last executing test programs: 2m23.018472003s ago: executing program 0 (id=482): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) socket$inet_tcp(0x2, 0x1, 0x0) 2m22.921137012s ago: executing program 0 (id=483): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 2m22.891786175s ago: executing program 0 (id=484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="c7", 0x1, 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="d3", 0x1, 0x8011, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000380)="94", 0x1, 0x4814, 0x0, 0x0) 2m22.757021287s ago: executing program 0 (id=486): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20882, 0x0) writev(r0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xb) 2m21.840321967s ago: executing program 0 (id=505): syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff"], 0x0) 2m20.196126721s ago: executing program 0 (id=523): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x1, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x1}, 0x0, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) 2m3.797518257s ago: executing program 32 (id=523): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x1, 0x2, {0x0, 0x0, 0x4}, {0x2, 0x1}, 0x0, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) 1m21.891080468s ago: executing program 2 (id=781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) unshare(0x62040200) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) 1m21.419089329s ago: executing program 2 (id=784): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x464, 0x800, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xdf3a6ec55489d8f8) 1m21.253032724s ago: executing program 2 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000fe0000090000000006001500040000001400168010000880"], 0x38}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f000001b000), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4091, 0xffb) keyctl$read(0xb, r4, &(0x7f00000010c0)=""/4096, 0x1000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='btrfs\x00', 0x210818, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}}) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500140600fc020000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200007e780000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f000001b040), 0x80383, 0x0) read$midi(r7, 0x0, 0x0) 1m19.745484506s ago: executing program 2 (id=789): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1m14.527468912s ago: executing program 2 (id=802): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b"], 0x22) 1m12.776189436s ago: executing program 2 (id=805): socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() sync() sync() sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 56.800638095s ago: executing program 33 (id=805): socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() sync() sync() sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 15.213626628s ago: executing program 3 (id=955): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100c28, &(0x7f0000000100)={[], [{@uid_gt}]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x100000) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e20, @loopback}, {0x2, 0x4e22, @remote}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0xa00, 0x1000}) 13.826071639s ago: executing program 3 (id=956): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x18, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) close(r2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 13.1330943s ago: executing program 1 (id=957): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_setup(0x206, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 12.283480604s ago: executing program 5 (id=963): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) 11.213449058s ago: executing program 5 (id=964): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)=@req={0x28, &(0x7f00000004c0)={'tunl0\x00', @ifru_data=&(0x7f0000000480)="ab2cd5f90aa72733d2e5e7550e6a2dbb7dc5e23aedc25606f38b7ce2cf65d89e"}}) 11.213113518s ago: executing program 1 (id=965): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11.211466859s ago: executing program 4 (id=966): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x20000050) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000007060103000000000000000000000400050001000700"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r10, 0x0, 0x0) close_range(r10, r10, 0x0) 10.461046524s ago: executing program 4 (id=967): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@remote, 0x18}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={@local, 0x18}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x208000, 0x0) 9.518847887s ago: executing program 4 (id=968): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0x8008330e, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000006c0)={{@my=0x1}, @any, 0x0, 0x1, 0xa0c, 0x1, 0x4, 0x4, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7aa, &(0x7f0000000180)={{@my=0x1}}) 9.13533343s ago: executing program 5 (id=969): socket(0x2b, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x43}, @l2cap_cid_signaling={{0x3f}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x5b}, {0x7}}, @l2cap_conf_req={{0x4, 0x81, 0x29}, {0x8e60, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x1000, 0x2, 0xf70, 0x4}}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0xfd, 0x5, 0x8001, 0x5, 0xf7c}}, @l2cap_conf_ews={0x7, 0x2, 0x200}, @l2cap_conf_mtu={0x1, 0x2, 0x3}]}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0xfff8, 0x541, 0x0, 0x2}}]}}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r4, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) fremovexattr(r5, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 8.369107007s ago: executing program 1 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000005540)={{0x5, 0x0, 0x80, {0x26000, 0xf000, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30bfdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f0050079601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5820a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac980acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de628d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e55037859293e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd41d704bbdba7d282aac778b7ec769ef984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a5518b3c1de451f220c418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) 8.3342322s ago: executing program 5 (id=971): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000340)="fb", 0x1, 0x20008040, 0x0, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x1) splice(r5, 0x0, r4, 0x0, 0x8a, 0xa) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000040)={r7}) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') 7.395621663s ago: executing program 1 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 7.161181283s ago: executing program 5 (id=973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.770851135s ago: executing program 3 (id=974): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) io_uring_setup(0x6503, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1801}}, 0x0, 0x0}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x0, 0x17, 0x1d, "42ef421baf462b7f2cbdeb0635513a8a62021afa96815514f23cb40d06"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000740)={0x1c, 0x0, 0x0, 0x0}) 5.770035795s ago: executing program 1 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000fcdbdf2509000000100003"], 0x24}}, 0x8) 2.459837995s ago: executing program 3 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x9, 0x70bd24, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000400050000001c000380080004005a0a00000800020020000000080005007183bbda180001801400020073797a5f74756e000000000000000000080005"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.456717725s ago: executing program 4 (id=984): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x4000080) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r6, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 2.456069065s ago: executing program 1 (id=976): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200010000000009"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x4, &(0x7f0000003700)=0x0) io_destroy(r0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_create(0x6) syz_usb_connect(0x2, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x43, 0xb4, 0x28, 0x20, 0xccd, 0x10ae, 0x7443, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x6, 0x60, 0xd, [{{0x9, 0x4, 0xc5, 0x80, 0x0, 0xb3, 0x4, 0xa7, 0xa}}]}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fanotify_init(0x8, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) dup(r1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04050400c900", @ANYRES32, @ANYRES8, @ANYRES16], 0x7) 2.455861715s ago: executing program 5 (id=977): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000240)=0x100, 0x4) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000003c0)="631dfe634c87c0ea477a1a4d6413023a79082277f86ed7bb3002b63b877d520aee98edd52ea47a1df725783626bd888923744607445d5258d2f1a0ee6a6ce67a1019787b4b8556dd94c93b0a6395896883e94bd72b1b90095588c6cb7bcf11f227ec57b51d98eab8c02f53a58491e4fbd604356ad591d35f5458f8d84a1bf81dcc785c8c3db5ca9167273d2d33f45cc46438d45c533b4f81ce92b4e9fdf972b61dbbecebea2e5bd00f951e125314741a0fa22496") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) socket$unix(0x1, 0x1, 0x0) r4 = memfd_secret(0x0) fchownat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000140)=0xb700) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 540.339133ms ago: executing program 3 (id=978): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x100000000000000}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 433.223522ms ago: executing program 4 (id=979): openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x480) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 240.093229ms ago: executing program 4 (id=980): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mq_notify(0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 0s ago: executing program 3 (id=981): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r3}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000340)="fb", 0x1, 0x20008040, 0x0, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x1) splice(r5, 0x0, r4, 0x0, 0x8a, 0xa) r6 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000280)={r7, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000040)={r7}) setfsgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') kernel console output (not intermixed with test programs): 0xbec99099, computed 0x3881d996. Applying ECC. [ 80.879147][ T6031] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 80.893140][ T6031] (syz.3.51,6031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 80.939979][ T6031] (syz.3.51,6031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 81.020828][ T6035] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 81.039552][ T6041] loop1: detected capacity change from 0 to 40427 [ 81.059550][ T6041] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 81.061024][ T6031] (syz.3.51,6031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 81.067938][ T6041] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x724 [ 81.102143][ T6041] F2FS-fs (loop1): invalid crc value [ 81.113891][ T6031] (syz.3.51,6031,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 81.120685][ T6035] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 81.127279][ T6031] (syz.3.51,6031,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 81.148045][ T6031] (syz.3.51,6031,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 81.156862][ T6031] (syz.3.51,6031,1):ocfs2_quota_read:201 ERROR: status = -5 [ 81.164338][ T6031] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 81.173525][ T6031] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 81.182957][ T6031] (syz.3.51,6031,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 81.191778][ T6031] (syz.3.51,6031,1):ocfs2_mknod:314 ERROR: status = -5 [ 81.198748][ T6031] (syz.3.51,6031,1):ocfs2_mknod:502 ERROR: status = -5 [ 81.206513][ T6031] (syz.3.51,6031,1):ocfs2_mkdir:659 ERROR: status = -5 [ 81.261185][ T6041] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.294500][ T6041] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 81.328575][ T6041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.446911][ T6046] loop0: detected capacity change from 0 to 32768 [ 81.476649][ T6046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.55 (6046) [ 81.504621][ T6046] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.515121][ T6046] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 81.523910][ T6046] BTRFS info (device loop0): turning on async discard [ 81.530690][ T6046] BTRFS info (device loop0): using free space tree [ 81.540271][ T5760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.566371][ T5761] ocfs2: Unmounting device (7,3) on (node local) [ 81.729285][ T6046] BTRFS info (device loop0): enabling ssd optimizations [ 81.744809][ T787] cfg80211: failed to load regulatory.db [ 81.848047][ T5759] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.331599][ T6074] loop2: detected capacity change from 0 to 40427 [ 82.348726][ T6074] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.356542][ T6074] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.382838][ T6074] F2FS-fs (loop2): invalid crc value [ 82.456927][ T6074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.505963][ T6074] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.515574][ T6074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.573848][ T6090] loop0: detected capacity change from 0 to 16 [ 82.581208][ T6090] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 82.628930][ T6090] erofs: (device loop0): mounted with root inode @ nid 36. [ 82.756303][ T6092] loop1: detected capacity change from 0 to 47 [ 82.951268][ T12] kworker/u4:1: attempt to access beyond end of device [ 82.951268][ T12] loop2: rw=1, sector=45096, nr_sectors = 128 limit=40427 [ 83.348770][ T6098] loop0: detected capacity change from 0 to 1024 [ 83.405230][ T140] hfsplus: b-tree write err: -5, ino 4 [ 83.629737][ T6104] usb usb8: usbfs: process 6104 (syz.2.66) did not claim interface 0 before use [ 83.880792][ T6109] loop1: detected capacity change from 0 to 128 [ 84.022396][ T6109] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 84.103906][ T6109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.187483][ T6113] loop2: detected capacity change from 0 to 32768 [ 84.279642][ T6113] ERROR: (device loop2): diRead: i_ino != di_number [ 84.279642][ T6113] [ 84.292437][ T6113] ERROR: (device loop2): remounting filesystem as read-only [ 84.403299][ T6115] loop3: detected capacity change from 0 to 32768 [ 84.426964][ T6115] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.74 (6115) [ 84.456450][ T6115] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.466692][ T6115] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 84.475890][ T6115] BTRFS info (device loop3): turning on sync discard [ 84.483055][ T6115] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 84.494719][ T6115] BTRFS info (device loop3): use zstd compression, level 3 [ 84.502008][ T6115] BTRFS info (device loop3): turning off barriers [ 84.508588][ T6115] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 84.519595][ T6115] BTRFS info (device loop3): trying to use backup root at mount time [ 84.528061][ T6115] BTRFS info (device loop3): enabling auto defrag [ 84.534568][ T6115] BTRFS info (device loop3): using default commit interval 30s [ 84.542208][ T6115] BTRFS info (device loop3): max_inline at 0 [ 84.548205][ T6115] BTRFS info (device loop3): using free space tree [ 84.674313][ T6129] loop2: detected capacity change from 0 to 164 [ 84.680075][ T49] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 84.764243][ T6129] rock: directory entry would overflow storage [ 84.770685][ T6129] rock: sig=0x66, size=4, remaining=3 [ 84.779072][ T6115] BTRFS error (device loop3): failed to load root extent [ 84.786359][ T6115] BTRFS warning (device loop3): try to load backup roots slot 1 [ 84.795188][ T49] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 84.850694][ T6115] BTRFS warning (device loop3): couldn't read tree root [ 84.857827][ T6115] BTRFS warning (device loop3): try to load backup roots slot 2 [ 84.866117][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 84.892757][ T6115] BTRFS warning (device loop3): couldn't read tree root [ 84.899797][ T6115] BTRFS warning (device loop3): try to load backup roots slot 3 [ 84.910933][ T6129] rock: directory entry would overflow storage [ 84.963578][ T6115] BTRFS info (device loop3): enabling ssd optimizations [ 84.963889][ T6064] udevd[6064]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [6137] terminated by signal 33 (Unknown signal 33) [ 84.972766][ T6115] BTRFS info (device loop3): rebuilding free space tree [ 85.001416][ T6129] rock: sig=0x66, size=4, remaining=3 [ 85.044337][ T6115] BTRFS info (device loop3): checking UUID tree [ 85.046145][ T5135] udevd[5135]: worker [5773] terminated by signal 33 (Unknown signal 33) [ 85.122124][ T5135] udevd[5135]: worker [5773] failed while handling '/devices/virtual/block/loop2' [ 85.230594][ T5761] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.483352][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.964466][ T6162] loop1: detected capacity change from 0 to 32768 [ 86.072978][ T6167] loop2: detected capacity change from 0 to 40427 [ 86.116932][ T6167] F2FS-fs (loop2): invalid crc value [ 86.134935][ T6167] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.191635][ T6167] F2FS-fs (loop2): Start checkpoint disabled! [ 86.216030][ T6167] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 86.338715][ T6173] loop0: detected capacity change from 0 to 256 [ 86.373282][ T6173] exfat: Deprecated parameter 'namecase' [ 86.459201][ T6173] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 86.539024][ T49] kworker/u4:3: attempt to access beyond end of device [ 86.539024][ T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 86.577023][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 86.606648][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 86.900653][ T6181] loop3: detected capacity change from 0 to 256 [ 86.933408][ T6181] exfat: Deprecated parameter 'namecase' [ 86.939105][ T6181] exfat: Deprecated parameter 'namecase' [ 87.027336][ T6181] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 87.101603][ T6179] loop0: detected capacity change from 0 to 32768 [ 87.110077][ T6179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.95 (6179) [ 87.129316][ T6179] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.139534][ T6179] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 87.149701][ T6179] BTRFS info (device loop0): using free space tree [ 87.327425][ T6179] BTRFS info (device loop0): enabling ssd optimizations [ 87.334584][ T6179] BTRFS info (device loop0): auto enabling async discard [ 87.535951][ T6179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.95'. [ 87.551449][ T5906] IPVS: starting estimator thread 0... [ 87.674891][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.97'. [ 87.684214][ T6207] IPVS: using max 21 ests per chain, 50400 per kthread [ 87.755118][ T6212] loop1: detected capacity change from 0 to 1024 [ 87.777618][ T6212] hfsplus: unable to parse mount options [ 87.792405][ T5759] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 87.850010][ T6064] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.991830][ T5775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5775) [ 88.711773][ T6234] loop1: detected capacity change from 0 to 4096 [ 88.762903][ T6234] NILFS (loop1): unrecognized mount option "fsname='" [ 88.979109][ T6237] loop3: detected capacity change from 0 to 40427 [ 89.005613][ T6237] F2FS-fs (loop3): LFS is not compatible with checkpoint=disable [ 89.120073][ T6064] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.133464][ T6241] loop0: detected capacity change from 0 to 1024 [ 89.460059][ T6239] loop2: detected capacity change from 0 to 65536 [ 89.531333][ T5769] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.666933][ T6239] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 89.800169][ T6239] XFS (loop2): Ending clean mount [ 89.834369][ T6239] XFS (loop2): Quotacheck needed: Please wait. [ 89.901187][ T6239] XFS (loop2): Quotacheck: Done. [ 90.135670][ T5760] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 90.182970][ T6264] loop0: detected capacity change from 0 to 8 [ 90.208336][ T6264] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 90.235778][ T5775] udevd[5775]: incorrect cramfs checksum on /dev/loop0 [ 90.273961][ T6261] loop1: detected capacity change from 0 to 40427 [ 90.286093][ T6261] F2FS-fs (loop1): invalid crc value [ 90.326682][ T6261] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.612120][ T6261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.675331][ T6270] loop0: detected capacity change from 0 to 32768 [ 90.732499][ T6270] JBD2: Ignoring recovery information on journal [ 90.773683][ T6270] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.827493][ T6270] (syz.0.122,6270,1):ocfs2_file_write_iter:2445 ERROR: status = -27 [ 90.992355][ T5759] ocfs2: Unmounting device (7,0) on (node local) [ 91.090726][ T6277] loop2: detected capacity change from 0 to 128 [ 91.108007][ T6278] loop3: detected capacity change from 0 to 256 [ 91.121207][ T6277] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.155469][ T6281] loop1: detected capacity change from 0 to 512 [ 91.177645][ T6277] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.252805][ T6278] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 91.452270][ T140] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.481351][ T6281] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.565505][ T6290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.566362][ T6281] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2249: inode #12: comm syz.1.123: corrupted in-inode xattr: invalid ea_ino [ 91.624361][ T6281] EXT4-fs (loop1): Remounting filesystem read-only [ 91.683201][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 91.702530][ T6281] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.857427][ T6298] loop3: detected capacity change from 0 to 1024 [ 91.874013][ T5762] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 91.913336][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.180597][ T6301] loop0: detected capacity change from 0 to 32768 [ 92.200928][ T6301] JBD2: Ignoring recovery information on journal [ 92.230922][ T5761] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 92.239463][ T6301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.303563][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.315097][ T5759] ocfs2: Unmounting device (7,0) on (node local) [ 92.644230][ T6315] capability: warning: `syz.1.137' uses 32-bit capabilities (legacy support in use) [ 93.020660][ T6325] loop2: detected capacity change from 0 to 2048 [ 93.057053][ T6328] loop1: detected capacity change from 0 to 2048 [ 93.068938][ T6325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.082390][ T6328] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 93.191558][ T6064] udevd[6064]: incorrect nilfs2 checksum on /dev/loop1 [ 93.242963][ T6333] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.291696][ T6332] netlink: 'syz.3.145': attribute type 2 has an invalid length. [ 93.377637][ T27] audit: type=1800 audit(1767969514.780:3): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.143" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 93.398708][ T6335] loop2: detected capacity change from 0 to 512 [ 93.435171][ T6335] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 93.461144][ T6335] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 93.552230][ T6335] EXT4-fs (loop2): 1 truncate cleaned up [ 93.559105][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.632951][ T5764] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 93.642649][ T6335] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.146: Logical block already allocated [ 93.648165][ T6336] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 93.747311][ T6336] Remounting filesystem read-only [ 93.779310][ T5760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.861135][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 93.868614][ T5764] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 93.893493][ T5764] usb 4-1: config 0 has an invalid interface descriptor of length 5, skipping [ 93.903835][ T5764] usb 4-1: config 0 has no interface number 0 [ 93.910347][ T5764] usb 4-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=56.54 [ 93.919976][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.933387][ T5764] usb 4-1: config 0 descriptor?? [ 94.004000][ T5762] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 94.025833][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 94.051795][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.072944][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.107360][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.136657][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.167044][ T5762] NILFS (loop1): discard dirty page: offset=4096, ino=18 [ 94.240795][ T6345] loop2: detected capacity change from 0 to 32768 [ 94.249335][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.257062][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.265516][ T5764] usb 4-1: string descriptor 0 read error: -71 [ 94.272012][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.279216][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.302595][ T5764] usb 4-1: bad CDC descriptors [ 94.321381][ T5764] usb 4-1: bad CDC descriptors [ 94.330232][ T6345] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.343114][ T5764] cdc_acm 4-1:0.69: Zero length descriptor references [ 94.351198][ T5764] cdc_acm: probe of 4-1:0.69 failed with error -22 [ 94.364299][ T5764] usb 4-1: USB disconnect, device number 3 [ 94.396010][ T5762] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 94.422293][ T6345] XFS (loop2): Ending clean mount [ 94.426211][ T5762] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 94.446299][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.456535][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.465545][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.482912][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 94.497253][ T5762] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 94.509807][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.532784][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.542349][ T5760] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.562691][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.583444][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 94.597353][ T5762] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 94.610161][ T5762] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 94.637593][ T5762] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 