last executing test programs: 6.142769244s ago: executing program 2 (id=1858): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fd", 0x1}], 0x1, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) 4.746122446s ago: executing program 2 (id=1863): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44d", 0x36}], 0x1) 4.663121037s ago: executing program 3 (id=1866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r4, 0x0, 0x0, 0x800) creat(&(0x7f0000000380)='./bus\x00', 0x8c) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x5b, 0x7, 0x7, 0x8, 0xd, 0x2}, 0xc) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) 4.561357008s ago: executing program 2 (id=1867): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) 3.85134756s ago: executing program 2 (id=1869): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x154, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x12f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x77, "3e115be9fc8530ca8c5bb257b3f95716bf75291a49c2eb939a96df180828988e87fc73ea49fc5cab256a312a269fa729a37808c9699b33810117da37c36517e22fafb79d4cc3a402764792e64b509592a716c9c64e436c2734f30d1c6a9edb194a215ef9ea890b01e8009e96a7519919b9af2b39a029a2"}, {0xdd, 0x64, "d43f7e14451f21a2ed68b07b41f445e9d2126a3b90b56ab03b71c487d5b60537ad8905905c1ea93995b86fbc5e58b190f756a5eab038f7798ba061e46621b32d5bd221cfd56d8846522707cdff7722bc660521fcaa41afc8014cb0657032c700671169c3"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.650218793s ago: executing program 0 (id=1870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 3.401634036s ago: executing program 2 (id=1872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$xdp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="efc928ef", 0x4}], 0x1, 0x0, 0x0, 0x24004010}, 0x40000c4) 3.335080118s ago: executing program 0 (id=1873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000100), 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 3.302418188s ago: executing program 2 (id=1874): socket(0xa, 0x2400000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x200000000000001d, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) 3.071479242s ago: executing program 3 (id=1877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) sendmsg$xdp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="efc928ef", 0x4}], 0x1, 0x0, 0x0, 0x24004010}, 0x40000c4) 2.999958353s ago: executing program 1 (id=1878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x8}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.298975684s ago: executing program 0 (id=1879): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x6, 0x3, "59c3ab"}, 0xb) 2.184086146s ago: executing program 3 (id=1880): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 2.183226086s ago: executing program 0 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfb1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfbf) 2.130920867s ago: executing program 1 (id=1882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) 2.033071838s ago: executing program 3 (id=1883): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000024c0)=""/4064, 0xfe0}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000044c0)=""/4103, 0x1007}, {&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xa}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 1.974556019s ago: executing program 1 (id=1884): socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c010) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x20840) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4(r1, 0x0, &(0x7f0000000200), 0x80000) 1.853311781s ago: executing program 3 (id=1885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r4, 0x0, 0x0, 0x800) creat(&(0x7f0000000380)='./bus\x00', 0x8c) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x5b, 0x7, 0x7, 0x8, 0xd, 0x2}, 0xc) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) 1.778120862s ago: executing program 0 (id=1886): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b205}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x20}}, 0x0) 805.240947ms ago: executing program 0 (id=1887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000100), 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 757.428208ms ago: executing program 1 (id=1888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) sendmsg$xdp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="efc928ef", 0x4}], 0x1, 0x0, 0x0, 0x24004010}, 0x40000c4) 622.17045ms ago: executing program 1 (id=1889): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 499.481602ms ago: executing program 1 (id=1890): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) openat$mixer(0xffffffffffffff9c, 0x0, 0x84802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x70) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r3 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000200)=0x40) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0xfffffffc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0x8000d, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x1, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0xa1, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5d, 0xffffffff]}}) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=1891): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f", 0x38}], 0x1) kernel console output (not intermixed with test programs): ding clean mount [ 121.916470][ T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.934631][ T6360] XFS (loop3): Quotacheck needed: Please wait. [ 121.950871][ T785] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 121.959739][ T785] usb 2-1: invalid MIDI out EP 0 [ 122.071290][ T6360] XFS (loop3): Quotacheck: Done. [ 122.166584][ T785] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 122.203963][ T785] usb 2-1: USB disconnect, device number 2 [ 122.228589][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.449300][ T6393] loop0: detected capacity change from 0 to 32768 [ 123.472228][ T6393] XFS: ikeep mount option is deprecated. [ 123.574590][ T6393] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.877533][ T6393] XFS (loop0): Ending clean mount [ 123.921879][ T6393] XFS (loop0): Quotacheck needed: Please wait. [ 124.027927][ T6393] XFS (loop0): Quotacheck: Done. [ 124.708914][ T27] audit: type=1800 audit(1750168314.444:10): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 124.920996][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.094728][ T6428] netlink: 68 bytes leftover after parsing attributes in process `syz.3.138'. [ 125.186992][ T6423] loop2: detected capacity change from 0 to 32768 [ 125.229886][ T6423] XFS: ikeep mount option is deprecated. [ 125.332486][ T6423] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.582777][ T6423] XFS (loop2): Ending clean mount [ 125.632867][ T6423] XFS (loop2): Quotacheck needed: Please wait. [ 125.717566][ T6423] XFS (loop2): Quotacheck: Done. [ 126.440757][ T27] audit: type=1800 audit(1750168316.184:11): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.139" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 126.639887][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.648591][ T27] audit: type=1800 audit(1750168316.184:12): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.139" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 128.465227][ T5806] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.803850][ T5806] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 128.814657][ T5806] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.829140][ T5806] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.897270][ T5806] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.941707][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.156285][ T5806] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 129.195411][ T5806] usb 3-1: invalid MIDI out EP 0 [ 130.121231][ T5806] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 130.134204][ T5806] usb 3-1: USB disconnect, device number 10 [ 130.227894][ T6391] udevd[6391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.260616][ T6477] fuse: Unknown parameter 'group_i00000000000000000000' [ 131.732071][ T6495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.153'. [ 132.764870][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904704][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.304570][ T5778] Bluetooth: Wrong link type (-22) [ 136.343777][ T5773] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.544405][ T5773] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 136.575668][ T5773] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 136.600602][ T5773] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.641593][ T5773] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.668893][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.699120][ T6538] fuse: Unknown parameter 'group_id00000000000000000000' [ 136.712333][ T5773] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 136.739788][ T5773] usb 2-1: invalid MIDI out EP 0 [ 136.867329][ T5781] udevd[5781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.885720][ T5773] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 136.948311][ T5773] usb 2-1: USB disconnect, device number 3 [ 139.416955][ T6557] Process accounting resumed [ 139.523999][ T6559] netlink: 68 bytes leftover after parsing attributes in process `syz.1.172'. [ 139.581661][ T5778] Bluetooth: Wrong link type (-22) [ 139.587013][ T5778] Bluetooth: hci2: link tx timeout [ 139.593106][ T5778] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 139.602537][ T5778] Bluetooth: hci2: link tx timeout [ 139.609795][ T5778] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.597775][ T6568] loop0: detected capacity change from 0 to 32768 [ 140.607868][ T6568] XFS: ikeep mount option is deprecated. [ 140.704483][ T6568] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.763798][ T6579] fuse: Unknown parameter 'group_id00000000000000000000' [ 141.243272][ T6568] XFS (loop0): Ending clean mount [ 141.625696][ T6568] XFS (loop0): Quotacheck needed: Please wait. [ 141.669909][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 141.815572][ T6568] XFS (loop0): Quotacheck: Done. [ 142.779994][ T28] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 142.798753][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.983055][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 143.016004][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.058653][ T28] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 143.078046][ T28] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 143.088162][ T28] usb 3-1: Manufacturer: syz [ 143.120430][ T28] usb 3-1: config 0 descriptor?? [ 144.073210][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 144.189553][ T6604] Process accounting resumed [ 144.270516][ T50] Bluetooth: Wrong link type (-22) [ 144.345269][ T28] cougar 0003:060B:700A.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 144.744843][ T28] usb 3-1: USB disconnect, device number 11 [ 144.838209][ T6612] fido_id[6612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 146.248987][ T785] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.447264][ T6634] fuse: Bad value for 'user_id' [ 146.465383][ T6630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.190'. [ 146.577326][ T785] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 146.615358][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.636722][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.673583][ T785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 146.746116][ T785] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 146.765529][ T785] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 146.810610][ T785] usb 4-1: Manufacturer: syz [ 147.507013][ T6639] Process accounting resumed [ 147.547694][ T785] usb 4-1: config 0 descriptor?? [ 148.604059][ T785] usbhid 4-1:0.0: can't add hid device: -71 [ 148.655236][ T785] usbhid: probe of 4-1:0.0 failed with error -71 [ 148.714078][ T785] usb 4-1: USB disconnect, device number 3 [ 149.308904][ T1194] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 149.592743][ T1194] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.695466][ T1194] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.768558][ T1194] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.783163][ T1194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.860025][ T6648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.934944][ T1194] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 150.134530][ T6655] fuse: Unknown parameter 'grou00000000000000000000' [ 150.172360][ T5807] usb 1-1: USB disconnect, device number 7 [ 152.451683][ T6686] netlink: 68 bytes leftover after parsing attributes in process `syz.0.205'. [ 153.922210][ T6703] fuse: Bad value for 'fd' [ 155.379061][ T5806] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.694377][ T5806] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.801431][ T5806] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.909239][ T5806] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.940276][ T6719] fuse: Unknown parameter 'grou00000000000000000000' [ 155.975232][ T5806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.037003][ T6713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.082540][ T5806] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 156.292068][ T5806] usb 4-1: USB disconnect, device number 4 [ 156.558639][ T6731] netlink: 68 bytes leftover after parsing attributes in process `syz.0.219'. [ 160.925279][ T6771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.230'. [ 161.113334][ T6763] loop0: detected capacity change from 0 to 32768 [ 161.128724][ T6763] XFS: ikeep mount option is deprecated. [ 161.184673][ T6763] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.366436][ T6763] XFS (loop0): Ending clean mount [ 161.391635][ T6763] XFS (loop0): Quotacheck needed: Please wait. [ 161.463267][ T6763] XFS (loop0): Quotacheck: Done. [ 161.569029][ T5773] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 162.129979][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.130925][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.170762][ T5773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.223635][ T5773] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 162.241527][ T5773] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 162.275335][ T5773] usb 3-1: Manufacturer: syz [ 162.293307][ T5773] usb 3-1: config 0 descriptor?? [ 162.744904][ T5773] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 163.098304][ T5773] usb 3-1: USB disconnect, device number 12 [ 164.972050][ T785] Process accounting resumed [ 165.962464][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 165.996843][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 166.016614][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.244'. [ 166.196512][ T6822] loop1: detected capacity change from 0 to 32768 [ 166.209737][ T6822] XFS: ikeep mount option is deprecated. [ 166.244111][ T6822] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 166.359536][ T785] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 166.425818][ T6822] XFS (loop1): Ending clean mount [ 166.458059][ T6822] XFS (loop1): Quotacheck needed: Please wait. [ 166.529109][ T6822] XFS (loop1): Quotacheck: Done. [ 166.556164][ T785] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.583915][ T785] usb 4-1: not running at top speed; connect to a high speed hub [ 166.680026][ T785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 167.044929][ T785] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.176460][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.492127][ T785] usb 4-1: Product: syz [ 167.496375][ T785] usb 4-1: Manufacturer: syz [ 167.501906][ T785] usb 4-1: SerialNumber: syz [ 167.510971][ T5761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.549543][ T6827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.183956][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.366719][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.450005][ T6844] Process accounting resumed [ 169.012052][ T785] cdc_ncm 4-1:1.0: bind() failure [ 169.037189][ T785] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 169.063268][ T785] cdc_ncm 4-1:1.1: bind() failure [ 169.088086][ T785] usb 4-1: USB disconnect, device number 5 [ 172.404181][ T6875] loop3: detected capacity change from 0 to 32768 [ 173.236053][ T6884] Process accounting resumed [ 173.256980][ T6875] XFS: ikeep mount option is deprecated. [ 173.368411][ T6875] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.519658][ T5807] Process accounting resumed [ 173.759187][ T6875] XFS (loop3): Ending clean mount [ 173.785712][ T6875] XFS (loop3): Quotacheck needed: Please wait. [ 174.057632][ T6875] XFS (loop3): Quotacheck: Done. [ 174.124324][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.748997][ T1194] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 174.986175][ T1194] usb 3-1: no configurations [ 174.992249][ T1194] usb 3-1: can't read configurations, error -22 [ 175.306465][ T1194] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 177.883966][ T6932] Process accounting resumed [ 178.473685][ T6937] loop3: detected capacity change from 0 to 32768 [ 178.493724][ T6937] XFS: ikeep mount option is deprecated. [ 178.598009][ T6937] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 178.869307][ T1194] usb 3-1: device descriptor read/all, error -71 [ 178.885046][ T1194] usb usb3-port1: attempt power cycle [ 179.091729][ T6937] XFS (loop3): Ending clean mount [ 179.117224][ T6937] XFS (loop3): Quotacheck needed: Please wait. [ 179.171806][ T6937] XFS (loop3): Quotacheck: Done. [ 179.929100][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.062233][ T6977] Process accounting resumed [ 183.678867][ T785] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.698888][ T5807] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 183.850736][ T6994] loop2: detected capacity change from 0 to 32768 [ 183.876136][ T6994] XFS: ikeep mount option is deprecated. [ 183.928560][ T6994] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 183.945963][ T5807] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.957259][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.973983][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.984209][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.000194][ T5807] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.009651][ T5807] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.018580][ T5807] usb 4-1: Manufacturer: syz [ 184.027862][ T5807] usb 4-1: config 0 descriptor?? [ 184.121720][ T785] usb 1-1: no configurations [ 184.126410][ T785] usb 1-1: can't read configurations, error -22 [ 184.174679][ T6994] XFS (loop2): Ending clean mount [ 184.196357][ T6994] XFS (loop2): Quotacheck needed: Please wait. [ 184.271088][ T6994] XFS (loop2): Quotacheck: Done. [ 184.289089][ T785] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.497006][ T5807] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 184.510140][ T5807] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 184.529207][ T5807] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 185.161537][ T785] usb 1-1: no configurations [ 185.166185][ T785] usb 1-1: can't read configurations, error -22 [ 185.204235][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 185.241366][ T7007] program syz.3.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.251869][ T785] usb usb1-port1: attempt power cycle [ 185.688895][ T785] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 185.889326][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 185.905160][ T7011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.284'. [ 186.379380][ T9] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 188.597534][ T785] usb 1-1: device descriptor read/all, error -71 [ 189.546824][ T7023] Process accounting resumed [ 189.557525][ T5807] usb 4-1: USB disconnect, device number 6 [ 189.651600][ T7035] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 189.721421][ T7037] fuse: Bad value for 'rootmode' [ 190.304891][ T7039] loop1: detected capacity change from 0 to 32768 [ 190.333314][ T7039] ======================================================= [ 190.333314][ T7039] WARNING: The mand mount option has been deprecated and [ 190.333314][ T7039] and is ignored by this kernel. Remove the mand [ 190.333314][ T7039] option from the mount to silence this warning. [ 190.333314][ T7039] ======================================================= [ 190.427220][ T7039] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.891775][ T7039] XFS (loop1): Ending clean mount [ 191.001534][ T5761] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.878943][ T785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.055001][ T7084] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 194.210693][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.217063][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.471020][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 194.918171][ T785] usb 2-1: no configurations [ 194.928850][ T785] usb 2-1: can't read configurations, error -22 [ 195.078875][ T9] usb 4-1: device descriptor read/64, error -71 [ 195.089052][ T785] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 195.568943][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 195.729269][ T9] usb 4-1: device descriptor read/64, error -71 [ 195.861531][ T9] usb usb4-port1: attempt power cycle [ 196.157547][ T785] usb 2-1: device descriptor read/all, error -71 [ 196.189145][ T785] usb usb2-port1: attempt power cycle [ 196.283978][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 196.283989][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 196.284063][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 196.385127][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 196.430961][ T9] usb 4-1: device descriptor read/8, error -71 [ 196.709385][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 197.387492][ T9] usb 4-1: device descriptor read/8, error -71 [ 197.840621][ T7110] loop2: detected capacity change from 0 to 512 [ 197.886879][ T7110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.101128][ T9] usb usb4-port1: unable to enumerate USB device [ 198.121209][ T7110] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.171645][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.185198][ T7110] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.254331][ T27] audit: type=1800 audit(1750168387.954:13): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.313" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 198.345324][ T27] audit: type=1800 audit(1750168387.964:14): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.313" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 198.365621][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.545287][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.333505][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 200.346653][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 200.355986][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 201.453265][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.708839][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 202.453426][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.848855][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 202.860662][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.873725][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 202.888558][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.969723][ T8] usb 3-1: config 0 descriptor?? [ 203.139176][ T5828] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.292134][ T7156] loop0: detected capacity change from 0 to 32768 [ 204.394587][ T7156] gfs2: fsid=meta: Trying to join cluster "lock_nolock", "meta" [ 204.402765][ T7156] gfs2: fsid=meta: Now mounting FS (format 1802)... [ 204.426323][ T7156] gfs2: fsid=meta.s: fatal: filesystem consistency error [ 204.426323][ T7156] inode = 0 19 [ 204.426323][ T7156] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472 [ 204.452447][ T7156] gfs2: fsid=meta.s: G: s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 204.463421][ T7156] gfs2: fsid=meta.s: H: s:SH f:eEcH e:0 p:7156 [syz.0.325] init_journal+0x17f1/0x2260 [ 204.473482][ T7156] gfs2: fsid=meta.s: I: n:0/19 t:4 f:0x00 d:0x00000000 s:0 p:0 [ 204.481213][ T7156] gfs2: fsid=meta.s: about to withdraw this file system [ 204.488443][ T7156] gfs2: fsid=meta.s: Journal recovery skipped for jid 0 until next mount. [ 204.497763][ T7156] gfs2: fsid=meta.s: Glock dequeues delayed: 0 [ 204.504395][ T7156] gfs2: fsid=meta.s: File system withdrawn [ 204.510313][ T7156] CPU: 0 PID: 7156 Comm: syz.0.325 Not tainted 6.6.93-syzkaller #0 [ 204.518231][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.528313][ T7156] Call Trace: [ 204.531619][ T7156] [ 204.534586][ T7156] dump_stack_lvl+0x16c/0x230 [ 204.539316][ T7156] ? kobject_uevent_env+0x363/0x8c0 [ 204.544537][ T7156] ? show_regs_print_info+0x20/0x20 [ 204.549752][ T7156] ? load_image+0x3b0/0x3b0 [ 204.554285][ T7156] ? kobject_uevent_env+0x363/0x8c0 [ 204.559510][ T7156] gfs2_withdraw+0xf16/0x14b0 [ 204.564310][ T7156] ? gfs2_lm+0x220/0x220 [ 204.568584][ T7156] ? gfs2_consist_inode_i+0xf5/0x110 [ 204.573902][ T7156] gfs2_inode_refresh+0xb83/0xff0 [ 204.579026][ T7156] ? gfs2_inode_metasync+0xf0/0xf0 [ 204.584156][ T7156] ? gfs2_glock_nq+0xd4f/0x1420 [ 204.589027][ T7156] gfs2_instantiate+0x162/0x220 [ 204.593899][ T7156] gfs2_glock_wait+0x1d4/0x2a0 [ 204.598687][ T7156] check_journal_clean+0x11d/0x300 [ 204.603853][ T7156] ? gfs2_trans_remove_revoke+0x370/0x370 [ 204.609701][ T7156] ? init_journal+0x17f1/0x2260 [ 204.614607][ T7156] ? __rwlock_init+0x150/0x150 [ 204.619403][ T7156] ? do_raw_spin_unlock+0x121/0x230 [ 204.624647][ T7156] ? _raw_spin_unlock+0x28/0x40 [ 204.629588][ T7156] ? gfs2_jdesc_find+0xab/0xc0 [ 204.634363][ T7156] init_journal+0x17f1/0x2260 [ 204.639052][ T7156] ? gfs2_glock_dq_uninit+0x28/0xe0 [ 204.644268][ T7156] ? init_inodes+0xdb/0x320 [ 204.648777][ T7156] ? vsnprintf+0x7b2/0x1a40 [ 204.653307][ T7156] ? _compound_head+0x120/0x120 [ 204.658162][ T7156] ? vsnprintf+0x1957/0x1a40 [ 204.662781][ T7156] ? snprintf+0xdb/0x120 [ 204.667035][ T7156] ? init_inodes+0xdb/0x320 [ 204.671539][ T7156] ? vscnprintf+0x80/0x80 [ 204.675897][ T7156] ? gfs2_glock_nq_num+0x183/0x1c0 [ 204.681018][ T7156] init_inodes+0xdb/0x320 [ 204.685350][ T7156] gfs2_fill_super+0x1815/0x1f80 [ 204.690411][ T7156] ? gfs2_reconfigure+0xb10/0xb10 [ 204.695481][ T7156] ? init_locking+0xb8/0x200 [ 204.700099][ T7156] ? setup_bdev_super+0x56b/0x660 [ 204.705150][ T7156] get_tree_bdev+0x3e4/0x510 [ 204.709813][ T7156] ? end_current_label_crit_section+0x170/0x170 [ 204.716103][ T7156] ? gfs2_reconfigure+0xb10/0xb10 [ 204.721180][ T7156] ? setup_bdev_super+0x660/0x660 [ 204.726252][ T7156] gfs2_get_tree+0x51/0x1e0 [ 204.730802][ T7156] vfs_get_tree+0x8c/0x280 [ 204.735254][ T7156] do_new_mount+0x24b/0xa40 [ 204.739794][ T7156] __se_sys_mount+0x2da/0x3c0 [ 204.744514][ T7156] ? __x64_sys_mount+0xc0/0xc0 [ 204.749307][ T7156] ? lockdep_hardirqs_on+0x98/0x150 [ 204.754520][ T7156] ? __x64_sys_mount+0x20/0xc0 [ 204.759316][ T7156] do_syscall_64+0x55/0xb0 [ 204.763765][ T7156] ? clear_bhb_loop+0x40/0x90 [ 204.768459][ T7156] ? clear_bhb_loop+0x40/0x90 [ 204.773163][ T7156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.779154][ T7156] RIP: 0033:0x7f081e1900ca [ 204.783576][ T7156] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.803207][ T7156] RSP: 002b:00007f081efdfe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.811649][ T7156] RAX: ffffffffffffffda RBX: 00007f081efdfef0 RCX: 00007f081e1900ca [ 204.819637][ T7156] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f081efdfeb0 [ 204.827637][ T7156] RBP: 0000200000000400 R08: 00007f081efdfef0 R09: 0000000001000004 [ 204.835632][ T7156] R10: 0000000001000004 R11: 0000000000000246 R12: 0000200000012500 [ 204.843604][ T7156] R13: 00007f081efdfeb0 R14: 000000000001263f R15: 0000200000000240 [ 204.851635][ T7156] [ 204.855643][ T7156] gfs2: fsid=meta.s: Error -5 locking journal for spectator mount. [ 204.889954][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 204.896026][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 204.911594][ T8] usb 3-1: USB disconnect, device number 16 [ 205.419719][ T7165] netlink: 2052 bytes leftover after parsing attributes in process `syz.0.328'. [ 205.438680][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 206.274399][ T5828] usb 4-1: device descriptor read/all, error -71 [ 208.562980][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.335'. [ 208.582869][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.335'. [ 209.148947][ T5828] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.569138][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 209.584428][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.605988][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 209.636115][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.686717][ T5828] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 209.738864][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.768540][ T5828] usb 4-1: config 0 descriptor?? [ 209.821283][ T7198] netlink: 2052 bytes leftover after parsing attributes in process `syz.0.338'. [ 209.835301][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 210.679087][ T5828] usbhid 4-1:0.0: can't add hid device: -71 [ 210.685975][ T5828] usbhid: probe of 4-1:0.0 failed with error -71 [ 210.723960][ T5828] usb 4-1: USB disconnect, device number 13 [ 210.788870][ T28] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 211.032020][ T28] usb 2-1: no configurations [ 211.036737][ T28] usb 2-1: can't read configurations, error -22 [ 211.175608][ T7210] loop2: detected capacity change from 0 to 32768 [ 211.190931][ T28] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.199296][ T7210] XFS: ikeep mount option is deprecated. [ 211.248874][ T5828] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 211.339364][ T7210] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.534006][ T5828] usb 4-1: device descriptor read/64, error -71 [ 211.541242][ T28] usb 2-1: no configurations [ 211.545864][ T28] usb 2-1: can't read configurations, error -22 [ 211.559601][ T28] usb usb2-port1: attempt power cycle [ 211.750932][ T7210] XFS (loop2): Ending clean mount [ 211.759765][ T7210] XFS (loop2): Quotacheck needed: Please wait. [ 211.796873][ T7210] XFS (loop2): Quotacheck: Done. [ 211.959389][ T5828] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 212.029179][ T28] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.139111][ T5828] usb 4-1: device descriptor read/64, error -71 [ 212.650935][ T27] audit: type=1800 audit(1750168402.334:15): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.341" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 212.670779][ T27] audit: type=1800 audit(1750168402.334:16): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.341" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 212.729580][ T5828] usb usb4-port1: attempt power cycle [ 212.739903][ T28] usb 2-1: no configurations [ 212.744894][ T28] usb 2-1: can't read configurations, error -22 [ 212.828410][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.968204][ T28] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 213.938907][ T5828] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 214.179473][ T5828] usb 4-1: device not accepting address 16, error -71 [ 214.315117][ T5773] Process accounting resumed [ 214.494131][ T28] usb 2-1: device descriptor read/8, error -71 [ 214.619654][ T7249] netlink: 2052 bytes leftover after parsing attributes in process `syz.1.352'. [ 214.639029][ T28] usb usb2-port1: unable to enumerate USB device [ 214.639129][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 214.753785][ T7246] loop2: detected capacity change from 0 to 32768 [ 215.317344][ T7256] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 217.208875][ T785] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 218.196066][ T785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.238914][ T785] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.312192][ T785] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 218.343398][ T785] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 218.367988][ T785] usb 2-1: Manufacturer: syz [ 218.395894][ T785] usb 2-1: config 0 descriptor?? [ 219.138294][ T8] Process accounting resumed [ 219.188871][ T785] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 219.404857][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.472924][ T785] usb 4-1: can't read configurations, error -61 [ 219.678979][ T785] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 220.679707][ T785] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 220.689893][ T785] usb 4-1: can't read configurations, error -61 [ 220.715175][ T785] usb usb4-port1: attempt power cycle [ 220.726235][ T9] usb 2-1: USB disconnect, device number 11 [ 222.193928][ T785] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 224.895491][ T785] usb 4-1: device descriptor read/8, error -71 [ 226.118867][ T28] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.310422][ T28] usb 1-1: device descriptor read/64, error -71 [ 228.030182][ T28] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 228.459063][ T1194] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.483021][ T1194] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 229.492059][ T1194] usb 3-1: can't read configurations, error -61 [ 229.659703][ T1194] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 230.345446][ T7369] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 230.407886][ T1194] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 230.417470][ T1194] usb 3-1: can't read configurations, error -61 [ 230.459585][ T1194] usb usb3-port1: attempt power cycle [ 230.979236][ T1194] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 231.908381][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 232.348923][ T9] usb 2-1: device descriptor read/64, error -71 [ 232.819034][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 233.869006][ T1194] usb 3-1: device descriptor read/8, error -71 [ 233.939196][ T9] usb 2-1: device descriptor read/64, error -71 [ 234.069267][ T9] usb usb2-port1: attempt power cycle [ 234.122939][ T7404] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 234.819531][ T9] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 235.009893][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 235.110270][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 235.147064][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.180038][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.264393][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 235.301027][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 235.331324][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 235.342454][ T9] usb 2-1: Manufacturer: syz [ 235.358026][ T9] usb 2-1: config 0 descriptor?? [ 235.370448][ T1194] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.527694][ T7426] netlink: 64 bytes leftover after parsing attributes in process `syz.3.413'. [ 235.623938][ T1194] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 235.716087][ T1194] usb 1-1: can't read configurations, error -61 [ 235.772774][ T9] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 235.830944][ T9] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 235.890633][ T1194] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 235.905236][ T9] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 236.125916][ T1194] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 236.143234][ T1194] usb 1-1: can't read configurations, error -61 [ 236.168578][ T1194] usb usb1-port1: attempt power cycle [ 236.400134][ T7436] program syz.1.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.409498][ T5773] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 236.599001][ T1194] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 236.668282][ T7440] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 236.669572][ T5773] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 236.698336][ T1194] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 236.705075][ T9] usb 2-1: USB disconnect, device number 15 [ 236.708825][ T1194] usb 1-1: can't read configurations, error -61 [ 236.744384][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.792963][ T5773] usb 4-1: config 0 has no interfaces? [ 236.807985][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.828469][ T5773] usb 4-1: config 0 has no interfaces? [ 236.843470][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.854753][ T5773] usb 4-1: config 0 has no interfaces? [ 236.862461][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.873129][ T5773] usb 4-1: config 0 has no interfaces? [ 236.880697][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.891360][ T5773] usb 4-1: config 0 has no interfaces? [ 236.898314][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.911482][ T5773] usb 4-1: config 0 has no interfaces? [ 236.918397][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.938838][ T1194] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.947772][ T5773] usb 4-1: config 0 has no interfaces? [ 236.956233][ T5773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.969896][ T5773] usb 4-1: config 0 has no interfaces? [ 236.995397][ T1194] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.006594][ T1194] usb 1-1: can't read configurations, error -61 [ 237.012974][ T5773] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 237.024572][ T1194] usb usb1-port1: unable to enumerate USB device [ 237.032377][ T5773] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 237.051461][ T5773] usb 4-1: Product: syz [ 237.061739][ T5773] usb 4-1: Manufacturer: syz [ 237.066449][ T5773] usb 4-1: SerialNumber: syz [ 237.076473][ T5773] usb 4-1: config 0 descriptor?? [ 237.316335][ T5773] usb 4-1: USB disconnect, device number 22 [ 240.697414][ T7475] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 241.479142][ T785] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.842456][ T785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.853126][ T785] usb 1-1: can't read configurations, error -61 [ 243.770783][ T785] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 243.834738][ T7510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 243.933028][ T7513] fuse: Bad value for 'fd' [ 243.985399][ T785] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.985432][ T785] usb 1-1: can't read configurations, error -61 [ 243.985567][ T785] usb usb1-port1: attempt power cycle [ 244.314860][ T7519] netlink: 52 bytes leftover after parsing attributes in process `syz.3.443'. [ 247.898932][ T5773] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 248.128257][ T5773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.169063][ T5773] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.192155][ T5773] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 248.212025][ T5773] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 248.227001][ T5773] usb 2-1: Manufacturer: syz [ 248.248468][ T5773] usb 2-1: config 0 descriptor?? [ 248.283450][ T5773] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 249.393835][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'. [ 249.404678][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'. [ 249.414436][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.454'. [ 249.688848][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 249.941752][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 249.972260][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.999191][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 250.016915][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.031907][ T5829] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 250.041943][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.055534][ T5829] usb 3-1: config 0 descriptor?? [ 250.076032][ T7565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.457'. [ 251.611850][ T5807] usb 2-1: USB disconnect, device number 16 [ 251.653138][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 251.695412][ T5829] usbhid: probe of 3-1:0.0 failed with error -71 [ 251.867825][ T5829] usb 3-1: USB disconnect, device number 21 [ 253.944256][ T7598] fuse: Unknown parameter '0x0000000000000003' [ 258.344258][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.357020][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.488988][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 258.510826][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 258.530385][ T7605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.469'. [ 258.732982][ T7610] fuse: Unknown parameter 'user_i00000000000000000000' [ 258.846548][ T1194] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 259.164835][ T1194] usb 3-1: Using ep0 maxpacket: 16 [ 259.270829][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.393861][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 259.455105][ T1194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.537434][ T1194] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 259.576446][ T1194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.603892][ T1194] usb 3-1: config 0 descriptor?? [ 260.904748][ T7626] fuse: Unknown parameter '0x0000000000000003' [ 261.230989][ T1194] usbhid 3-1:0.0: can't add hid device: -71 [ 261.237079][ T1194] usbhid: probe of 3-1:0.0 failed with error -71 [ 261.334464][ T1194] usb 3-1: USB disconnect, device number 22 [ 262.528934][ T7647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.481'. [ 268.466469][ T7700] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 270.712539][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.500'. [ 273.548664][ T7738] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 274.838122][ T7748] fuse: Unknown parameter 'fd0x0000000000000003' [ 275.355294][ T7754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.511'. [ 278.252893][ T7777] fuse: Unknown parameter 'fd0x0000000000000003' [ 281.878940][ T785] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 282.575725][ T785] usb 1-1: config 0 has no interfaces? [ 282.732627][ T785] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 282.748877][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.758795][ T785] usb 1-1: Product: syz [ 282.763037][ T785] usb 1-1: Manufacturer: syz [ 283.471801][ T785] usb 1-1: SerialNumber: syz [ 283.511615][ T785] usb 1-1: config 0 descriptor?? [ 288.020485][ T28] usb 1-1: USB disconnect, device number 21 [ 289.119143][ T28] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 289.984668][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.230225][ T28] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 290.935954][ T28] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 290.980343][ T28] usb 1-1: Manufacturer: syz [ 291.129645][ T28] usb 1-1: config 0 descriptor?? [ 291.330209][ T7884] loop3: detected capacity change from 0 to 32768 [ 291.337922][ T7884] XFS: ikeep mount option is deprecated. [ 291.363468][ T28] usb 1-1: can't set config #0, error -71 [ 291.378512][ T28] usb 1-1: USB disconnect, device number 22 [ 291.493540][ T7884] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.935279][ T7884] XFS (loop3): Ending clean mount [ 291.946610][ T7884] XFS (loop3): Quotacheck needed: Please wait. [ 291.976544][ T7884] XFS (loop3): Quotacheck: Done. [ 292.008912][ T28] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 292.675039][ T27] audit: type=1800 audit(1750168482.414:17): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.548" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 292.815181][ T27] audit: type=1800 audit(1750168482.414:18): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.548" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 292.992300][ T28] usb 2-1: config 0 has no interfaces? [ 293.001512][ T28] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 293.012445][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.021075][ T28] usb 2-1: Product: syz [ 293.025293][ T28] usb 2-1: Manufacturer: syz [ 293.046221][ T28] usb 2-1: SerialNumber: syz [ 293.054819][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.076497][ T28] usb 2-1: config 0 descriptor?? [ 294.599241][ T5829] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 294.811291][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.464572][ T5829] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 295.475134][ T5829] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 295.486563][ T5829] usb 4-1: Manufacturer: syz [ 295.538040][ T5829] usb 4-1: config 0 descriptor?? [ 295.546128][ T5829] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 296.730372][ T785] usb 2-1: USB disconnect, device number 17 [ 297.426241][ T7946] loop0: detected capacity change from 0 to 32768 [ 297.434681][ T7946] XFS: ikeep mount option is deprecated. [ 297.516148][ T7946] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.703955][ T785] usb 4-1: USB disconnect, device number 23 [ 297.727940][ T7946] XFS (loop0): Ending clean mount [ 297.761666][ T7946] XFS (loop0): Quotacheck needed: Please wait. [ 297.864509][ T7946] XFS (loop0): Quotacheck: Done. [ 298.599313][ T27] audit: type=1800 audit(1750168488.334:19): pid=7975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.562" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 298.930050][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.960796][ T27] audit: type=1800 audit(1750168488.334:20): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.562" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 299.998807][ T28] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 300.289188][ T28] usb 2-1: config 0 has no interfaces? [ 300.417663][ T28] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 300.461196][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.490444][ T28] usb 2-1: Product: syz [ 300.496628][ T28] usb 2-1: Manufacturer: syz [ 300.510556][ T28] usb 2-1: SerialNumber: syz [ 300.532045][ T28] usb 2-1: config 0 descriptor?? [ 303.668028][ T8010] loop3: detected capacity change from 0 to 32768 [ 303.668214][ T8026] fuse: Unknown parameter '0x0000000000000003' [ 303.675595][ T8010] XFS: ikeep mount option is deprecated. [ 303.771619][ T8010] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 303.934653][ T8010] XFS (loop3): Ending clean mount [ 303.949907][ T8010] XFS (loop3): Quotacheck needed: Please wait. [ 304.015690][ T8010] XFS (loop3): Quotacheck: Done. [ 304.756284][ T5764] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.059559][ T5829] Process accounting resumed [ 306.179767][ T1194] usb 2-1: USB disconnect, device number 18 [ 306.219818][ T8049] syzkaller1: entered promiscuous mode [ 306.225361][ T8049] syzkaller1: entered allmulticast mode [ 306.609005][ T5807] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 306.801299][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.817586][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.833328][ T5807] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 306.866423][ T5807] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 306.878464][ T5807] usb 3-1: Manufacturer: syz [ 306.893887][ T5807] usb 3-1: config 0 descriptor?? [ 308.122850][ T5807] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 308.142974][ T5807] usb 3-1: USB disconnect, device number 23 [ 308.349734][ T8063] fuse: Unknown parameter '0x0000000000000003' [ 308.393996][ T8064] fido_id[8064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 309.149588][ T5828] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 309.413557][ T5828] usb 1-1: config 0 has no interfaces? [ 309.432180][ T8069] loop2: detected capacity change from 0 to 32768 [ 309.450848][ T8069] XFS: ikeep mount option is deprecated. [ 309.461262][ T5828] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 309.478830][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.497114][ T5828] usb 1-1: Product: syz [ 309.507640][ T5828] usb 1-1: Manufacturer: syz [ 309.517355][ T5828] usb 1-1: SerialNumber: syz [ 309.539746][ T5828] usb 1-1: config 0 descriptor?? [ 309.581503][ T8069] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 309.634068][ T8087] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 309.792675][ T8089] syzkaller1: entered promiscuous mode [ 309.798476][ T8089] syzkaller1: entered allmulticast mode [ 309.882531][ T8069] XFS (loop2): Ending clean mount [ 309.889520][ T8069] XFS (loop2): Quotacheck needed: Please wait. [ 309.981548][ T8069] XFS (loop2): Quotacheck: Done. [ 310.679432][ T5767] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 310.915739][ T8100] fuse: Unknown parameter '0x0000000000000003' [ 311.799048][ T5829] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 311.935919][ T785] usb 1-1: USB disconnect, device number 23 [ 312.031552][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.142335][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.156854][ T5829] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 312.166604][ T5829] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 312.175698][ T5829] usb 3-1: Manufacturer: syz [ 312.192112][ T5829] usb 3-1: config 0 descriptor?? [ 313.052298][ T5829] cougar 0003:060B:700A.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 313.451160][ T5829] usb 3-1: USB disconnect, device number 24 [ 313.471722][ T8116] syzkaller1: entered promiscuous mode [ 313.477288][ T8116] syzkaller1: entered allmulticast mode [ 313.519856][ T8113] fido_id[8113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 316.407267][ T8133] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 316.698862][ T1194] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 317.089000][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095787][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.701099][ T1194] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 318.713770][ T1194] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.739558][ T1194] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.775412][ T1194] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 318.804654][ T1194] usb 3-1: config 0 interface 0 has no altsetting 0 [ 318.817047][ T1194] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 318.827550][ T1194] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 318.841809][ T1194] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.828945][ T1194] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.926792][ T1194] usb 3-1: unable to read config index 2 descriptor/start: -71 [ 319.948309][ T1194] usb 3-1: can't read configurations, error -71 [ 320.071453][ T8164] syzkaller1: entered promiscuous mode [ 320.082788][ T8164] syzkaller1: entered allmulticast mode [ 323.649732][ T8199] syzkaller1: entered promiscuous mode [ 323.655284][ T8199] syzkaller1: entered allmulticast mode [ 325.512696][ T8] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 326.259167][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.303274][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.384827][ T8] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 326.411273][ T8] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 326.419508][ T8] usb 3-1: Manufacturer: syz [ 326.426724][ T8] usb 3-1: config 0 descriptor?? [ 326.436372][ T8225] netlink: 80 bytes leftover after parsing attributes in process `syz.1.643'. [ 326.919059][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 327.088866][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 327.389327][ T8] usb 3-1: USB disconnect, device number 27 [ 328.629868][ T8242] syzkaller1: entered promiscuous mode [ 328.650437][ T8242] syzkaller1: entered allmulticast mode [ 328.925219][ T8252] netlink: 80 bytes leftover after parsing attributes in process `syz.0.653'. [ 331.804263][ T8280] syzkaller1: entered promiscuous mode [ 331.828862][ T8280] syzkaller1: entered allmulticast mode [ 332.182202][ T8284] netlink: 80 bytes leftover after parsing attributes in process `syz.2.662'. [ 333.449252][ T8293] loop2: detected capacity change from 0 to 512 [ 333.716277][ T8293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.749285][ T8293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.833821][ T8293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.846713][ T8293] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.895467][ T27] audit: type=1800 audit(1750168523.624:21): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.665" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 334.368127][ T27] audit: type=1800 audit(1750168523.634:22): pid=8292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.665" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 334.854173][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.196638][ T8322] netlink: 80 bytes leftover after parsing attributes in process `syz.3.673'. [ 337.244475][ T8323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.668'. [ 340.946411][ T8354] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 345.805700][ T8388] netlink: 68 bytes leftover after parsing attributes in process `syz.2.690'. [ 351.282827][ T8437] loop3: detected capacity change from 0 to 1024 [ 356.499834][ T8474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.710'. [ 358.354256][ T8485] loop2: detected capacity change from 0 to 512 [ 358.404987][ T8485] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 358.479667][ T8485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.531593][ T8485] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 358.545847][ T8485] EXT4-fs (loop2): 1 truncate cleaned up [ 358.554120][ T8485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.635692][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.649473][ T28] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 358.853060][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.872164][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.941100][ T28] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 358.957845][ T28] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 358.968873][ T28] usb 2-1: Manufacturer: syz [ 359.067613][ T28] usb 2-1: config 0 descriptor?? [ 362.246891][ T28] usbhid 2-1:0.0: can't add hid device: -71 [ 362.333002][ T28] usbhid: probe of 2-1:0.0 failed with error -71 [ 362.343663][ T28] usb 2-1: USB disconnect, device number 19 [ 362.570241][ T8512] loop1: detected capacity change from 0 to 32768 [ 362.599738][ T8512] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.728 (8512) [ 362.634104][ T8512] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.644683][ T8512] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 362.653386][ T8512] BTRFS info (device loop1): using free space tree [ 362.968904][ T8512] BTRFS info (device loop1): enabling ssd optimizations [ 362.975927][ T8512] BTRFS info (device loop1): auto enabling async discard [ 364.627029][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.771398][ T5807] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 364.878473][ T5781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5781) [ 364.901105][ T8561] netlink: 68 bytes leftover after parsing attributes in process `syz.0.738'. [ 365.925815][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.976529][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.033287][ T5807] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 366.050970][ T5807] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 366.073927][ T5807] usb 3-1: Manufacturer: syz [ 366.485645][ T5807] usb 3-1: config 0 descriptor?? [ 367.106203][ T5807] usbhid 3-1:0.0: can't add hid device: -71 [ 367.116568][ T5807] usbhid: probe of 3-1:0.0 failed with error -71 [ 367.145450][ T5807] usb 3-1: USB disconnect, device number 28 [ 368.243693][ T8588] fuse: Bad value for 'fd' [ 368.941867][ T8594] loop0: detected capacity change from 0 to 512 [ 368.950318][ T8594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.963782][ T8594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.009070][ T8594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.021822][ T8594] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.054349][ T27] audit: type=1800 audit(1750168558.794:23): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 369.079339][ T27] audit: type=1800 audit(1750168558.794:24): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 369.268025][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.151041][ T8630] loop0: detected capacity change from 0 to 1024 [ 376.258026][ T8663] loop0: detected capacity change from 0 to 2048 [ 376.435316][ T8663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.443427][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.460952][ T8696] loop2: detected capacity change from 0 to 128 [ 378.484449][ T8696] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 378.523386][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530011][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.609346][ T8696] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.289368][ T8773] fuse: Bad value for 'fd' [ 388.205032][ T8798] loop3: detected capacity change from 0 to 2048 [ 388.268423][ T8798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.407175][ T8818] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 390.439218][ T8818] syz.0.817 (8818) used greatest stack depth: 20936 bytes left [ 395.971941][ T8865] loop2: detected capacity change from 0 to 2048 [ 396.114247][ T8865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.824002][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.130044][ T8885] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 400.309892][ T8911] loop2: detected capacity change from 0 to 512 [ 400.339069][ T8911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.546714][ T8911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 400.862474][ T8909] bridge_slave_0: left allmulticast mode [ 400.868178][ T8909] bridge_slave_0: left promiscuous mode [ 400.875766][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.901726][ T8911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.914563][ T8911] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 400.954989][ T27] audit: type=1800 audit(1750168590.684:25): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.848" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 400.991002][ T8909] bridge_slave_1: left allmulticast mode [ 401.134728][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.159627][ T8909] bridge_slave_1: left promiscuous mode [ 401.731284][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.865463][ T8922] Process accounting resumed [ 402.030932][ T8909] bond0: (slave bond_slave_0): Releasing backup interface [ 403.142147][ T8909] bond0: (slave bond_slave_1): Releasing backup interface [ 403.195873][ T8909] team0: Port device team_slave_0 removed [ 403.218245][ T8909] team0: Port device team_slave_1 removed [ 403.315232][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.402684][ T8909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.774140][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.781772][ T8909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.922232][ T8958] Process accounting resumed [ 406.575025][ T8965] loop2: detected capacity change from 0 to 1024 [ 408.785455][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.876'. [ 408.815139][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 408.830084][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.876'. [ 408.858080][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.876'. [ 409.938935][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 410.158774][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 410.768054][ T9007] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 410.888072][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.899852][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 410.911981][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.928230][ T23] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 410.938493][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.951059][ T23] usb 4-1: config 0 