz_tun) entered blocking state [ 185.159219][ T6936] bridge0: port 3(syz_tun) entered disabled state [ 185.190181][ T6936] syz_tun: entered allmulticast mode [ 185.221396][ T6936] syz_tun: entered promiscuous mode [ 185.227908][ T6936] bridge0: port 3(syz_tun) entered blocking state [ 185.234938][ T6936] bridge0: port 3(syz_tun) entered forwarding state [ 186.694868][ T6951] binder: BINDER_SET_CONTEXT_MGR already set [ 186.719361][ T6951] binder: 6950:6951 ioctl 4018620d 200000004a80 returned -16 [ 187.752486][ T6959] overlayfs: missing 'lowerdir' [ 188.849017][ C1] hrtimer: interrupt took 60323 ns [ 190.041832][ T6992] loop1: detected capacity change from 0 to 16 [ 190.063890][ T6992] erofs: (device loop1): mounted with root inode @ nid 36. [ 190.749967][ T6997] ksmbd: Unknown IPC event: 10, ignore. [ 190.804686][ T6999] overlayfs: missing 'lowerdir' [ 190.885962][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 190.998689][ T7004] misc userio: Invalid payload size [ 194.149439][ T7028] loop3: detected capacity change from 0 to 16 [ 194.243790][ T7028] erofs: (device loop3): mounted with root inode @ nid 36. [ 194.452698][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.459545][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.965974][ T7032] overlayfs: missing 'lowerdir' [ 195.187858][ T5863] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 195.389142][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 195.495154][ T5863] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 195.508580][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.559431][ T5863] usb 2-1: Product: syz [ 195.563826][ T5863] usb 2-1: Manufacturer: syz [ 195.596433][ T5863] usb 2-1: SerialNumber: syz [ 195.701046][ T5863] usb 2-1: config 0 descriptor?? [ 195.810254][ T5863] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 196.307270][ T5863] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 196.338003][ T5863] visor: probe of 2-1:0.0 failed with error -5 [ 196.478414][ T7043] misc userio: Invalid payload size [ 197.369102][ T28] audit: type=1326 audit(1761729943.747:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7029 comm="syz.1.368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x0 [ 197.614230][ T7049] loop3: detected capacity change from 0 to 128 [ 197.666662][ T7049] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.707513][ T7049] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.749851][ T7052] pim6reg1: entered promiscuous mode [ 197.755232][ T7052] pim6reg1: entered allmulticast mode [ 198.105903][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.602618][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.624796][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.083896][ T7064] overlayfs: missing 'workdir' [ 199.316591][ T7065] netlink: 6 bytes leftover after parsing attributes in process `syz.0.376'. [ 199.389774][ T7068] loop3: detected capacity change from 0 to 16 [ 199.416910][ T7068] erofs: (device loop3): mounted with root inode @ nid 36. [ 200.036331][ T7065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.474943][ T5863] usb 2-1: USB disconnect, device number 4 [ 201.454053][ T7081] misc userio: Invalid payload size [ 202.517498][ T7091] overlayfs: missing 'workdir' [ 202.518427][ T7093] loop2: detected capacity change from 0 to 128 [ 202.547057][ T7088] syzkaller0: entered promiscuous mode [ 202.568642][ T7088] syzkaller0: entered allmulticast mode [ 202.598898][ T7088] 0: reclassify loop, rule prio 0, protocol 800 [ 202.646239][ T7093] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.664944][ T7093] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.108216][ T7106] loop1: detected capacity change from 0 to 16 [ 203.541733][ T7106] erofs: (device loop1): mounted with root inode @ nid 36. [ 203.702868][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.938413][ T7117] misc userio: Invalid payload size [ 206.218257][ T7122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 206.651462][ T7129] overlayfs: missing 'workdir' [ 206.761763][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 206.763743][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 206.767828][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 206.775379][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 207.655857][ T7142] loop1: detected capacity change from 0 to 128 [ 207.936411][ T7149] loop0: detected capacity change from 0 to 16 [ 208.218877][ T7142] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.621878][ T7149] erofs: (device loop0): mounted with root inode @ nid 36. [ 208.655252][ T7142] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.680013][ T7150] netlink: 'syz.3.400': attribute type 29 has an invalid length. [ 208.688051][ T7150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.400'. [ 208.697633][ T7150] netlink: 'syz.3.400': attribute type 29 has an invalid length. [ 208.706092][ T7150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.400'. [ 208.716683][ T7146] netlink: 'syz.3.400': attribute type 29 has an invalid length. [ 208.724696][ T7146] netlink: 44 bytes leftover after parsing attributes in process `syz.3.400'. [ 209.622032][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.781228][ T28] audit: type=1326 audit(1761729956.157:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz.3.400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x0 [ 212.000316][ T7188] loop0: detected capacity change from 0 to 16 [ 212.072087][ T7188] erofs: (device loop0): mounted with root inode @ nid 36. [ 214.892285][ T7225] loop0: detected capacity change from 0 to 128 [ 215.001922][ T7225] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.129160][ T7225] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.374892][ T7229] syzkaller0: entered promiscuous mode [ 215.401927][ T7229] syzkaller0: entered allmulticast mode [ 215.905357][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.524669][ T7243] syzkaller0: entered promiscuous mode [ 216.562359][ T7243] syzkaller0: entered allmulticast mode [ 216.732808][ T7246] tipc: Started in network mode [ 216.740938][ T7246] tipc: Node identity ac1414aa, cluster identity 4711 [ 216.803975][ T7246] tipc: Enabled bearer , priority 10 [ 216.827777][ T7253] tipc: Enabled bearer , priority 0 [ 217.919133][ T2194] tipc: Node number set to 2886997162 [ 219.304437][ T7285] syzkaller0: entered promiscuous mode [ 219.310225][ T7285] syzkaller0: entered allmulticast mode [ 221.093059][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.440'. [ 221.112761][ T7300] netem: change failed [ 223.696803][ T5864] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 223.914315][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 223.953262][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.994274][ T5864] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.017883][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.063520][ T5864] usb 1-1: config 0 descriptor?? [ 224.192062][ T5864] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 224.346865][ T7342] syz.3.449: attempt to access beyond end of device [ 224.346865][ T7342] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 224.437925][ T7350] loop1: detected capacity change from 0 to 1024 [ 225.898364][ T7362] bridge0: port 3(syz_tun) entered blocking state [ 225.909355][ T7362] bridge0: port 3(syz_tun) entered disabled state [ 225.916027][ T7362] syz_tun: entered allmulticast mode [ 225.974899][ T7362] syz_tun: entered promiscuous mode [ 225.990379][ T7362] bridge0: port 3(syz_tun) entered blocking state [ 225.996595][ T7331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.998126][ T7362] bridge0: port 3(syz_tun) entered forwarding state [ 226.030900][ T7331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.089177][ T7331] fuse: Unknown parameter 'f' [ 226.316735][ T7381] loop3: detected capacity change from 0 to 1024 [ 226.691484][ T7386] loop1: detected capacity change from 0 to 32768 [ 226.703678][ T7386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.469 (7386) [ 226.736948][ T7386] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.749327][ T7386] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 226.758088][ T7386] BTRFS info (device loop1): setting nodatacow, compression disabled [ 226.766343][ T7386] BTRFS info (device loop1): turning on flush-on-commit [ 226.773359][ T7386] BTRFS info (device loop1): enabling auto defrag [ 226.779902][ T7386] BTRFS info (device loop1): trying to use backup root at mount time [ 226.788025][ T7386] BTRFS info (device loop1): turning on async discard [ 226.794855][ T7386] BTRFS info (device loop1): using free space tree [ 226.880703][ T3515] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 226.900313][ T7386] BTRFS error (device loop1): failed to load root extent [ 226.907440][ T7386] BTRFS warning (device loop1): try to load backup roots slot 1 [ 226.915979][ T3515] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 226.929396][ T7386] BTRFS warning (device loop1): couldn't read tree root [ 226.936346][ T7386] BTRFS warning (device loop1): try to load backup roots slot 2 [ 226.950078][ T49] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 227.003530][ T7386] BTRFS warning (device loop1): couldn't read tree root [ 227.010585][ T7386] BTRFS warning (device loop1): try to load backup roots slot 3 [ 227.041889][ T7386] BTRFS info (device loop1): enabling ssd optimizations [ 227.059171][ T7386] BTRFS info (device loop1): rebuilding free space tree [ 227.111975][ T7386] BTRFS info (device loop1): checking UUID tree [ 227.270149][ T23] usb 1-1: USB disconnect, device number 3 [ 227.639546][ T5863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 227.879397][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 227.930071][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 227.976893][ T5863] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 228.029085][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.120963][ T5863] usb 3-1: config 0 descriptor?? [ 228.197324][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.157760][ T5863] usbhid 3-1:0.0: can't add hid device: -71 [ 229.172256][ T5863] usbhid: probe of 3-1:0.0 failed with error -71 [ 229.241854][ T5863] usb 3-1: USB disconnect, device number 4 [ 230.021165][ T28] audit: type=1804 audit(1761729976.417:49): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.480" name="/newroot/121/file1" dev="fuse" ino=1 res=1 errno=0 [ 230.349259][ T5863] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 230.549234][ T5863] usb 2-1: device descriptor read/64, error -71 [ 230.817113][ T7458] loop2: detected capacity change from 0 to 32768 [ 230.851164][ T7458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.485 (7458) [ 230.884808][ T7458] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.895208][ T7458] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 230.904010][ T7458] BTRFS info (device loop2): setting nodatacow, compression disabled [ 230.912205][ T7458] BTRFS info (device loop2): turning on flush-on-commit [ 230.919435][ T7458] BTRFS info (device loop2): enabling auto defrag [ 230.925948][ T7458] BTRFS info (device loop2): trying to use backup root at mount time [ 230.934223][ T7458] BTRFS info (device loop2): turning on async discard [ 230.941849][ T7458] BTRFS info (device loop2): using free space tree [ 230.989085][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.023982][ T1128] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 231.059353][ T7458] BTRFS error (device loop2): failed to load root extent [ 231.066475][ T7458] BTRFS warning (device loop2): try to load backup roots slot 1 [ 231.082612][ T1128] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 231.095862][ T7458] BTRFS warning (device loop2): couldn't read tree root [ 231.102973][ T7458] BTRFS warning (device loop2): try to load backup roots slot 2 [ 231.116115][ T1138] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 231.169422][ T7458] BTRFS warning (device loop2): couldn't read tree root [ 231.176416][ T7458] BTRFS warning (device loop2): try to load backup roots slot 3 [ 231.209208][ T5863] usb 2-1: device descriptor read/64, error -71 [ 231.229178][ T7458] BTRFS info (device loop2): enabling ssd optimizations [ 231.242016][ T7458] BTRFS info (device loop2): rebuilding free space tree [ 231.286653][ T7458] BTRFS info (device loop2): checking UUID tree [ 231.329366][ T5863] usb usb2-port1: attempt power cycle [ 232.000104][ T5790] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.239177][ T5863] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.327117][ T5863] usb 2-1: device descriptor read/8, error -71 [ 232.609662][ T5863] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 232.686631][ T5863] usb 2-1: device descriptor read/8, error -71 [ 232.821143][ T5863] usb usb2-port1: unable to enumerate USB device [ 233.180115][ T5863] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.490127][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 233.620766][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 233.719378][ T5863] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 233.738157][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.776618][ T5863] usb 4-1: config 0 descriptor?? [ 233.777556][ T7494] loop2: detected capacity change from 0 to 64 [ 234.115410][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 234.163382][ T7494] netlink: 'syz.2.492': attribute type 3 has an invalid length. [ 234.171166][ T7494] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.492'. [ 234.420514][ T7498] loop1: detected capacity change from 0 to 32768 [ 234.429177][ T7498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.494 (7498) [ 234.442200][ T5863] usbhid: probe of 4-1:0.0 failed with error -71 [ 234.453209][ T7498] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.463589][ T7498] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 234.472447][ T7498] BTRFS info (device loop1): setting nodatacow, compression disabled [ 234.480627][ T7498] BTRFS info (device loop1): turning on flush-on-commit [ 234.487602][ T7498] BTRFS info (device loop1): enabling auto defrag [ 234.494242][ T7498] BTRFS info (device loop1): trying to use backup root at mount time [ 234.502421][ T7498] BTRFS info (device loop1): turning on async discard [ 234.509381][ T7498] BTRFS info (device loop1): using free space tree [ 234.518237][ T5863] usb 4-1: USB disconnect, device number 7 [ 234.578098][ T1138] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 234.642236][ T7498] BTRFS error (device loop1): failed to load root extent [ 234.649607][ T7498] BTRFS warning (device loop1): try to load backup roots slot 1 [ 234.661595][ T1138] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 234.688711][ T7498] BTRFS warning (device loop1): couldn't read tree root [ 234.697886][ T7498] BTRFS warning (device loop1): try to load backup roots slot 2 [ 234.708745][ T1128] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 234.759333][ T7498] BTRFS warning (device loop1): couldn't read tree root [ 234.766371][ T7498] BTRFS warning (device loop1): try to load backup roots slot 3 [ 234.800210][ T7498] BTRFS info (device loop1): enabling ssd optimizations [ 234.807929][ T7498] BTRFS info (device loop1): rebuilding free space tree [ 234.840419][ T7498] BTRFS info (device loop1): checking UUID tree [ 236.116630][ T7538] misc userio: Invalid payload size [ 236.168491][ T5789] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.473391][ T7544] netlink: 'syz.0.505': attribute type 4 has an invalid length. [ 236.635433][ T7547] loop1: detected capacity change from 0 to 64 [ 236.941642][ T7549] netlink: 'syz.1.506': attribute type 3 has an invalid length. [ 236.949554][ T7549] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.506'. [ 237.689210][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 237.949091][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 238.010887][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 238.017800][ T7568] binder: 7564:7568 ioctl c0306201 0 returned -14 [ 238.052221][ T27] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 238.071646][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.087063][ T7568] binder: BINDER_SET_CONTEXT_MGR already set [ 238.119378][ T7568] binder: 7564:7568 ioctl 4018620d 200000004a80 returned -16 [ 238.124263][ T27] usb 4-1: config 0 descriptor?? [ 238.370672][ T7576] misc userio: Invalid payload size [ 238.431152][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 238.447002][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 238.471494][ T27] usb 4-1: USB disconnect, device number 8 [ 241.129374][ T5863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 241.359605][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 241.427114][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 241.535727][ T5863] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 241.626629][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.768590][ T5863] usb 4-1: config 0 descriptor?? [ 242.967032][ T5863] usbhid 4-1:0.0: can't add hid device: -71 [ 242.984481][ T5863] usbhid: probe of 4-1:0.0 failed with error -71 [ 243.018265][ T5863] usb 4-1: USB disconnect, device number 9 [ 243.032073][ T28] audit: type=1326 audit(1761729989.437:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.106908][ T28] audit: type=1326 audit(1761729989.467:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.179091][ T28] audit: type=1326 audit(1761729989.467:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.249342][ T28] audit: type=1326 audit(1761729989.467:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.294151][ T28] audit: type=1326 audit(1761729989.467:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.363985][ T28] audit: type=1326 audit(1761729989.467:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.409153][ T28] audit: type=1326 audit(1761729989.467:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.456093][ T28] audit: type=1326 audit(1761729989.467:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.536989][ T28] audit: type=1326 audit(1761729989.467:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 243.589746][ T28] audit: type=1326 audit(1761729989.467:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.1.