94.672645][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.681748][ T5762] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 94.705653][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.725129][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 94.741531][ T5762] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 94.751295][ T5762] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 95.261438][ T6373] loop2: detected capacity change from 0 to 32768 [ 95.269867][ T6373] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 95.366050][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 95.431315][ T6376] binder: 6375:6376 ioctl 4018620d 200000004a80 returned -16 [ 95.973608][ T6385] loop3: detected capacity change from 0 to 32768 [ 96.005707][ T6387] loop2: detected capacity change from 0 to 32768 [ 96.013842][ T6387] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.163 (6387) [ 96.033651][ T6387] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 96.043884][ T6387] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 96.053603][ T6387] BTRFS info (device loop2): using free space tree [ 96.066469][ T6385] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.123639][ T6385] XFS (loop3): Ending clean mount [ 96.134039][ T6385] XFS (loop3): Quotacheck needed: Please wait. [ 96.152763][ T6387] BTRFS info (device loop2): enabling ssd optimizations [ 96.161125][ T6387] BTRFS info (device loop2): auto enabling async discard [ 96.198995][ T6412] Bluetooth: MGMT ver 1.22 [ 96.291427][ T6385] XFS (loop3): Quotacheck: Done. [ 96.369248][ T5760] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 96.438680][ T5761] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.778741][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 96.966489][ T6431] loop1: detected capacity change from 0 to 256 [ 96.968970][ T6426] loop0: detected capacity change from 0 to 2048 [ 97.025646][ T6431] exfat: Deprecated parameter 'namecase' [ 97.094517][ T6431] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 97.128733][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.222882][ T6426] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.415151][ T5759] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.068841][ T6461] nft_compat: unsupported protocol 249 [ 98.371313][ T6467] loop2: detected capacity change from 0 to 1024 [ 98.410742][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.186'. [ 98.630947][ T6475] loop1: detected capacity change from 0 to 16 [ 98.635272][ T6477] Zero length message leads to an empty skb [ 98.678420][ T6475] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7ff of nid 36 [ 98.987739][ T6479] loop3: detected capacity change from 0 to 32768 [ 99.017692][ T27] audit: type=1800 audit(1767969520.420:4): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.191" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 99.043875][ T6479] ialloc: diAlloc returned -5! [ 99.305871][ T6489] process 'syz.1.196' launched '/dev/fd/5' with NULL argv: empty string added [ 99.342229][ T6487] loop2: detected capacity change from 0 to 32768 [ 99.350180][ T6487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.195 (6487) [ 99.375915][ T6487] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.386140][ T6487] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 99.394833][ T6487] BTRFS info (device loop2): using free space tree [ 99.487180][ T6487] BTRFS info (device loop2): enabling ssd optimizations [ 99.494216][ T6487] BTRFS info (device loop2): auto enabling async discard [ 99.576409][ T6508] loop0: detected capacity change from 0 to 64 [ 99.786051][ T6507] loop3: detected capacity change from 0 to 32768 [ 99.827788][ T5760] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.856589][ T6064] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.804640][ T6528] loop3: detected capacity change from 0 to 32768 [ 100.814900][ T6528] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 100.980860][ T6064] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 101.223393][ T6540] 9pnet_fd: Insufficient options for proto=fd [ 101.511599][ T6555] loop2: detected capacity change from 0 to 128 [ 101.837644][ T6558] loop1: detected capacity change from 0 to 32768 [ 101.847043][ T6558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.217 (6558) [ 101.862965][ T6558] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.873214][ T6558] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 101.882163][ T6558] BTRFS info (device loop1): setting nodatacow, compression disabled [ 101.890262][ T6558] BTRFS info (device loop1): turning on sync discard [ 101.898341][ T6558] BTRFS info (device loop1): force clearing of disk cache [ 101.905519][ T6558] BTRFS info (device loop1): enabling ssd optimizations [ 101.912531][ T6558] BTRFS info (device loop1): using spread ssd allocation scheme [ 101.920192][ T6558] BTRFS info (device loop1): turning off barriers [ 101.926709][ T6558] BTRFS info (device loop1): disabling free space tree [ 101.933666][ T6558] BTRFS info (device loop1): not using ssd optimizations [ 101.940711][ T6558] BTRFS info (device loop1): not using spread ssd allocation scheme [ 102.040700][ T6584] loop2: detected capacity change from 0 to 512 [ 102.063741][ T6584] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 102.107861][ T6558] BTRFS info (device loop1): rebuilding free space tree [ 102.122068][ T6584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 102.130290][ T6584] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.164753][ T6558] BTRFS info (device loop1): disabling free space tree [ 102.171817][ T6558] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.182142][ T6558] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.243191][ T6584] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.223: bad orphan inode 267 [ 102.279682][ T6584] EXT4-fs (loop2): Remounting filesystem read-only [ 102.293230][ T6584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 102.328107][ T6584] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.223: dx entry: limit 0 != root limit 125 [ 102.349439][ T6584] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.223: Corrupt directory, running e2fsck is recommended [ 102.408527][ T5762] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.470024][ T5760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 102.626232][ T6597] loop3: detected capacity change from 0 to 256 [ 102.704667][ T6597] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 102.713291][ T6595] loop0: detected capacity change from 0 to 40427 [ 102.727986][ T6595] F2FS-fs (loop0): heap/no_heap options were deprecated [ 102.741212][ T6595] F2FS-fs (loop0): invalid crc value [ 102.755767][ T6595] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.800157][ T6595] F2FS-fs (loop0): Start checkpoint disabled! [ 102.859831][ T6595] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 102.877895][ T6602] netlink: 'syz.2.227': attribute type 6 has an invalid length. [ 103.166171][ T6609] Bluetooth: hci0: invalid length 3, exp 2 for type 27 [ 103.305181][ T12] kworker/u4:1: attempt to access beyond end of device [ 103.305181][ T12] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.361194][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.388993][ T6613] loop1: detected capacity change from 0 to 2048 [ 103.637173][ T6613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.681765][ T6615] loop2: detected capacity change from 0 to 32768 [ 103.690102][ T6613] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.700679][ T6615] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.233 (6615) [ 103.720040][ T6615] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.730455][ T6615] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 103.740682][ T6615] BTRFS info (device loop2): enabling auto defrag [ 103.747193][ T6615] BTRFS info (device loop2): enabling ssd optimizations [ 103.754195][ T6615] BTRFS info (device loop2): using spread ssd allocation scheme [ 103.761850][ T6615] BTRFS info (device loop2): allowing degraded mounts [ 103.768700][ T6615] BTRFS info (device loop2): turning on flush-on-commit [ 103.775805][ T6615] BTRFS info (device loop2): turning on sync discard [ 103.782523][ T6615] BTRFS info (device loop2): turning off flush-on-commit [ 103.789566][ T6615] BTRFS info (device loop2): turning off discard [ 103.796063][ T6615] BTRFS info (device loop2): not using ssd optimizations [ 103.803139][ T6615] BTRFS info (device loop2): not using spread ssd allocation scheme [ 103.811131][ T6615] BTRFS info (device loop2): using free space tree [ 103.852287][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.119587][ T6643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.231'. [ 104.171675][ T5760] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.245432][ T6646] loop3: detected capacity change from 0 to 512 [ 104.262430][ T6646] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.279854][ T6646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.335985][ T6646] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.392895][ T6646] EXT4-fs (loop3): 1 truncate cleaned up [ 104.422837][ T6646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.500609][ T6652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.238'. [ 104.587313][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.144365][ T6670] loop0: detected capacity change from 0 to 1024 [ 105.157769][ T6670] hfsplus: gid requires an argument [ 105.179021][ T6666] loop3: detected capacity change from 0 to 32768 [ 105.181988][ T6670] hfsplus: unable to parse mount options [ 105.199946][ T6666] JBD2: Ignoring recovery information on journal [ 105.244132][ T5774] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 105.253293][ T5774] Bluetooth: hci1: Injecting HCI hardware error event [ 105.261634][ T5080] Bluetooth: hci1: hardware error 0x00 [ 105.273875][ T6666] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 105.388452][ T6674] loop1: detected capacity change from 0 to 2048 [ 105.395858][ T6666] syz.3.246 (6666) used greatest stack depth: 18736 bytes left [ 105.438452][ T6677] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.500683][ T5761] ocfs2: Unmounting device (7,3) on (node local) [ 105.608254][ T6676] loop2: detected capacity change from 0 to 4096 [ 105.641484][ T6677] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 105.684511][ T6677] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 105.721996][ T5769] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.741958][ T6677] Remounting filesystem read-only [ 105.748056][ T140] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 105.786545][ T140] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 105.833244][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.853014][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.877399][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 105.922752][ T140] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 105.929479][ T140] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 105.971949][ T140] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 105.979285][ T140] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 105.997410][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.008545][ T140] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 106.018264][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.037527][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.066666][ T140] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 106.077222][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.092802][ T140] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 106.099940][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.111250][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.131168][ T140] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 106.193238][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.225041][ T140] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 106.236358][ T140] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 106.244452][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.253651][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.292981][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.316081][ T140] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 106.332077][ T140] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 106.345268][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.363574][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.382700][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.405882][ T140] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 106.419276][ T140] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 106.444784][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.480182][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.490208][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.507981][ T140] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 106.517142][ T140] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 106.528084][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.546424][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.570892][ T140] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 106.585424][ T5762] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 106.596208][ T5762] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 106.608423][ T5762] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 106.619710][ T5762] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 106.633106][ T5762] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 