descriptor?? [ 411.739072][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 411.754673][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 411.783986][ T23] usb 4-1: USB disconnect, device number 24 [ 414.798304][ T9048] loop3: detected capacity change from 0 to 1024 [ 419.563049][ T9093] loop3: detected capacity change from 0 to 32768 [ 419.714491][ T9093] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 421.876469][ T6656] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 422.414234][ T9131] syz.3.922 uses obsolete (PF_INET,SOCK_PACKET) [ 424.129192][ T9143] loop0: detected capacity change from 0 to 32768 [ 424.192171][ T9143] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 424.425983][ T5781] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 427.060427][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 427.555563][ T9178] loop0: detected capacity change from 0 to 32768 [ 427.567653][ T9178] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 427.817053][ T5781] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 430.301494][ T9224] loop1: detected capacity change from 0 to 32768 [ 430.371773][ T9224] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.382144][ T9224] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 430.391650][ T9224] BTRFS info (device loop1): using free space tree [ 431.058840][ T9224] BTRFS info (device loop1): enabling ssd optimizations [ 431.065922][ T9224] BTRFS info (device loop1): auto enabling async discard [ 432.416143][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 432.760955][ T5781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5781) [ 434.522425][ T9280] loop0: detected capacity change from 0 to 32768 [ 434.537482][ T9280] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 434.765904][ T9280] loop0: detected capacity change from 0 to 256 [ 434.777439][ T9280] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.788492][ T9280] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 434.854163][ T9280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 436.181194][ T9299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.973'. [ 439.463004][ T9328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.983'. [ 439.590678][ T9332] loop1: detected capacity change from 0 to 1024 [ 439.709745][ T9334] loop2: detected capacity change from 0 to 2048 [ 439.791996][ T9334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.963250][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.991378][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.611625][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.158987][ T9357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 441.441728][ T9363] loop3: detected capacity change from 0 to 32768 [ 441.489910][ T9363] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 441.785383][ T9363] loop3: detected capacity change from 0 to 256 [ 441.796139][ T9363] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.806959][ T9363] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 441.871071][ T9363] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 442.544764][ T9371] loop2: detected capacity change from 0 to 2048 [ 442.647408][ T9371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.792581][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.434799][ T9387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1000'. [ 443.747060][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 444.229542][ T9403] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 445.718831][ T5763] Bluetooth: hci3: command 0x0406 tx timeout [ 446.233031][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1017'. [ 446.369618][ T9424] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 447.648285][ T9442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1022'. [ 448.896283][ T9454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1029'. [ 448.970207][ T9457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1030'. [ 449.008893][ T9457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1030'. [ 449.028368][ T9456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1030'. [ 455.217967][ T9504] sched: RT throttling activated [ 455.574012][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 455.884246][ T9503] loop3: detected capacity change from 0 to 32768 [ 461.015224][ T9550] loop0: detected capacity change from 0 to 32768 [ 464.446895][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 466.520982][ T9594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1076'. [ 466.548889][ T9594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1076'. [ 466.582929][ T9590] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1076'. [ 469.070856][ T9622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 480.088493][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 482.646796][ T9775] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 484.928762][ T5773] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 485.273273][ T5773] usb 3-1: config 0 has no interfaces? [ 485.315599][ T5773] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 485.713282][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.745796][ T5773] usb 3-1: Product: syz [ 486.148932][ T5773] usb 3-1: Manufacturer: syz [ 486.170631][ T5773] usb 3-1: SerialNumber: syz [ 486.208092][ T5773] usb 3-1: config 0 descriptor?? [ 491.574602][ T9862] loop1: detected capacity change from 0 to 512 [ 491.582613][ T9862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 491.633448][ T9862] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 491.674384][ T9862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.687652][ T9862] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 491.722727][ T27] audit: type=1800 audit(1750168681.464:26): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1174" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 491.746409][ T27] audit: type=1800 audit(1750168681.484:27): pid=9862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1174" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 491.914158][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.939361][ T9874] syzkaller1: entered promiscuous mode [ 491.944939][ T9874] syzkaller1: entered allmulticast mode [ 492.002524][ T5806] usb 3-1: USB disconnect, device number 29 [ 494.641608][ T9908] loop1: detected capacity change from 0 to 512 [ 494.678829][ T9908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.981898][ T9908] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 495.122909][ T9908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.136219][ T9908] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.186888][ T27] audit: type=1800 audit(1750168684.924:28): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1187" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 495.435454][ T27] audit: type=1800 audit(1750168684.924:29): pid=9908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1187" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 495.455821][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.533221][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.097839][ T27] audit: type=1800 audit(1750168687.834:30): pid=9929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1190" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 498.120000][ T9929] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 498.173105][ T9929] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 498.197460][ T9929] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 498.334233][ T9929] syz.0.1190 (9929) used greatest stack depth: 18000 bytes left [ 498.768247][ T9949] loop2: detected capacity change from 0 to 512 [ 498.779345][ T9949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.793779][ T9949] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 499.373826][ T9949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.387181][ T9949] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.424644][ T27] audit: type=1800 audit(1750168689.164:31): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1199" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 499.592717][ T27] audit: type=1800 audit(1750168689.164:32): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1199" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 499.617264][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.441352][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.447788][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.594799][ T9984] loop2: detected capacity change from 0 to 512 [ 501.602574][ T9984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 502.216216][ T9984] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 502.263251][ T9984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.277980][ T9984] ext4 filesystem being mounted at /307/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.714972][ T27] audit: type=1800 audit(1750168692.454:33): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1211" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 502.760184][ T27] audit: type=1800 audit(1750168692.454:34): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1211" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 502.818328][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.141530][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 504.783602][T10018] loop0: detected capacity change from 0 to 512 [ 504.791396][T10018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.455145][T10018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 505.522976][T10018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.535700][T10018] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.581167][ T27] audit: type=1800 audit(1750168695.314:35): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1223" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 505.611160][ T27] audit: type=1800 audit(1750168695.314:36): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1223" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 505.781011][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.603996][T10020] loop2: detected capacity change from 0 to 32768 [ 508.278761][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 511.238846][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 511.262698][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 511.311117][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 511.629075][ T8896] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 511.828753][ T8896] usb 3-1: Using ep0 maxpacket: 16 [ 511.839165][ T8896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.863014][ T8896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 511.874756][ T8896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.894229][ T8896] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 511.922074][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.942216][ T8896] usb 3-1: config 0 descriptor?? [ 512.905503][ T8896] usbhid 3-1:0.0: can't add hid device: -71 [ 512.978953][ T8896] usbhid: probe of 3-1:0.0 failed with error -71 [ 513.026492][ T8896] usb 3-1: USB disconnect, device number 30 [ 513.277941][T10068] loop1: detected capacity change from 0 to 32768 [ 515.166970][T10089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1247'. [ 515.188804][T10089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1247'. [ 515.202302][T10088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1247'. [ 516.439169][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 519.035666][T10121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1259'. [ 519.073977][T10121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1259'. [ 519.120169][T10120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1259'. [ 521.612767][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1273'. [ 521.662612][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1273'. [ 521.702911][T10156] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1273'. [ 524.817003][T10185] warning: `syz.3.1283' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 524.885972][T10188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1284'. [ 524.907160][T10167] loop0: detected capacity change from 0 to 32768 [ 524.907489][T10188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1284'. [ 525.030875][T10184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1284'. [ 526.265374][T10194] syzkaller0: entered promiscuous mode [ 526.302790][T10194] syzkaller0: entered allmulticast mode [ 527.904148][T10217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1294'. [ 528.233353][ T785] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 528.433861][ T785] usb 3-1: Using ep0 maxpacket: 16 [ 528.442883][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.469146][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 528.491927][ T785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.512706][ T785] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 528.532426][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.543308][ T785] usb 3-1: config 0 descriptor?? [ 530.206593][T10224] loop0: detected capacity change from 0 to 32768 [ 531.543634][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1293'. [ 531.553586][T10216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1293'. [ 531.563929][T10217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1294'. [ 531.668121][ T785] usbhid 3-1:0.0: can't add hid device: -71 [ 531.674422][ T785] usbhid: probe of 3-1:0.0 failed with error -71 [ 531.719440][ T785] usb 3-1: USB disconnect, device number 31 [ 534.318902][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1307'. [ 534.362647][T10250] loop2: detected capacity change from 0 to 32768 [ 534.382067][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1307'. [ 534.411329][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1307'. [ 534.699039][ T5806] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 534.888886][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 534.896620][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.940784][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 534.968024][ T5806] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.028870][ T5806] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 535.038454][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.070150][ T5806] usb 2-1: config 0 descriptor?? [ 535.155952][T10266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1309'. [ 535.185942][T10266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1309'. [ 535.218948][T10265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1309'. [ 536.289046][ T5806] usbhid 2-1:0.0: can't add hid device: -71 [ 536.295125][ T5806] usbhid: probe of 2-1:0.0 failed with error -71 [ 536.449046][ T5806] usb 2-1: USB disconnect, device number 20 [ 537.860148][T10298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1320'. [ 537.908965][T10298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1320'. [ 537.978330][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1320'. [ 