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 245.594644][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 245.626450][ T7666] syz.0.543 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.642555][ T7666] random: crng reseeded on system resumption [ 245.879886][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.093117][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 246.121399][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 246.133423][ T27] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 246.176020][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.206899][ T27] usb 3-1: config 0 descriptor?? [ 246.497183][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 246.514876][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 246.525616][ T27] usb 3-1: USB disconnect, device number 5 [ 250.729553][ T7716] tap0: tun_chr_ioctl cmd 1074025677 [ 250.787224][ T7716] tap0: linktype set to 270 [ 254.411543][ T7758] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 255.836360][ T7769] syzkaller0: entered promiscuous mode [ 255.869103][ T7769] syzkaller0: entered allmulticast mode [ 255.909807][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.919501][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.197246][ T7828] loop2: detected capacity change from 0 to 128 [ 259.263321][ T7828] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 259.281419][ T7828] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.082937][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.439252][ T7905] loop2: detected capacity change from 0 to 128 [ 264.370690][ T7905] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.401248][ T7905] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.603767][ T7925] ptrace attach of "./syz-executor exec"[5789] was attempted by "./syz-executor exec"[7925] [ 266.812698][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.036352][ T7945] vlan2: entered allmulticast mode [ 267.049118][ T7945] batadv0: entered allmulticast mode [ 268.597279][ T7971] loop0: detected capacity change from 0 to 128 [ 268.658539][ T7971] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.722170][ T7971] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.380939][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 269.380955][ T28] audit: type=1326 audit(1761730015.767:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.456758][ T28] audit: type=1326 audit(1761730015.767:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.492086][ T28] audit: type=1326 audit(1761730015.767:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.592562][ T28] audit: type=1326 audit(1761730015.767:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.693882][ T28] audit: type=1326 audit(1761730015.787:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.753578][ T28] audit: type=1326 audit(1761730015.787:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.790281][ T28] audit: type=1326 audit(1761730015.787:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.817649][ T28] audit: type=1326 audit(1761730015.787:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.880061][ T28] audit: type=1326 audit(1761730015.787:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 269.965638][ T28] audit: type=1326 audit(1761730015.787:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.2.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 270.108502][ T7995] syzkaller0: entered promiscuous mode [ 270.145701][ T7995] syzkaller0: entered allmulticast mode [ 270.601312][ T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 270.789114][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 270.798009][ T8] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.817464][ T8] usb 4-1: config 0 has no interface number 0 [ 270.834856][ T8] usb 4-1: config 0 interface 184 has no altsetting 0 [ 270.850311][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.856296][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.877659][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.890533][ T8] usb 4-1: Product: syz [ 270.894747][ T8] usb 4-1: Manufacturer: syz [ 270.901063][ T8] usb 4-1: SerialNumber: syz [ 270.918531][ T8] usb 4-1: config 0 descriptor?? [ 270.945793][ T8] smsc75xx v1.0.0 [ 270.959461][ T8] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 270.989609][ T8] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 271.196102][ T8] usb 4-1: USB disconnect, device number 10 [ 271.687514][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 272.828447][ T8034] bridge0: port 3(syz_tun) entered blocking state [ 272.857255][ T8034] bridge0: port 3(syz_tun) entered disabled state [ 272.872303][ T8034] syz_tun: entered allmulticast mode [ 272.890587][ T8034] syz_tun: entered promiscuous mode [ 272.896639][ T8034] bridge0: port 3(syz_tun) entered blocking state [ 272.903286][ T8034] bridge0: port 3(syz_tun) entered forwarding state [ 275.442738][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 275.442753][ T28] audit: type=1326 audit(1761730021.847:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.475491][ T28] audit: type=1326 audit(1761730021.857:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.525848][ T28] audit: type=1326 audit(1761730021.877:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.587166][ T28] audit: type=1326 audit(1761730021.877:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.633930][ T28] audit: type=1326 audit(1761730021.877:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.668320][ T8105] loop0: detected capacity change from 0 to 64 [ 275.699681][ T28] audit: type=1326 audit(1761730021.877:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.749066][ T28] audit: type=1326 audit(1761730021.877:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.802555][ T28] audit: type=1326 audit(1761730021.877:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.849190][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.851329][ T28] audit: type=1326 audit(1761730021.877:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 275.920630][ T28] audit: type=1326 audit(1761730021.877:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f1639f8efc9 code=0x7ffc0000 [ 276.192886][ T8107] netlink: 'syz.0.680': attribute type 3 has an invalid length. [ 276.201597][ T8107] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.680'. [ 276.455772][ T5881] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 276.464754][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.482245][ T5881] usb 3-1: config 0 has no interfaces? [ 276.513104][ T5881] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 276.599568][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 276.608244][ T5881] usb 3-1: Product: syz [ 276.612968][ T5881] usb 3-1: SerialNumber: syz [ 276.625429][ T5881] usb 3-1: config 0 descriptor?? [ 277.418385][ T5881] usb 3-1: USB disconnect, device number 6 [ 281.998413][ T8184] tipc: Enabling of bearer rejected, already enabled [ 282.086623][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 282.086634][ T28] audit: type=1326 audit(1761730028.487:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.115051][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.179165][ T28] audit: type=1326 audit(1761730028.537:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.201269][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.210288][ T28] audit: type=1326 audit(1761730028.537:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.232474][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.240022][ T28] audit: type=1326 audit(1761730028.547:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.278284][ T28] audit: type=1326 audit(1761730028.547:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.300331][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.321398][ T28] audit: type=1326 audit(1761730028.557:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.360323][ T28] audit: type=1326 audit(1761730028.557:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.422566][ T28] audit: type=1326 audit(1761730028.557:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.479899][ T28] audit: type=1326 audit(1761730028.557:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.576868][ T28] audit: type=1326 audit(1761730028.557:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 282.599101][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.019063][ T2194] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 283.939350][ T2194] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.986250][ T2194] usb 2-1: config 0 has no interface number 0 [ 284.007375][ T2194] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 284.026263][ T2194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.055621][ T2194] usb 2-1: config 0 descriptor?? [ 284.067574][ T2194] usb 2-1: selecting invalid altsetting 1 [ 284.089634][ T2194] dvb_ttusb_budget: ttusb_init_controller: error [ 284.109385][ T2194] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 285.082923][ T2194] DVB: Unable to find symbol cx22700_attach() [ 285.179986][ T2194] DVB: Unable to find symbol tda10046_attach() [ 285.229144][ T2194] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 285.257506][ T2194] usb 2-1: USB disconnect, device number 9 [ 285.733709][ T8231] tipc: Failed to obtain node identity [ 285.739630][ T8231] tipc: Enabling of bearer rejected, failed to enable media [ 286.649951][ T8251] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 286.659650][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.729'. [ 