106.640588][ T5762] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 106.647500][ T6692] loop3: detected capacity change from 0 to 40427 [ 106.657930][ T6692] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(262144) [ 106.666727][ T6692] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 106.675303][ T6692] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 106.977034][ T6702] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 107.112590][ T6699] loop0: detected capacity change from 0 to 32768 [ 107.162398][ T6699] [ 107.162398][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.162398][ T6699] [ 107.207076][ T6699] [ 107.207076][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.207076][ T6699] [ 107.218397][ T6699] [ 107.218397][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.218397][ T6699] [ 107.228926][ T6699] [ 107.228926][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.228926][ T6699] [ 107.239404][ T6699] [ 107.239404][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.239404][ T6699] [ 107.266279][ T112] [ 107.266279][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.266279][ T112] [ 107.319536][ T6699] [ 107.319536][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.319536][ T6699] [ 107.331439][ T6699] [ 107.331439][ T6699] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.331439][ T6699] [ 107.355888][ T111] [ 107.355888][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.355888][ T111] [ 107.402503][ T5080] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 107.464134][ T5759] [ 107.464134][ T5759] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.464134][ T5759] [ 107.567185][ T5759] [ 107.567185][ T5759] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.567185][ T5759] [ 107.811640][ T6713] loop3: detected capacity change from 0 to 40427 [ 107.835657][ T6713] F2FS-fs (loop3): user quota file already specified [ 108.162258][ T6709] overlayfs: statfs failed on './file0' [ 108.177956][ T6727] loop3: detected capacity change from 0 to 4096 [ 108.279743][ T6727] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.347870][ T6728] loop0: detected capacity change from 0 to 32768 [ 108.355142][ T6727] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 108.375224][ T6728] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.385450][ T6728] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 108.394235][ T6728] BTRFS info (device loop0): using free space tree [ 108.442013][ T6737] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.480268][ T27] audit: type=1800 audit(1767969529.880:5): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.269" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 108.510281][ T6743] loop2: detected capacity change from 0 to 1024 [ 108.517575][ T6743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.536169][ T6727] syz.3.269: attempt to access beyond end of device [ 108.536169][ T6727] loop3: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 108.561461][ T6727] syz.3.269: attempt to access beyond end of device [ 108.561461][ T6727] loop3: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 108.598589][ T6743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 108.607134][ T6743] System zones: 0-1, 3-12 [ 108.614351][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.617383][ T6728] BTRFS info (device loop0): enabling ssd optimizations [ 108.633534][ T6728] BTRFS info (device loop0): auto enabling async discard [ 108.643866][ T6746] random: crng reseeded on system resumption [ 108.685317][ T6743] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 108.740962][ T6743] EXT4-fs (loop2): can't enable nombcache during remount [ 108.755213][ T6727] syz.3.269: attempt to access beyond end of device [ 108.755213][ T6727] loop3: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 108.804895][ T6727] syz.3.269: attempt to access beyond end of device [ 108.804895][ T6727] loop3: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 108.836325][ T5760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.857933][ T6727] syz.3.269: attempt to access beyond end of device [ 108.857933][ T6727] loop3: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 108.955426][ T5759] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.184856][ T5775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5775) [ 109.251757][ T6766] loop3: detected capacity change from 0 to 512 [ 109.299751][ T6766] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.460142][ T6766] EXT4-fs (loop3): 1 truncate cleaned up [ 109.493353][ T6766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.554869][ T6767] loop2: detected capacity change from 0 to 32768 [ 109.630142][ T6767] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.662172][ T5761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.696128][ T6767] XFS (loop2): Ending clean mount [ 109.715610][ T6767] XFS (loop2): Quotacheck needed: Please wait. [ 109.814923][ T6767] XFS (loop2): Quotacheck: Done. [ 109.992933][ T5760] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.226966][ T6781] loop3: detected capacity change from 0 to 32768 [ 110.331432][ T6781] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.371113][ T6785] loop1: detected capacity change from 0 to 32768 [ 110.382327][ T6785] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 110.431331][ T6781] XFS (loop3): Ending clean mount [ 110.530153][ T5761] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.757415][ T5769] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 110.882930][ T6785] loop1: detected capacity change from 0 to 1024 [ 110.937461][ T6785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.958824][ T6785] UDF-fs: error (device loop1): udf_read_inode: (ino 840) failed !bh [ 110.968875][ T6785] UDF-fs: error (device loop1): udf_read_inode: (ino 840) failed !bh [ 111.082872][ T5805] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.207474][ T6809] loop1: detected capacity change from 0 to 64 [ 111.299076][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 111.312731][ T5135] udevd[5135]: worker [5775] terminated by signal 33 (Unknown signal 33) [ 111.325060][ T5805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 111.336718][ T5135] udevd[5135]: worker [5775] failed while handling '/devices/virtual/block/loop1' [ 111.355464][ T5805] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 111.374820][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.395047][ T5805] usb 4-1: Product: syz [ 111.410934][ T5805] usb 4-1: Manufacturer: syz [ 111.427226][ T5805] usb 4-1: SerialNumber: syz [ 111.470954][ T5805] usb 4-1: config 0 descriptor?? [ 111.607094][ T6813] loop0: detected capacity change from 0 to 32768 [ 111.628345][ T6813] (syz.0.290,6813,1):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 111.644056][ T6813] (syz.0.290,6813,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 111.731472][ T6819] loop2: detected capacity change from 0 to 64 [ 111.769059][ T5805] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 004 [ 111.896749][ T6823] sp0: Synchronizing with TNC [ 112.017828][ T6801] i2c i2c-1: failure writing data [ 112.038129][ T28] usb 4-1: USB disconnect, device number 4 [ 112.209391][ T6830] loop2: detected capacity change from 0 to 512 [ 112.240526][ T6830] EXT4-fs: Ignoring removed i_version option [ 112.261600][ T6830] EXT4-fs: Ignoring removed bh option [ 112.335123][ T6830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.354357][ T6830] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.465104][ T5760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.608054][ T6839] program syz.2.