538.132231][T10308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1323'. [ 538.438743][ T8896] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 538.638749][ T8896] usb 4-1: Using ep0 maxpacket: 16 [ 538.657351][ T8896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.694235][ T8896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 538.706192][ T8896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.728473][ T8896] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 538.744904][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.880338][ T8896] usb 4-1: config 0 descriptor?? [ 540.161808][ T8896] usbhid 4-1:0.0: can't add hid device: -71 [ 540.172319][ T8896] usbhid: probe of 4-1:0.0 failed with error -71 [ 540.190099][ T8896] usb 4-1: USB disconnect, device number 25 [ 540.846549][T10324] loop0: detected capacity change from 0 to 32768 [ 542.256951][T10346] __nla_validate_parse: 2 callbacks suppressed [ 542.256963][T10346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1338'. [ 542.362395][T10350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1338'. [ 542.399939][T10350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1338'. [ 543.038750][ T8896] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 543.243773][ T8896] usb 1-1: Using ep0 maxpacket: 16 [ 543.278131][ T8896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.291687][ T8896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 543.305916][ T8896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.386610][ T8896] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 543.402915][ T8896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.421678][ T8896] usb 1-1: config 0 descriptor?? [ 544.199241][ T8896] usbhid 1-1:0.0: can't add hid device: -71 [ 544.208839][ T8896] usbhid: probe of 1-1:0.0 failed with error -71 [ 544.228469][ T8896] usb 1-1: USB disconnect, device number 24 [ 546.621028][T10375] loop2: detected capacity change from 0 to 32768 [ 546.763153][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1357'. [ 546.775002][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1357'. [ 546.788768][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1357'. [ 547.899637][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 548.168779][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 548.187159][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.212272][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 548.240206][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.282851][ T8] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 548.306999][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.849826][ T8] usb 2-1: config 0 descriptor?? [ 549.635392][T10428] pimreg: entered allmulticast mode [ 549.948925][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 549.961960][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 549.986537][ T8] usb 2-1: USB disconnect, device number 21 [ 551.757949][T10445] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1369'. [ 552.110665][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 552.137373][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 552.158245][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 552.518928][ T28] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 552.728989][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 552.775372][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.811684][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 552.885084][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.900562][ T28] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 552.927075][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.965869][ T28] usb 4-1: config 0 descriptor?? [ 553.196846][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1388'. [ 553.207354][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1388'. [ 553.217729][T10480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1388'. [ 553.784820][ T28] usbhid 4-1:0.0: can't add hid device: -71 [ 553.803825][ T28] usbhid: probe of 4-1:0.0 failed with error -71 [ 553.955244][ T28] usb 4-1: USB disconnect, device number 26 [ 555.524288][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1402'. [ 555.566802][T10512] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1394'. [ 555.637258][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1402'. [ 555.983402][T10527] loop1: detected capacity change from 0 to 32768 [ 556.398787][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 556.610666][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 556.746852][T10527] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 556.757645][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.757684][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 556.757710][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.757751][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 556.757775][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.810975][T10527] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 556.819859][T10527] BTRFS info (device loop1): using free space tree [ 556.852708][ T8] usb 3-1: config 0 descriptor?? [ 556.952429][T10527] BTRFS info (device loop1): enabling ssd optimizations [ 556.960519][T10527] BTRFS info (device loop1): auto enabling async discard [ 557.900289][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 558.399106][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 558.448362][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 558.518778][ T8] usb 3-1: USB disconnect, device number 32 [ 558.749046][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1408'. [ 558.883349][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1408'. [ 559.053985][T10561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1408'. [ 561.524799][T10584] loop3: detected capacity change from 0 to 32768 [ 561.542461][T10584] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1415 (10584) [ 562.356593][T10584] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 562.367004][T10584] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 562.375825][T10584] BTRFS info (device loop3): using free space tree [ 562.618843][T10584] BTRFS info (device loop3): enabling ssd optimizations [ 562.625913][T10584] BTRFS info (device loop3): auto enabling async discard [ 562.845249][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.858741][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.320034][ T5764] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 566.554246][T10635] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1427'. [ 566.711364][T10652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 566.729176][T10652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 566.789390][T10651] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1431'. [ 569.791005][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 569.812167][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 569.841123][T10682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 570.382419][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 571.631710][T10699] vcan1: entered promiscuous mode [ 571.637523][T10699] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 571.673845][T10699] bond1: (slave vcan1): Error -95 calling set_mac_address [ 571.927634][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1455'. [ 572.121226][T10716] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1452'. [ 574.842694][T10746] "syz.0.1465" (10746) uses obsolete ecb(arc4) skcipher [ 581.683140][T10801] loop1: detected capacity change from 0 to 512 [ 581.727549][T10801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 582.079477][T10801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 582.179497][T10801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.192177][T10801] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 582.219411][ T27] audit: type=1800 audit(1750168771.954:37): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1483" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 582.303943][ T27] audit: type=1800 audit(1750168771.954:38): pid=10800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1483" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 582.399450][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.441584][T10841] loop1: detected capacity change from 0 to 512 [ 585.484272][T10841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 585.684386][T10841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 585.779061][T10841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.793215][T10841] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 585.833887][ T27] audit: type=1800 audit(1750168775.564:39): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1496" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 585.854440][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.955761][ T27] audit: type=1800 audit(1750168775.564:40): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1496" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 585.992237][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.228982][T10936] Bluetooth: MGMT ver 1.22 [ 592.432118][T10940] "syz.1.1535" (10940) uses obsolete ecb(arc4) skcipher [ 592.624088][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 592.699514][T10934] loop0: detected capacity change from 0 to 32768 [ 592.718896][T10934] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1532 (10934) [ 592.776046][T10934] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 592.860105][T10934] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 593.760204][T10934] BTRFS info (device loop0): using free space tree [ 594.003280][T10934] BTRFS info (device loop0): enabling ssd optimizations [ 594.019390][T10934] BTRFS info (device loop0): auto enabling async discard [ 594.181502][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1546'. [ 594.288697][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 595.950595][ T5768] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 596.693415][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 597.739815][T11033] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1564'. [ 599.590578][T11067] vcan1: entered promiscuous mode [ 600.451229][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'. [ 600.615080][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1589'. [ 600.855992][T11099] vcan2: entered promiscuous mode [ 603.269344][T11126] loop1: detected capacity change from 0 to 32768 [ 603.277940][T11126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1602 (11126) [ 603.302997][T11126] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 603.329300][T11126] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 603.346744][T11126] BTRFS info (device loop1): using free space tree [ 603.589439][T11126] BTRFS info (device loop1): enabling ssd optimizations [ 603.682407][T11126] BTRFS info (device loop1): auto enabling async discard [ 605.018885][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'. [ 605.238240][T11171] vcan1: entered promiscuous mode [ 608.636058][T11191] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 609.388075][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.856461][T11216] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1625'. [ 609.895957][T11216] 0ªX¹¦D: renamed from gretap0 (while UP) [ 609.939570][T11216] 0ªX¹¦D: entered allmulticast mode [ 609.963363][T11216] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 612.004749][T11237] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1630'. [ 620.163699][T11354] lo: entered promiscuous mode [ 620.210449][T11354] tunl0: entered promiscuous mode [ 620.235013][T11354] gre0: entered promiscuous mode [ 620.330703][T11354] gretap0: entered promiscuous mode [ 620.377795][T11354] erspan0: entered promiscuous mode [ 620.413721][T11354] ip_vti0: entered promiscuous mode [ 620.421281][T11361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 620.434412][T11354] ip6_vti0: entered promiscuous mode [ 620.469707][T11354] sit0: entered promiscuous mode [ 620.523858][T11354] ip6tnl0: entered promiscuous mode [ 620.564428][T11354] ip6gre0: entered promiscuous mode [ 620.601163][T11354] syz_tun: entered promiscuous mode [ 620.626273][T11354] ip6gretap0: entered promiscuous mode [ 620.647342][T11354] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.654802][T11354] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.663606][T11354] bridge0: entered promiscuous mode [ 620.699024][T11354] vcan0: entered promiscuous mode [ 620.723305][T11354] bond0: entered promiscuous mode [ 620.728436][T11354] bond_slave_0: entered promiscuous mode [ 620.735053][T11354] bond_slave_1: entered promiscuous mode [ 620.775229][T11354] team0: entered promiscuous mode [ 620.780800][T11354] team_slave_0: entered promiscuous mode [ 620.786887][T11354] team_slave_1: entered promiscuous mode [ 620.808117][T11354] dummy0: entered promiscuous mode [ 620.832575][T11354] nlmon0: entered promiscuous mode [ 620.845367][T11354] caif0: entered promiscuous mode [ 620.853014][T11354] batadv0: entered promiscuous mode [ 620.882442][T11354] vxcan0: entered promiscuous mode [ 620.895946][T11354] vxcan1: entered promiscuous mode [ 620.924686][T11354] veth0: entered promiscuous mode [ 620.985532][T11354] veth1: entered promiscuous mode [ 621.024707][T11354] wg0: entered promiscuous mode [ 621.058193][T11354] wg1: entered promiscuous mode [ 621.085966][T11354] wg2: entered promiscuous mode [ 621.197441][T11354] veth0_to_bridge: entered promiscuous mode [ 621.225251][T11354] veth1_to_bridge: entered promiscuous mode [ 621.612789][T11354] veth0_to_bond: entered promiscuous mode [ 621.636035][T11354] veth1_to_bond: entered promiscuous mode [ 621.656030][T11354] veth0_to_team: entered promiscuous mode [ 621.682855][T11354] veth1_to_team: entered promiscuous mode [ 621.710167][T11354] veth0_to_batadv: entered promiscuous mode [ 621.723289][T11354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.735680][T11354] batadv_slave_0: entered promiscuous mode [ 621.756973][T11354] veth1_to_batadv: entered promiscuous mode [ 621.770286][T11354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.788140][T11354] batadv_slave_1: entered promiscuous mode [ 621.807999][T11354] xfrm0: entered promiscuous mode [ 621.837881][T11354] veth0_to_hsr: entered promiscuous mode [ 621.863123][T11354] veth1_to_hsr: entered promiscuous mode [ 621.892157][T11354] hsr0: entered promiscuous mode [ 621.982808][T11354] veth1_virt_wifi: entered promiscuous mode [ 622.039177][T11354] veth0_virt_wifi: entered promiscuous mode [ 622.048191][T11354] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 622.159679][T11354] vlan0: entered promiscuous mode [ 622.183735][T11354] vlan1: entered promiscuous mode [ 622.230803][T11354] macvlan0: entered promiscuous mode [ 622.265124][T11354] macvlan1: entered promiscuous mode [ 622.373018][T11354] ipvlan0: entered promiscuous mode [ 622.383888][T11354] ipvlan1: entered promiscuous mode [ 622.419844][T11354] macvtap0: entered promiscuous mode [ 622.466108][T11354] macsec0: entered promiscuous mode [ 