286.779165][ T8251] team0: Port device geneve0 added [ 286.936622][ T8256] loop6: detected capacity change from 0 to 524287999 [ 287.026838][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.062639][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.072867][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 287.159907][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 287.169798][ C0] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 287.179977][ C0] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 2 [ 287.204511][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 287.213856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.355127][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'. [ 287.480454][ T5804] Bluetooth: hci0: hcon ffff888058b2c000 sent 1 < count 1023 [ 287.487927][ T5804] Bluetooth: hci0: hcon ffff888058b2c000 sent 0 < count 4 [ 287.495133][ T5804] Bluetooth: hci0: hcon ffff888058b2c000 sent 0 < count 2 [ 287.502384][ T5804] Bluetooth: hci0: hcon ffff888058b2c000 sent 0 < count 8 [ 287.588485][ T8264] pim6reg: entered allmulticast mode [ 288.713641][ T8282] trusted_key: syz.0.740 sent an empty control message without MSG_MORE. [ 289.022739][ T8288] tipc: Enabled bearer , priority 0 [ 291.034674][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 291.042528][ T8326] binder: 8325:8326 ioctl 4018620d 200000004a80 returned -16 [ 291.527029][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 292.278564][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'. [ 294.167173][ T8376] loop3: detected capacity change from 0 to 16 [ 294.193147][ T8376] erofs: (device loop3): mounted with root inode @ nid 36. [ 297.049118][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 297.279068][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 297.295988][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.304383][ T8] usb 3-1: config 0 has no interface number 0 [ 297.311053][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.326853][ T8] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.337807][ T8] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.353091][ T8] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 297.384287][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.426053][ T8] usb 3-1: config 0 descriptor?? [ 299.444790][ T8441] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 299.456910][ T8441] netlink: 'syz.2.789': attribute type 29 has an invalid length. [ 301.119119][ T27] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 301.312943][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.339070][ T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 301.395382][ T27] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 301.419635][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.462103][ T27] usb 4-1: config 0 descriptor?? [ 301.479839][ T27] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 301.486546][ T27] dvb-usb: bulk message failed: -22 (3/0) [ 301.560217][ T8473] misc userio: Invalid payload size [ 301.676062][ T8458] warning: `syz.3.810' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 302.361318][ T27] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 302.398544][ T27] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 302.408138][ T8458] veth0_to_team: entered promiscuous mode [ 302.425295][ T27] usb 4-1: media controller created [ 302.446636][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.524675][ T8478] input: syz1 as /devices/virtual/input/input8 [ 302.564438][ T27] dvb-usb: bulk message failed: -22 (6/0) [ 302.631195][ T27] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 302.679382][ T27] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 302.850575][ T8] usbhid 3-1:0.1: can't add hid device: -32 [ 302.862278][ T8] usbhid: probe of 3-1:0.1 failed with error -32 [ 302.884697][ T27] dvb-usb: schedule remote query interval to 150 msecs. [ 302.925854][ T27] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 303.080831][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 303.095571][ T27] dvb-usb: error while querying for an remote control event. [ 303.270317][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 303.282084][ T27] dvb-usb: error while querying for an remote control event. [ 303.295385][ T8] usb 3-1: USB disconnect, device number 7 [ 303.763951][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 303.812760][ T27] dvb-usb: error while querying for an remote control event. [ 304.286731][ T23] usb 4-1: USB disconnect, device number 11 [ 304.391472][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 304.607892][ T8503] misc userio: Invalid payload size [ 305.818699][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 305.818714][ T28] audit: type=1326 audit(1761730052.217:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 305.847497][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.115201][ T28] audit: type=1326 audit(1761730052.227:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 306.699622][ T28] audit: type=1326 audit(1761730052.227:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 306.723745][ T28] audit: type=1326 audit(1761730052.227:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 306.746039][ T28] audit: type=1326 audit(1761730052.227:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 306.768198][ T28] audit: type=1326 audit(1761730052.227:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 306.790504][ T28] audit: type=1326 audit(1761730052.227:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 306.790566][ T8516] IPVS: Scheduler module ip_vs_ not found [ 306.813330][ T28] audit: type=1326 audit(1761730052.247:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz.2.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 307.228013][ T8533] loop3: detected capacity change from 0 to 64 [ 307.532638][ T8538] netlink: 'syz.3.837': attribute type 3 has an invalid length. [ 307.540451][ T8538] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.837'. [ 309.552196][ T8562] loop2: detected capacity change from 0 to 64 [ 309.860093][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 309.939101][ T8575] netlink: 'syz.2.849': attribute type 3 has an invalid length. [ 309.946884][ T8575] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.849'. [ 310.554170][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 310.613227][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 310.623259][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 310.695552][ T8581] input: syz1 as /devices/virtual/input/input10 [ 310.889059][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.072202][ T5881] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.086722][ T5881] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.143539][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.173215][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.210661][ T5864] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 311.231829][ T5881] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.259080][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.267133][ T5881] usb 1-1: Product: syz [ 312.197404][ T5881] usb 1-1: Manufacturer: syz [ 312.263231][ T5881] cdc_wdm 1-1:1.0: skipping garbage [ 312.273316][ T5881] cdc_wdm 1-1:1.0: skipping garbage [ 312.278768][ T5881] cdc_wdm 1-1:1.0: skipping garbage [ 312.288666][ T5881] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 312.299035][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 312.312190][ T5864] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 312.323200][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.331322][ T5864] usb 4-1: Product: syz [ 312.335654][ T5864] usb 4-1: Manufacturer: syz [ 312.340525][ T5864] usb 4-1: SerialNumber: syz [ 312.366939][ T5864] usb 4-1: config 0 descriptor?? [ 312.509513][ T2194] usb 1-1: USB disconnect, device number 4 [ 312.785603][ T5864] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 312.814174][ T8600] netlink: 'syz.2.859': attribute type 4 has an invalid length. [ 312.815433][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.852008][ T5864] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 312.868754][ T5864] usb 4-1: media controller created [ 312.916865][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.083590][ T8604] loop1: detected capacity change from 0 to 64 [ 313.513963][ T8613] netlink: 'syz.1.861': attribute type 3 has an invalid length. [ 313.522008][ T8613] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.861'. [ 314.202446][ T5864] zl10353_read_register: readreg error (reg=127, ret==0) [ 314.210306][ T8587] dtv5100: wlen = 0, aborting. [ 314.219194][ T5864] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 314.227130][ T5864] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 314.800511][ T5864] usb 4-1: USB disconnect, device number 12 [ 315.081697][ T5864] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 315.634588][ T8644] loop2: detected capacity change from 0 to 64 [ 316.008161][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 316.024584][ T8650] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 316.039789][ T8648] netlink: 'syz.2.875': attribute type 3 has an invalid length. [ 316.047507][ T8648] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.875'. [ 316.085659][ T8650] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 316.095644][ T8638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.102534][ T8638] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 316.251756][ T8638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.258097][ T8638] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 316.275745][ T8638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.290577][ T8638] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 316.305657][ T8638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.317548][ T8638] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 316.342880][ T28] audit: type=1326 audit(1761730062.737:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.419104][ T28] audit: type=1326 audit(1761730062.737:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.499779][ T28] audit: type=1326 audit(1761730062.767:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.549235][ T28] audit: type=1326 audit(1761730062.767:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.609093][ T28] audit: type=1326 audit(1761730062.767:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.664162][ T28] audit: type=1326 audit(1761730062.767:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.762864][ T28] audit: type=1326 audit(1761730062.767:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.884585][ T28] audit: type=1326 audit(1761730062.767:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 316.989014][ T28] audit: type=1326 audit(1761730062.767:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 317.062257][ T28] audit: type=1326 audit(1761730062.767:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8651 comm="syz.3.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe8578efc9 code=0x7ffc0000 [ 317.084565][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.326084][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332800][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.047948][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 318.289467][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 318.369266][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 318.375792][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 318.819762][ T8660] misc userio: Invalid payload size [ 320.129402][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 320.359906][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 320.449330][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 320.455525][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 320.658374][ T8688] loop2: detected capacity change from 0 to 64 [ 321.100046][ T8695] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 321.107804][ T8695] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.890'. [ 321.726762][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'. [ 321.939743][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 321.939758][ T28] audit: type=1326 audit(1761730068.347:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.008178][ T28] audit: type=1326 audit(1761730068.347:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.030364][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.068052][ T8704] misc userio: Invalid payload size [ 322.149607][ T28] audit: type=1326 audit(1761730068.347:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.258396][ T28] audit: type=1326 audit(1761730068.347:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.280633][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.303429][ T28] audit: type=1326 audit(1761730068.347:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.331193][ T28] audit: type=1326 audit(1761730068.347:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.395288][ T28] audit: type=1326 audit(1761730068.347:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.417495][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.514850][ T28] audit: type=1326 audit(1761730068.347:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.609138][ T28] audit: type=1326 audit(1761730068.347:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.631351][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.679063][ T28] audit: type=1326 audit(1761730068.347:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8701 comm="syz.2.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 322.701395][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.918388][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.899'. [ 323.962438][ T8720] loop3: detected capacity change from 0 to 64 [ 324.302370][ T8726] netlink: 'syz.3.901': attribute type 3 has an invalid length. [ 324.310189][ T8726] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.901'. [ 325.987644][ T8741] misc userio: Invalid payload size [ 326.089010][ T5864] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 326.329443][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 327.224752][ T5864] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 327.240651][ T5864] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 327.304412][ T5864] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 327.391356][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.405596][ T5864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 327.423201][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.438032][ T5864] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 327.460249][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.474129][ T5864] usb 3-1: config 0 descriptor?? [ 327.722238][ T5864] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 327.778049][ T5864] usb 3-1: USB disconnect, device number 8 [ 327.818788][ T5864] usblp0: removed [ 327.909622][ T8753] loop0: detected capacity change from 0 to 64 [ 328.287308][ T8755] netlink: 'syz.0.911': attribute type 3 has an invalid length. [ 328.295232][ T8755] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.911'. [ 329.365887][ T8775] capability: warning: `syz.2.918' uses deprecated v2 capabilities in a way that may be insecure [ 329.700146][ T8778] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 330.195720][ T8791] loop1: detected capacity change from 0 to 64 [ 330.550869][ T8793] netlink: 'syz.1.923': attribute type 3 has an invalid length. [ 330.558629][ T8793] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.923'. [ 331.917790][ T8805] syzkaller0: entered promiscuous mode [ 331.931643][ T8805] syzkaller0: entered allmulticast mode [ 332.144049][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 333.576712][ T8813] misc userio: Invalid payload size [ 334.921503][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.930'. [ 334.966690][ T8819] bridge0: port 3(syz_tun) entered disabled state [ 335.038356][ T8819] syz_tun (unregistering): left allmulticast mode [ 335.079381][ T8819] syz_tun (unregistering): left promiscuous mode [ 335.110854][ T8819] bridge0: port 3(syz_tun) entered disabled state [ 335.145570][ T8826] loop0: detected capacity change from 0 to 64 [ 335.521612][ T8834] netlink: 'syz.0.933': attribute type 3 has an invalid length. [ 335.529413][ T8834] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.933'. [ 336.078041][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 336.333626][ T8844] misc userio: Invalid payload size [ 336.360588][ T8840] syzkaller0: entered promiscuous mode [ 336.366410][ T8840] syzkaller0: entered allmulticast mode [ 338.689244][ T8871] netlink: 64 bytes leftover after parsing attributes in process `syz.0.944'. [ 339.286616][ T8880] loop3: detected capacity change from 0 to 64 [ 339.682501][ T8882] netlink: 'syz.3.948': attribute type 3 has an invalid length. [ 339.691166][ T8882] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.948'. [ 340.464701][ T8887] misc userio: Invalid payload size [ 341.821280][ T8914] loop0: detected capacity change from 0 to 64 [ 342.163699][ T8922] netlink: 'syz.0.958': attribute type 3 has an invalid length. [ 342.171644][ T8922] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.958'. [ 342.339316][ T5881] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 342.508819][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 342.669066][ T5881] usb 2-1: device descriptor read/64, error -32 [ 342.960235][ T5881] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 343.117670][ T8924] syzkaller0: entered promiscuous mode [ 343.147746][ T8924] syzkaller0: entered allmulticast mode [ 343.165514][ T8928] syzkaller0: entered promiscuous mode [ 343.177491][ T8928] syzkaller0: entered allmulticast mode [ 343.198404][ T5881] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.219645][ T5881] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 343.243978][ T5881] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.267109][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.313770][ T5881] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 343.338760][ T5881] usb 2-1: invalid MIDI out EP 0 [ 343.626964][ T5881] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 343.862939][ T8917] fuse: Unknown parameter 'fd0x000000000000000e' [ 345.241459][ T8950] loop2: detected capacity change from 0 to 128 [ 345.275860][ T8950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.293418][ T8950] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.438422][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.991909][ T5864] usb 2-1: USB disconnect, device number 11 [ 347.284452][ T8969] misc userio: Invalid payload size [ 347.469742][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 347.469758][ T28] audit: type=1326 audit(1761730093.867:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.503495][ T28] audit: type=1326 audit(1761730093.867:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.565019][ T28] audit: type=1326 audit(1761730093.907:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.655706][ T28] audit: type=1326 audit(1761730093.907:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.699995][ T28] audit: type=1326 audit(1761730093.907:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.722494][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.730318][ T8979] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 347.739647][ T28] audit: type=1326 audit(1761730093.907:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.762790][ T28] audit: type=1326 audit(1761730093.927:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.788532][ T28] audit: type=1326 audit(1761730093.927:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.812421][ T28] audit: type=1326 audit(1761730093.927:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.859410][ T28] audit: type=1326 audit(1761730093.927:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.2.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 347.920457][ T8979] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 348.494146][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 348.624166][ T8989] syzkaller0: entered promiscuous mode [ 348.643790][ T8989] syzkaller0: entered allmulticast mode [ 349.362522][ T9000] mmap: syz.1.986 (9000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 350.475039][ T9026] syzkaller0: entered promiscuous mode [ 350.488890][ T9026] syzkaller0: entered allmulticast mode [ 351.387879][ T9034] netlink: 48 bytes leftover after parsing attributes in process `syz.3.998'. [ 351.557905][ T9036] misc userio: Invalid payload size [ 354.024713][ T9059] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1007'. [ 354.564904][ T9072] syzkaller0: entered promiscuous mode [ 354.581072][ T9072] syzkaller0: entered allmulticast mode [ 355.333861][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 355.444503][ T9084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1017'. [ 355.619683][ T9070] syz.3.1011 (9070): drop_caches: 2 [ 355.775540][ T9093] syzkaller0: entered promiscuous mode [ 355.782338][ T9093] syzkaller0: entered allmulticast mode [ 355.859058][ T2194] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 356.051456][ T2194] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 356.066461][ T2194] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 356.081569][ T2194] usb 1-1: string descriptor 0 read error: -22 [ 356.088193][ T2194] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 356.097672][ T2194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.295315][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 356.295329][ T28] audit: type=1326 audit(1761730102.697:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.383569][ T2194] cdc_ncm 1-1:1.0: bind() failure [ 356.398082][ T2194] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 356.405544][ T2194] cdc_ncm 1-1:1.1: bind() failure [ 356.411653][ T28] audit: type=1326 audit(1761730102.707:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.454749][ T28] audit: type=1326 audit(1761730102.707:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.470158][ T2194] usb 1-1: USB disconnect, device number 5 [ 356.568070][ T28] audit: type=1326 audit(1761730102.707:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.656396][ T28] audit: type=1326 audit(1761730102.707:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.753978][ T28] audit: type=1326 audit(1761730102.707:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.805766][ T9114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1027'. [ 356.816079][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1023'. [ 356.871361][ T28] audit: type=1326 audit(1761730102.707:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 356.957534][ T28] audit: type=1326 audit(1761730102.727:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 357.044331][ T28] audit: type=1326 audit(1761730102.737:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 357.113056][ T28] audit: type=1326 audit(1761730102.737:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9104 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf19d8efc9 code=0x7ffc0000 [ 357.849610][ T9127] syzkaller0: entered promiscuous mode [ 357.865367][ T9127] syzkaller0: entered allmulticast mode [ 358.130277][ T9134] loop1: detected capacity change from 0 to 128 [ 358.173407][ T9134] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.202299][ T9134] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.339479][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.585449][ T9147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1036'. [ 360.324124][ T9164] syzkaller0: entered promiscuous mode [ 360.331700][ T9166] loop1: detected capacity change from 0 to 128 [ 360.354091][ T9164] syzkaller0: entered allmulticast mode [ 360.357126][ T9166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.390525][ T9166] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.462047][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.839106][ T9180] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1047'. [ 362.886093][ T9195] loop2: detected capacity change from 0 to 16 [ 363.576851][ T9195] erofs: (device loop2): mounted with root inode @ nid 36. [ 364.060276][ T9199] loop1: detected capacity change from 0 to 128 [ 364.113535][ T9199] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.149748][ T9199] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.183624][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.280351][ T9209] syzkaller0: entered promiscuous mode [ 365.296698][ T9209] syzkaller0: entered allmulticast mode [ 365.338685][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 365.338700][ T28] audit: type=1804 audit(1761730111.737:413): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1057" name="/newroot/260/file1" dev="fuse" ino=1 res=1 errno=0 [ 366.138544][ T28] audit: type=1804 audit(1761730112.537:414): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1069" name="/newroot/266/file1" dev="fuse" ino=1 res=1 errno=0 [ 366.229539][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 366.340087][ T9244] syzkaller0: entered promiscuous mode [ 366.351685][ T9244] syzkaller0: entered allmulticast mode [ 366.459050][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 366.483653][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 366.512053][ T8] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 366.537307][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.558198][ T8] usb 4-1: config 0 descriptor?? [ 366.878868][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 366.884992][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 366.953260][ T8] usb 4-1: USB disconnect, device number 13 [ 367.339166][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 367.425951][ T28] audit: type=1804 audit(1761730113.827:415): pid=9261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1079" name="/newroot/268/file1" dev="fuse" ino=1 res=1 errno=0 [ 367.562779][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 367.593164][ T23] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 367.616741][ T23] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.656740][ T23] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 367.666592][ T9270] syzkaller0: entered promiscuous mode [ 367.670013][ T23] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 367.680974][ T23] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.682317][ T9270] syzkaller0: entered allmulticast mode [ 367.711999][ T23] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 367.740476][ T23] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 367.748417][ T23] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 367.764470][ T23] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 367.785921][ T23] usb 1-1: string descriptor 0 read error: -22 [ 367.792645][ T23] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 367.802314][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.831472][ T23] adutux 1-1:168.0: interrupt endpoints not found [ 368.072704][ T9283] loop3: detected capacity change from 0 to 512 [ 368.099144][ T5881] usb 1-1: USB disconnect, device number 6 [ 368.136880][ T9283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.157647][ T9283] ext4 filesystem being mounted at /279/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.180512][ T9283] Quota error (device loop3): write_blk: dquota write failed [ 368.188212][ T9283] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 368.197813][ T9283] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 368.209109][ T9283] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1086: Failed to acquire dquot type 1 [ 368.304425][ T28] audit: type=1800 audit(1761730114.677:416): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1086" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 368.377562][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.797510][ T28] audit: type=1804 audit(1761730115.197:417): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1089" name="/newroot/281/file1" dev="fuse" ino=1 res=1 errno=0 [ 368.818003][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.074780][ T9308] syzkaller0: entered promiscuous mode [ 369.085032][ T9308] syzkaller0: entered allmulticast mode [ 369.882322][ T9329] loop0: detected capacity change from 0 to 128 [ 369.931447][ T9329] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.956389][ T9329] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.985156][ T28] audit: type=1804 audit(1761730116.377:418): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1101" name="/newroot/270/file1" dev="fuse" ino=1 res=1 errno=0 [ 370.066743][ T9338] syzkaller0: entered promiscuous mode [ 370.189227][ T9338] syzkaller0: entered allmulticast mode [ 370.577670][ T9350] loop1: detected capacity change from 0 to 1024 [ 370.645858][ T9355] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.725171][ T9355] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 370.761634][ T9355] comedi comedi3: 8255: I/O port conflict (0x40000005,4) [ 370.783915][ T9355] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 370.804498][ T9355] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.829653][ T9355] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 371.099675][ T28] audit: type=1326 audit(1761730117.507:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.159693][ T28] audit: type=1804 audit(1761730117.507:420): pid=9363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1115" name="/newroot/273/file1" dev="fuse" ino=1 res=1 errno=0 [ 371.186857][ T9368] syzkaller0: entered promiscuous mode [ 371.209221][ T28] audit: type=1326 audit(1761730117.527:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.229218][ T9368] syzkaller0: entered allmulticast mode [ 371.268279][ T28] audit: type=1326 audit(1761730117.527:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.343454][ T28] audit: type=1326 audit(1761730117.527:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.365778][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.422620][ T28] audit: type=1326 audit(1761730117.527:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.509016][ T28] audit: type=1326 audit(1761730117.527:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.579042][ T28] audit: type=1326 audit(1761730117.527:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.601329][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.630138][ T9377] loop2: detected capacity change from 0 to 4096 [ 371.672744][ T28] audit: type=1326 audit(1761730117.537:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 371.730114][ T9377] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 371.770847][ T28] audit: type=1326 audit(1761730117.537:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d78efc9 code=0x7ffc0000 [ 372.017824][ T9379] loop1: detected capacity change from 0 to 40427 [ 372.037760][ T9379] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 372.038013][ T9377] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 372.100977][ T9377] ntfs3: loop2: Failed to load $Bitmap (-22). [ 372.238628][ T5792] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.312104][ T9384] loop1: detected capacity change from 0 to 128 [ 372.813547][ T9401] syzkaller0: entered promiscuous mode [ 372.819364][ T9401] syzkaller0: entered allmulticast mode [ 372.964005][ T9406] loop0: detected capacity change from 0 to 2048 [ 373.028036][ T9408] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.187835][ T9410] loop2: detected capacity change from 0 to 128 [ 373.220715][ T9410] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.236251][ T9410] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.312103][ T9414] loop0: detected capacity change from 0 to 2364 [ 373.823613][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.890168][ T9425] loop3: detected capacity change from 0 to 4096 [ 373.911565][ T9425] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 374.027212][ T9425] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 374.039679][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 374.046578][ T9425] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 374.057759][ T27] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.093867][ T27] usb 1-1: config 0 has no interface number 0 [ 374.113833][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.133168][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.154276][ T27] usb 1-1: Product: syz [ 374.158516][ T27] usb 1-1: Manufacturer: syz [ 374.173455][ T27] usb 1-1: SerialNumber: syz [ 374.191858][ T27] usb 1-1: config 0 descriptor?? [ 374.216491][ T27] smsc95xx v2.0.0 [ 374.386126][ T9435] syzkaller0: entered promiscuous mode [ 374.393106][ T9435] syzkaller0: entered allmulticast mode [ 374.629475][ T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 374.671345][ T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.776362][ T9439] loop3: detected capacity change from 0 to 256 [ 374.910692][ T9437] loop1: detected capacity change from 0 to 40427 [ 374.925427][ T9437] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 374.978711][ T9437] F2FS-fs (loop1): invalid crc value [ 375.004153][ T9437] F2FS-fs (loop1): Found nat_bits in checkpoint [ 375.080660][ T9437] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 375.302056][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.600643][ T9453] loop2: detected capacity change from 0 to 512 [ 375.619037][ T9453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 375.651327][ T9453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 375.738036][ T9453] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 375.793549][ T9453] EXT4-fs (loop2): 1 truncate cleaned up [ 375.805659][ T9453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.877870][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.917882][ T9459] loop1: detected capacity change from 0 to 512 [ 375.927903][ T9459] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 375.973643][ T9459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 375.995897][ T9459] EXT4-fs (loop1): orphan cleanup on readonly fs [ 376.004354][ T9459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1151: bg 0: block 361: padding at end of block bitmap is not set [ 376.039023][ T9459] EXT4-fs (loop1): Remounting filesystem read-only [ 376.061427][ T9459] EXT4-fs (loop1): 1 truncate cleaned up [ 376.077000][ T9459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 376.140884][ T9459] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1151: dx entry: limit 0 != root limit 125 [ 376.153252][ T9459] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1151: Corrupt directory, running e2fsck is recommended [ 376.170640][ T9459] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1151: dx entry: limit 0 != root limit 125 [ 376.177801][ T9463] loop2: detected capacity change from 0 to 4096 [ 376.182560][ T9459] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1151: Corrupt directory, running e2fsck is recommended [ 376.215461][ T9459] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1151: dx entry: limit 0 != root limit 125 [ 376.277106][ T9464] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.289170][ T9459] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1151: Corrupt directory, running e2fsck is recommended [ 376.306161][ T9466] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1151: dx entry: limit 0 != root limit 125 [ 376.323510][ T9466] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1151: Corrupt directory, running e2fsck is recommended [ 376.331380][ T9467] syzkaller0: entered promiscuous mode [ 376.343241][ T9467] syzkaller0: entered allmulticast mode [ 376.375890][ T9459] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1151: dx entry: limit 0 != root limit 125 [ 376.409986][ T9459] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1151: Corrupt directory, running e2fsck is recommended [ 376.525450][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 376.570593][ T27] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 376.591306][ T27] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 376.636847][ T27] usb 1-1: USB disconnect, device number 7 [ 376.720704][ T9473] loop3: detected capacity change from 0 to 128 [ 376.758726][ T9473] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.840984][ T9473] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.267351][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.307971][ T9488] syzkaller0: entered promiscuous mode [ 377.314981][ T9488] syzkaller0: entered allmulticast mode [ 377.565668][ T9497] loop1: detected capacity change from 0 to 1024 [ 377.640688][ T9497] __quota_error: 4 callbacks suppressed [ 377.640708][ T9497] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 377.688395][ T9497] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 377.708597][ T9497] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1166: Failed to acquire dquot type 0 [ 377.745934][ T9497] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 377.771213][ T9497] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.1166: corrupted inode contents [ 377.781838][ T9494] loop3: detected capacity change from 0 to 40427 [ 377.798433][ T9494] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 377.808611][ T9497] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #13: comm syz.1.1166: mark_inode_dirty error [ 377.828390][ T9494] F2FS-fs (loop3): invalid crc value [ 377.836202][ T9497] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.1166: corrupted inode contents [ 377.853036][ T9497] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #13: comm syz.1.1166: mark_inode_dirty error [ 377.865954][ T9497] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.1166: corrupted inode contents [ 377.885319][ T9494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 377.914386][ T9497] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 377.935503][ T9497] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #13: comm syz.1.1166: corrupted inode contents [ 377.952161][ T9494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 377.970001][ T9497] EXT4-fs error (device loop1): ext4_truncate:4294: inode #13: comm syz.1.1166: mark_inode_dirty error [ 377.983609][ T9497] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 378.009888][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 378.034389][ T9497] EXT4-fs (loop1): 1 truncate cleaned up [ 378.056450][ T9497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.212715][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 378.225215][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 378.251758][ T8] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 378.281653][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.325951][ T8] usb 1-1: config 0 descriptor?? [ 378.355328][ T5789] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 74: comm syz-executor: path /293/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 378.414247][ T9506] loop3: detected capacity change from 0 to 2048 [ 378.440212][ T9506] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 378.460283][ T5789] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 378.479430][ T9506] NILFS (loop3): mounting unchecked fs [ 378.486694][ T5789] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 378.509221][ T5789] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz-executor: Failed to acquire dquot type 0 [ 378.564785][ T9506] NILFS (loop3): recovery complete [ 378.584267][ T9511] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.652519][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 378.658635][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 378.696956][ T8] usb 1-1: USB disconnect, device number 8 [ 378.767177][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.774998][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.077690][ T9517] loop2: detected capacity change from 0 to 256 [ 379.149699][ T9519] syzkaller0: entered promiscuous mode [ 379.166498][ T9519] syzkaller0: entered allmulticast mode [ 379.179516][ T9517] FAT-fs (loop2): Directory bread(block 64) failed [ 379.186512][ T9517] FAT-fs (loop2): Directory bread(block 65) failed [ 379.214527][ T9517] FAT-fs (loop2): Directory bread(block 66) failed [ 379.226134][ T8750] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.229475][ T9517] FAT-fs (loop2): Directory bread(block 67) failed [ 379.252272][ T9517] FAT-fs (loop2): Directory bread(block 68) failed [ 379.278336][ T9517] FAT-fs (loop2): Directory bread(block 69) failed [ 379.285464][ T9517] FAT-fs (loop2): Directory bread(block 70) failed [ 379.292759][ T9517] FAT-fs (loop2): Directory bread(block 71) failed [ 379.360503][ T9517] FAT-fs (loop2): Directory bread(block 72) failed [ 379.367113][ T9517] FAT-fs (loop2): Directory bread(block 73) failed [ 379.501762][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 379.816315][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.967830][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.315095][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.433985][ T5791] bridge0: port 3(syz_tun) entered disabled state [ 380.525456][ T5791] syz_tun (unregistering): left allmulticast mode [ 380.599943][ T5791] syz_tun (unregistering): left promiscuous mode [ 380.610189][ T5791] bridge0: port 3(syz_tun) entered disabled state [ 380.779802][ T5792] bridge0: port 3(syz_tun) entered disabled state [ 380.851267][ T5792] syz_tun (unregistering): left allmulticast mode [ 380.857780][ T5792] syz_tun (unregistering): left promiscuous mode [ 380.872258][ T5792] bridge0: port 3(syz_tun) entered disabled state [ 381.923970][ T49] hsr_slave_0: left promiscuous mode [ 381.932951][ T49] hsr_slave_1: left promiscuous mode [ 381.941152][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.948661][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.957764][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.965668][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.973765][ T49] bridge_slave_1: left allmulticast mode [ 381.980172][ T49] bridge_slave_1: left promiscuous mode [ 381.987610][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.998469][ T49] bridge_slave_0: left allmulticast mode [ 382.004298][ T49] bridge_slave_0: left promiscuous mode [ 382.010212][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.043398][ T49] veth1_macvtap: left promiscuous mode [ 382.051739][ T49] veth0_macvtap: left promiscuous mode [ 382.057364][ T49] veth1_vlan: left promiscuous mode [ 382.063052][ T49] veth0_vlan: left promiscuous mode [ 382.231957][ T49] pim6reg (unregistering): left allmulticast mode [ 382.765719][ T49] team0 (unregistering): Port device team_slave_1 removed [ 382.819691][ T49] team0 (unregistering): Port device team_slave_0 removed [ 382.871083][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.933635][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.532993][ T49] bond0 (unregistering): Released all slaves [ 384.030725][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.100481][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.181276][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.242933][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.418142][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.505701][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.578722][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.680838][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.696538][ T35] tipc: Resetting bearer [ 384.837871][ T49] tipc: Disabling bearer [ 384.847624][ T49] tipc: Disabling bearer [ 384.864337][ T49] tipc: Left network mode [ 385.927659][ T49] bond0: (slave wlan1): Releasing backup interface [ 386.055218][ T49] hsr_slave_0: left promiscuous mode [ 386.061612][ T49] hsr_slave_1: left promiscuous mode [ 386.067641][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.075332][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.083898][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.091419][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.108460][ T49] bridge_slave_1: left allmulticast mode [ 386.114285][ T49] bridge_slave_1: left promiscuous mode [ 386.121333][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.130980][ T49] bridge_slave_0: left allmulticast mode [ 386.136799][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.152881][ T49] hsr_slave_0: left promiscuous mode [ 386.158844][ T49] hsr_slave_1: left promiscuous mode [ 386.164936][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.173255][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.181516][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.189045][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.196769][ T49] bridge_slave_1: left allmulticast mode [ 386.203205][ T49] bridge_slave_1: left promiscuous mode [ 386.208956][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.221601][ T49] bridge_slave_0: left allmulticast mode [ 386.227279][ T49] bridge_slave_0: left promiscuous mode [ 386.233291][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.276276][ T49] veth1_macvtap: left promiscuous mode [ 386.281952][ T49] veth0_macvtap: left promiscuous mode [ 386.293893][ T49] bridge0: left promiscuous mode [ 386.303667][ T49] veth1_macvtap: left promiscuous mode [ 386.309578][ T49] veth0_macvtap: left promiscuous mode [ 386.316329][ T49] veth1_vlan: left promiscuous mode [ 386.321895][ T49] veth0_vlan: left promiscuous mode [ 386.611163][ T49] pimreg3 (unregistering): left allmulticast mode [ 387.010120][ T49] team0 (unregistering): Port device team_slave_1 removed [ 387.074100][ T49] team0 (unregistering): Port device team_slave_0 removed [ 387.133106][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.194542][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.763831][ T49] bond0 (unregistering): Released all slaves [ 388.341889][ T49] team0 (unregistering): Port device team_slave_1 removed [ 388.392146][ T49] team0 (unregistering): Port device team_slave_0 removed [ 388.438729][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.494707][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.898386][ T49] bond0 (unregistering): Released all slaves