622.563507][T11354] geneve0: entered promiscuous mode [ 622.736566][T11354] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.775724][T11354] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.832852][T11354] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.920843][T11354] geneve1: entered promiscuous mode [ 622.975137][T11354] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 622.989166][T11354] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 623.040908][T11354] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 623.127653][T11354] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 623.162721][T11354] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 623.181071][T11354] bridge1: entered promiscuous mode [ 623.201983][T11354] veth2: entered promiscuous mode [ 623.208309][T11354] veth3: entered promiscuous mode [ 623.215624][T11354] bond1: entered promiscuous mode [ 623.416654][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 623.879356][T11397] loop3: detected capacity change from 0 to 32768 [ 623.888016][T11397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1691 (11397) [ 624.016549][T11397] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 624.027423][T11397] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 624.036487][T11397] BTRFS info (device loop3): using free space tree [ 624.399486][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.405884][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.470428][T11397] BTRFS info (device loop3): enabling ssd optimizations [ 624.477527][T11397] BTRFS info (device loop3): auto enabling async discard [ 625.239434][T11429] ksmbd: Unknown IPC event: 6, ignore. [ 625.489221][ T5764] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 626.708533][T11460] loop3: detected capacity change from 0 to 32768 [ 626.721355][T11460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1711 (11460) [ 626.743916][T11460] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 626.756018][T11460] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 626.764913][T11460] BTRFS info (device loop3): using free space tree [ 626.874077][T11460] BTRFS info (device loop3): enabling ssd optimizations [ 626.881787][T11460] BTRFS info (device loop3): auto enabling async discard [ 627.223593][T11485] lo: entered promiscuous mode [ 627.505840][T11485] tunl0: entered promiscuous mode [ 627.589183][T11485] gre0: entered promiscuous mode [ 627.931268][T11496] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 627.938456][ T5829] IPVS: starting estimator thread 0... [ 627.945481][T11485] gretap0: entered promiscuous mode [ 627.978420][ T5764] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 628.005576][T11485] erspan0: entered promiscuous mode [ 628.039161][T11498] IPVS: using max 17 ests per chain, 40800 per kthread [ 628.073499][T11485] ip_vti0: entered promiscuous mode [ 628.114372][T11485] ip6_vti0: entered promiscuous mode [ 628.205640][T11485] sit0: entered promiscuous mode [ 628.321771][T11485] ip6tnl0: entered promiscuous mode [ 628.377779][T11485] ip6gre0: entered promiscuous mode [ 628.431618][T11485] syz_tun: entered promiscuous mode [ 628.492093][T11485] ip6gretap0: entered promiscuous mode [ 628.549324][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.556797][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.597469][T11485] bridge0: entered promiscuous mode [ 628.634859][T11485] vcan0: entered promiscuous mode [ 628.665348][T11485] bond0: entered promiscuous mode [ 628.670611][T11485] bond_slave_0: entered promiscuous mode [ 628.676677][T11485] bond_slave_1: entered promiscuous mode [ 628.714879][T11485] team0: entered promiscuous mode [ 628.720593][T11485] team_slave_0: entered promiscuous mode [ 628.726608][T11485] team_slave_1: entered promiscuous mode [ 628.765666][T11485] dummy0: entered promiscuous mode [ 628.798088][T11485] nlmon0: entered promiscuous mode [ 628.813803][T11485] caif0: entered promiscuous mode [ 628.819901][T11485] batadv0: entered promiscuous mode [ 628.837786][T11485] vxcan0: entered promiscuous mode [ 628.847246][T11485] vxcan1: entered promiscuous mode [ 628.858299][T11485] veth0: entered promiscuous mode [ 628.875860][T11485] veth1: entered promiscuous mode [ 628.894286][T11485] wg0: entered promiscuous mode [ 628.908365][T11485] wg1: entered promiscuous mode [ 628.923117][T11485] wg2: entered promiscuous mode [ 628.938943][T11485] veth0_to_bridge: entered promiscuous mode [ 628.966987][T11485] veth1_to_bridge: entered promiscuous mode [ 628.998442][T11485] veth0_to_bond: entered promiscuous mode [ 629.023200][T11485] veth1_to_bond: entered promiscuous mode [ 629.048123][T11485] veth0_to_team: entered promiscuous mode [ 629.080775][T11485] veth1_to_team: entered promiscuous mode [ 629.108182][T11485] veth0_to_batadv: entered promiscuous mode [ 629.122673][T11485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.135355][T11485] batadv_slave_0: entered promiscuous mode [ 629.166298][T11485] veth1_to_batadv: entered promiscuous mode [ 629.184680][T11485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.207384][T11485] batadv_slave_1: entered promiscuous mode [ 629.250927][T11485] xfrm0: entered promiscuous mode [ 629.274470][T11485] veth0_to_hsr: entered promiscuous mode [ 629.309625][T11485] veth1_to_hsr: entered promiscuous mode [ 629.383660][T11485] hsr0: entered promiscuous mode [ 629.434885][T11485] veth1_virt_wifi: entered promiscuous mode [ 629.477815][T11485] veth0_virt_wifi: entered promiscuous mode [ 629.502710][T11485] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 629.629609][T11485] vlan0: entered promiscuous mode [ 629.635041][T11485] vlan1: entered promiscuous mode [ 629.688321][T11485] macvlan0: entered promiscuous mode [ 629.719606][T11485] macvlan1: entered promiscuous mode [ 629.740605][T11485] ipvlan0: entered promiscuous mode [ 629.766928][T11485] ipvlan1: entered promiscuous mode [ 629.854864][T11485] macvtap0: entered promiscuous mode [ 629.879389][T11485] macsec0: entered promiscuous mode [ 629.928965][T11485] geneve0: entered promiscuous mode [ 629.968905][T11485] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.977829][T11485] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.008660][T11485] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.019350][T11485] geneve1: entered promiscuous mode [ 630.050218][T11485] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 630.084522][T11485] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 630.102459][T11485] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 630.122438][T11485] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 630.140887][T11485] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 630.156247][T11485] bridge1: entered promiscuous mode [ 630.166637][T11485] bond1: entered promiscuous mode [ 630.172379][T11485] veth2: entered promiscuous mode [ 630.177526][T11485] veth3: entered promiscuous mode [ 631.003207][T11531] loop1: detected capacity change from 0 to 32768 [ 631.056793][T11531] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1728 (11531) [ 631.080438][T11531] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 631.090777][T11531] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 631.099778][T11531] BTRFS info (device loop1): using free space tree [ 631.600008][T11531] BTRFS info (device loop1): enabling ssd optimizations [ 631.607259][T11531] BTRFS info (device loop1): auto enabling async discard [ 632.328991][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 632.363241][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 632.395817][T11553] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.404978][T11553] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.413909][T11553] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.487004][T11553] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.496271][T11553] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.505558][T11553] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.133379][T11569] vcan1: entered promiscuous mode [ 633.728253][T11580] loop3: detected capacity change from 0 to 32768 [ 633.735787][T11580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1740 (11580) [ 633.756560][T11580] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 633.766971][T11580] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 633.775761][T11580] BTRFS info (device loop3): using free space tree [ 633.874924][T11580] BTRFS info (device loop3): enabling ssd optimizations [ 633.882156][T11580] BTRFS info (device loop3): auto enabling async discard [ 634.720581][ T5764] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 635.149312][T11610] lo: entered promiscuous mode [ 635.186572][T11610] tunl0: entered promiscuous mode [ 635.245377][T11610] gre0: entered promiscuous mode [ 635.431292][T11610] gretap0: entered promiscuous mode [ 635.508474][T11610] erspan0: entered promiscuous mode [ 635.580150][T11610] ip_vti0: entered promiscuous mode [ 635.617199][T11610] ip6_vti0: entered promiscuous mode [ 635.701507][T11610] sit0: entered promiscuous mode [ 635.859778][T11610] ip6tnl0: entered promiscuous mode [ 635.904635][T11610] ip6gre0: entered promiscuous mode [ 635.954591][T11610] syz_tun: entered promiscuous mode [ 636.042922][T11610] ip6gretap0: entered promiscuous mode [ 636.091180][T11610] bridge0: entered promiscuous mode [ 636.147176][T11610] vcan0: entered promiscuous mode [ 636.159673][T11610] bond0: entered promiscuous mode [ 636.205056][T11610] team0: entered promiscuous mode [ 636.231399][T11610] dummy0: entered promiscuous mode [ 636.253579][T11610] nlmon0: entered promiscuous mode [ 636.264421][T11610] caif0: entered promiscuous mode [ 636.275954][T11610] batadv0: entered promiscuous mode [ 636.298482][T11610] vxcan0: entered promiscuous mode [ 636.309659][T11610] vxcan1: entered promiscuous mode [ 636.325242][T11610] veth0: entered promiscuous mode [ 636.355704][T11610] veth1: entered promiscuous mode [ 636.397074][T11610] wg0: entered promiscuous mode [ 636.426255][T11610] wg1: entered promiscuous mode [ 636.470419][T11610] wg2: entered promiscuous mode [ 636.504358][T11610] veth0_to_bridge: entered promiscuous mode [ 636.548541][T11610] bridge_slave_0: entered promiscuous mode [ 636.587580][T11610] veth1_to_bridge: entered promiscuous mode [ 636.633179][T11610] bridge_slave_1: entered promiscuous mode [ 636.670888][T11610] veth0_to_bond: entered promiscuous mode [ 636.700163][T11610] bond_slave_0: entered promiscuous mode [ 636.726759][T11610] veth1_to_bond: entered promiscuous mode [ 636.745589][T11610] bond_slave_1: entered promiscuous mode [ 636.787496][T11610] veth0_to_team: entered promiscuous mode [ 636.794677][T11624] loop1: detected capacity change from 0 to 32768 [ 636.805344][T11624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1750 (11624) [ 636.826477][T11610] team_slave_0: entered promiscuous mode [ 636.846870][T11624] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 636.857390][T11624] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 636.866328][T11624] BTRFS info (device loop1): using free space tree [ 636.873670][T11610] veth1_to_team: entered promiscuous mode [ 636.909719][T11610] team_slave_1: entered promiscuous mode [ 636.947644][T11610] veth0_to_batadv: entered promiscuous mode [ 636.964630][T11624] BTRFS info (device loop1): enabling ssd optimizations [ 636.972086][T11624] BTRFS info (device loop1): auto enabling async discard [ 637.066740][T11610] batadv_slave_0: entered promiscuous mode [ 637.153536][T11610] veth1_to_batadv: entered promiscuous mode [ 637.198355][T11610] batadv_slave_1: entered promiscuous mode [ 637.263532][T11610] xfrm0: entered promiscuous mode [ 637.347020][T11610] veth0_to_hsr: entered promiscuous mode [ 637.576629][T11610] veth1_to_hsr: entered promiscuous mode [ 637.717821][T11610] hsr0: entered promiscuous mode [ 637.791952][T11610] veth1_virt_wifi: entered promiscuous mode [ 637.878165][T11610] veth0_virt_wifi: entered promiscuous mode [ 637.907387][T11610] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 638.021220][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.122788][T11610] vlan0: entered promiscuous mode [ 638.128797][T11610] vlan1: entered promiscuous mode [ 638.173265][T11610] macvlan0: entered promiscuous mode [ 638.220325][T11610] macvlan1: entered promiscuous mode [ 638.237960][T11610] ipvlan0: entered promiscuous mode [ 638.256512][T11610] ipvlan1: entered promiscuous mode [ 638.421343][T11610] macvtap0: entered promiscuous mode [ 638.446843][T11610] macsec0: entered promiscuous mode [ 638.486979][T11610] geneve0: entered promiscuous mode [ 638.533070][T11610] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.542786][T11610] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.551940][T11610] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.562019][T11610] geneve1: entered promiscuous mode [ 638.590006][T11610] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 638.616487][T11610] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 638.633773][T11610] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 638.654793][T11610] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 638.670002][T11610] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 638.678239][T11610] bridge1: entered promiscuous mode [ 638.690664][T11610] bridge2: entered promiscuous mode [ 638.696005][T11610] bridge3: entered promiscuous mode [ 638.701515][T11610] batadv0.5: entered promiscuous mode [ 638.707566][T11610] pimreg: entered promiscuous mode [ 638.716535][T11610] veth2: entered promiscuous mode [ 638.722176][T11610] veth3: entered promiscuous mode [ 638.727375][T11610] bond1: entered promiscuous mode [ 638.733177][T11614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1747'. [ 638.924939][T11663] vcan1: entered promiscuous mode [ 639.580827][T11673] loop1: detected capacity change from 0 to 32768 [ 639.602876][T11676] loop3: detected capacity change from 0 to 512 [ 639.610519][T11676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 640.137723][T11673] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1761 (11673) [ 640.302752][T11676] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 640.326197][T11673] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 640.336472][T11673] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 640.345272][T11673] BTRFS info (device loop1): using free space tree [ 640.438371][T11676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.451320][T11676] ext4 filesystem being mounted at /444/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 640.479782][T11673] BTRFS info (device loop1): enabling ssd optimizations [ 640.483282][ T27] audit: type=1800 audit(1750168830.224:41): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1760" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 640.486819][T11673] BTRFS info (device loop1): auto enabling async discard [ 640.747555][ T27] audit: type=1800 audit(1750168830.254:42): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1760" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 640.965460][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.445355][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 641.489953][T11710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1765'. [ 641.799466][T11714] syzkaller1: entered promiscuous mode [ 641.805005][T11714] syzkaller1: entered allmulticast mode [ 641.882408][T11718] vcan3: entered promiscuous mode [ 642.256870][T11729] loop0: detected capacity change from 0 to 512 [ 642.267273][T11729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 642.285903][T11729] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 642.491385][T11729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.504518][T11729] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.546174][ T27] audit: type=1800 audit(1750168832.274:43): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1771" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 643.004009][ T27] audit: type=1800 audit(1750168832.284:44): pid=11729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1771" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 643.119170][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.636607][T11753] syzkaller1: entered promiscuous mode [ 643.659923][T11753] syzkaller1: entered allmulticast mode [ 643.893502][T11763] loop3: detected capacity change from 0 to 512 [ 643.904162][T11763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 643.972435][T11763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 644.047527][T11763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.061196][T11763] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.098998][ T27] audit: type=1800 audit(1750168833.834:45): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1784" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 644.566124][ T27] audit: type=1800 audit(1750168833.834:46): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1784" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 644.754388][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.397109][T11792] vcan2: entered promiscuous mode [ 645.504029][T11795] loop0: detected capacity change from 0 to 512 [ 645.514721][T11795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 645.546030][T11795] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 645.671257][T11795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.684330][T11795] ext4 filesystem being mounted at /441/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.724099][ T27] audit: type=1800 audit(1750168835.454:47): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1797" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 646.105092][ T27] audit: type=1800 audit(1750168835.464:48): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1797" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 646.301740][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.687726][T11817] trusted_key: syz.2.1806 sent an empty control message without MSG_MORE. [ 646.984380][T11827] loop2: detected capacity change from 0 to 512 [ 646.996049][T11827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 647.013568][T11827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 647.070768][T11827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.083884][T11827] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.132141][ T27] audit: type=1800 audit(1750168836.864:49): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1810" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 647.664144][ T27] audit: type=1800 audit(1750168836.864:50): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1810" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 647.848138][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.456299][T11911] loop2: detected capacity change from 0 to 512 [ 650.467586][T11911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 651.297697][T11911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 651.791308][T11911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.803979][T11911] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 651.828252][ T27] audit: type=1800 audit(1750168841.564:51): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1843" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 651.849584][ T27] audit: type=1800 audit(1750168841.594:52): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1843" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 652.050643][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.642402][T11953] Unknown status report in ack skb [ 658.530028][T12006] syzkaller1: entered promiscuous mode [ 658.548920][T12006] syzkaller1: entered allmulticast mode [ 660.480543][ C1] ------------[ cut here ]------------ [ 660.486320][ C1] WARNING: CPU: 1 PID: 12025 at net/mac80211/tx.c:5019 __ieee80211_beacon_get+0x1233/0x1600 [ 660.496613][ C1] Modules linked in: [ 660.500555][ C1] CPU: 1 PID: 12025 Comm: syz.0.1887 Not tainted 6.6.93-syzkaller #0 [ 660.508641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 660.518726][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 660.525066][ C1] Code: 24 4c 89 e7 e8 ce dd dd f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 57 9f f7 0f 0b e9 f6 f7 ff ff e8 0d 57 9f f7 <0f> 0b e9 48 fb ff ff e8 01 57 9f f7 48 c7 c7 e0 28 23 8e 4c 89 e6 [ 660.544719][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 660.550816][ C1] RAX: ffffffff89e63fd3 RBX: ffffffff89e62dd6 RCX: ffff88802dd9da00 [ 660.558895][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.566868][ C1] RBP: 0000000000000000 R08: ffff88802dd9da00 R09: 0000000000000003 [ 660.574864][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c9ca3c0 [ 660.582863][ C1] R13: dffffc0000000000 R14: ffff88805c9ca8b0 R15: ffff88805d690024 [ 660.590852][ C1] FS: 00007f081f0436c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 660.599795][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 660.606380][ C1] CR2: 000000110c2d5d7c CR3: 000000005bce1000 CR4: 00000000003506e0 [ 660.614392][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 660.622368][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 660.630376][ C1] Call Trace: [ 660.633688][ C1] [ 660.636559][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 660.642162][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 660.647614][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 660.654381][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 660.659933][ C1] __iterate_interfaces+0x243/0x500 [ 660.665127][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 660.671364][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 660.678545][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 660.684815][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 660.691926][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 660.697111][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 660.702310][ C1] ? hw_scan_work+0x1060/0x1060 [ 660.707247][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 660.712369][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 660.718447][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 660.723594][ C1] handle_softirqs+0x280/0x820 [ 660.728371][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 660.733142][ C1] ? do_softirq+0x180/0x180 [ 660.737637][ C1] __irq_exit_rcu+0xc7/0x190 [ 660.742466][ C1] ? irq_exit_rcu+0x20/0x20 [ 660.747070][ C1] irq_exit_rcu+0x9/0x20 [ 660.751366][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 660.757015][ C1] [ 660.759971][ C1] [ 660.762945][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.768936][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 660.774644][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 660.794283][ C1] RSP: 0018:ffffc900035e7b18 EFLAGS: 00000206 [ 660.800447][ C1] RAX: 3873815032f13000 RBX: ffff88802dd9da00 RCX: 3873815032f13000 [ 660.808413][ C1] RDX: 0000000000000000 RSI: ffffffff8aaac440 RDI: ffffffff8afc6780 [ 660.816388][ C1] RBP: 0000000000000000 R08: ffffffff8e49a76f R09: 1ffffffff1c934ed [ 660.824362][ C1] R10: dffffc0000000000 R11: fffffbfff1c934ee R12: 000000000000a01f [ 660.832346][ C1] R13: 0000000000000246 R14: ffffffff8cd2f820 R15: 00000000ffffffff [ 660.840340][ C1] __might_resched+0xf6/0x610 [ 660.845014][ C1] ? __might_sleep+0xe0/0xe0 [ 660.849620][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 660.854631][ C1] ? __might_fault+0xc6/0x120 [ 660.859393][ C1] ? __might_fault+0xaa/0x120 [ 660.864073][ C1] do_recvmmsg+0x53b/0x7d0 [ 660.868479][ C1] ? __sys_recvmmsg+0x280/0x280 [ 660.873331][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 660.879061][ C1] ? rcu_read_lock_sched_held+0x8a/0x100 [ 660.884698][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 660.889723][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 660.894298][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 660.899509][ C1] do_syscall_64+0x55/0xb0 [ 660.903908][ C1] ? clear_bhb_loop+0x40/0x90 [ 660.908641][ C1] ? clear_bhb_loop+0x40/0x90 [ 660.913351][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.919285][ C1] RIP: 0033:0x7f081e18e929 [ 660.923703][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.943315][ C1] RSP: 002b:00007f081f043038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.951741][ C1] RAX: ffffffffffffffda RBX: 00007f081e3b6080 RCX: 00007f081e18e929 [ 660.959714][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 660.967686][ C1] RBP: 00007f081e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 660.975665][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 660.983721][ C1] R13: 0000000000000000 R14: 00007f081e3b6080 R15: 00007ffef121e568 [ 660.991787][ C1] [ 660.994803][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 661.002150][ C1] CPU: 1 PID: 12025 Comm: syz.0.1887 Not tainted 6.6.93-syzkaller #0 [ 661.010193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 661.020233][ C1] Call Trace: [ 661.023493][ C1] [ 661.026319][ C1] dump_stack_lvl+0x16c/0x230 [ 661.031003][ C1] ? show_regs_print_info+0x20/0x20 [ 661.036199][ C1] ? load_image+0x3b0/0x3b0 [ 661.040698][ C1] panic+0x2c0/0x710 [ 661.044592][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 661.049086][ C1] __warn+0x2e0/0x470 [ 661.053048][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 661.058748][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 661.064463][ C1] report_bug+0x2be/0x4f0 [ 661.068801][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 661.074551][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 661.080273][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 661.085987][ C1] handle_bug+0xcf/0x120 [ 661.090225][ C1] exc_invalid_op+0x1a/0x50 [ 661.094805][ C1] asm_exc_invalid_op+0x1a/0x20 [ 661.099641][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 661.105950][ C1] Code: 24 4c 89 e7 e8 ce dd dd f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 57 9f f7 0f 0b e9 f6 f7 ff ff e8 0d 57 9f f7 <0f> 0b e9 48 fb ff ff e8 01 57 9f f7 48 c7 c7 e0 28 23 8e 4c 89 e6 [ 661.125568][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 661.131630][ C1] RAX: ffffffff89e63fd3 RBX: ffffffff89e62dd6 RCX: ffff88802dd9da00 [ 661.139671][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.147708][ C1] RBP: 0000000000000000 R08: ffff88802dd9da00 R09: 0000000000000003 [ 661.155660][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c9ca3c0 [ 661.163623][ C1] R13: dffffc0000000000 R14: ffff88805c9ca8b0 R15: ffff88805d690024 [ 661.171587][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 661.177115][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 661.182832][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 661.188530][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 661.194061][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 661.199505][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 661.206255][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 661.211801][ C1] __iterate_interfaces+0x243/0x500 [ 661.216979][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 661.223218][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 661.230408][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 661.236645][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 661.243650][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 661.248841][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 661.254020][ C1] ? hw_scan_work+0x1060/0x1060 [ 661.258856][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 661.263974][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 661.270043][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 661.275149][ C1] handle_softirqs+0x280/0x820 [ 661.279902][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 661.284644][ C1] ? do_softirq+0x180/0x180 [ 661.289228][ C1] __irq_exit_rcu+0xc7/0x190 [ 661.293804][ C1] ? irq_exit_rcu+0x20/0x20 [ 661.298292][ C1] irq_exit_rcu+0x9/0x20 [ 661.302514][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 661.308138][ C1] [ 661.311101][ C1] [ 661.314025][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 661.319983][ C1] RIP: 0010:lock_is_held_type+0x13e/0x190 [ 661.325684][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 661.345356][ C1] RSP: 0018:ffffc900035e7b18 EFLAGS: 00000206 [ 661.351404][ C1] RAX: 3873815032f13000 RBX: ffff88802dd9da00 RCX: 3873815032f13000 [ 661.359359][ C1] RDX: 0000000000000000 RSI: ffffffff8aaac440 RDI: ffffffff8afc6780 [ 661.367320][ C1] RBP: 0000000000000000 R08: ffffffff8e49a76f R09: 1ffffffff1c934ed [ 661.375269][ C1] R10: dffffc0000000000 R11: fffffbfff1c934ee R12: 000000000000a01f [ 661.383220][ C1] R13: 0000000000000246 R14: ffffffff8cd2f820 R15: 00000000ffffffff [ 661.391270][ C1] __might_resched+0xf6/0x610 [ 661.395929][ C1] ? __might_sleep+0xe0/0xe0 [ 661.400499][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 661.405517][ C1] ? __might_fault+0xc6/0x120 [ 661.410187][ C1] ? __might_fault+0xaa/0x120 [ 661.414966][ C1] do_recvmmsg+0x53b/0x7d0 [ 661.419471][ C1] ? __sys_recvmmsg+0x280/0x280 [ 661.424323][ C1] ? __ia32_sys_get_robust_list+0x90/0x90 [ 661.430036][ C1] ? rcu_read_lock_sched_held+0x8a/0x100 [ 661.435662][ C1] __x64_sys_recvmmsg+0x191/0x240 [ 661.440686][ C1] ? do_recvmmsg+0x7d0/0x7d0 [ 661.445277][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 661.450460][ C1] do_syscall_64+0x55/0xb0 [ 661.454903][ C1] ? clear_bhb_loop+0x40/0x90 [ 661.459661][ C1] ? clear_bhb_loop+0x40/0x90 [ 661.464360][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.470265][ C1] RIP: 0033:0x7f081e18e929 [ 661.474693][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.494467][ C1] RSP: 002b:00007f081f043038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 661.502888][ C1] RAX: ffffffffffffffda RBX: 00007f081e3b6080 RCX: 00007f081e18e929 [ 661.510848][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 661.518805][ C1] RBP: 00007f081e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 661.526761][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 661.534797][ C1] R13: 0000000000000000 R14: 00007f081e3b6080 R15: 00007ffef121e568 [ 661.542762][ C1] [ 661.546056][ C1] Kernel Offset: disabled [ 661.550417][ C1] Rebooting in 86400 seconds..