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.632046][ T6839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 112.646663][ T6839] syz.2.297[6839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.646783][ T6839] syz.2.297[6839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.660972][ T6839] netlink: 52 bytes leftover after parsing attributes in process `syz.2.297'. [ 112.734454][ T6839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'. [ 112.740113][ T6841] loop0: detected capacity change from 0 to 1024 [ 112.776594][ T6844] netlink: 'syz.3.300': attribute type 4 has an invalid length. [ 112.871033][ T6845] sp0: Synchronizing with TNC [ 112.912743][ T6842] [U] è [ 113.217929][ T6860] loop1: detected capacity change from 0 to 512 [ 113.218513][ T6862] loop0: detected capacity change from 0 to 128 [ 113.251472][ T6862] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 113.285531][ T6862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.303088][ T6860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.355327][ T6860] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.426997][ T6868] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 113.452191][ T27] audit: type=1800 audit(1767969534.840:6): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.305" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 113.607400][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.737656][ T6870] loop3: detected capacity change from 0 to 32768 [ 113.753682][ T6870] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 113.818218][ T6064] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 114.200996][ T27] audit: type=1326 audit(1767969535.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.232916][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 114.261945][ T27] audit: type=1326 audit(1767969535.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.331065][ T27] audit: type=1326 audit(1767969535.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.353716][ T27] audit: type=1326 audit(1767969535.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.380742][ T27] audit: type=1326 audit(1767969535.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.422658][ T27] audit: type=1326 audit(1767969535.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.460885][ T27] audit: type=1326 audit(1767969535.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.483000][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.499508][ T27] audit: type=1326 audit(1767969535.600:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.515195][ T6898] syz_tun: entered promiscuous mode [ 114.525737][ T27] audit: type=1326 audit(1767969535.600:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 114.549086][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.552963][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'. [ 114.565759][ T6898] syz_tun: left promiscuous mode [ 114.851194][ T6910] loop2: detected capacity change from 0 to 8192 [ 114.868718][ T6910] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.015229][ T6912] loop2: detected capacity change from 0 to 512 [ 115.103095][ T6912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.188914][ T5760] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.422254][ T6918] loop3: detected capacity change from 0 to 1024 [ 115.452376][ T6920] usb usb8: usbfs: process 6920 (syz.2.333) did not claim interface 0 before use [ 115.467123][ T6918] hfsplus: request for non-existent node 2 in B*Tree [ 115.497867][ T6918] hfsplus: request for non-existent node 2 in B*Tree [ 115.589761][ T6922] loop2: detected capacity change from 0 to 256 [ 116.046025][ T6935] loop2: detected capacity change from 0 to 1024 [ 116.219556][ T140] hfsplus: b-tree write err: -5, ino 4 [ 116.302019][ T6933] loop0: detected capacity change from 0 to 40427 [ 116.320355][ T6933] F2FS-fs (loop0): invalid crc value [ 116.335650][ T6933] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.388222][ T6933] F2FS-fs (loop0): Start checkpoint disabled! [ 116.413338][ T6933] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 116.596352][ T1138] kworker/u4:6: attempt to access beyond end of device [ 116.596352][ T1138] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 116.610989][ T1138] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 116.628240][ T1138] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 117.145542][ T6952] loop2: detected capacity change from 0 to 40427 [ 117.154571][ T6952] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.162390][ T6952] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.186502][ T6952] F2FS-fs (loop2): invalid crc value [ 117.225434][ T6952] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.289709][ T6952] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.297004][ T6952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.374950][ T6965] netlink: 'syz.0.344': attribute type 6 has an invalid length. [ 117.387928][ T6968] nft_compat: unsupported protocol 249 [ 117.640196][ T6974] loop1: detected capacity change from 0 to 512 [ 117.681374][ T6974] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 117.721274][ T6976] loop0: detected capacity change from 0 to 2048 [ 117.733375][ T6974] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.357: bg 0: block 104: invalid block bitmap [ 117.789802][ T6974] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 117.813470][ T6976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.852773][ T6974] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.357: invalid indirect mapped block 1 (level 1) [ 117.905711][ T6974] EXT4-fs (loop1): 1 truncate cleaned up [ 117.924181][ T6974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.944289][ T6980] loop3: detected capacity change from 0 to 4096 [ 117.975415][ T6980] NILFS (loop3): unrecognized mount option "barrier=strict" [ 118.129536][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.130190][ T6984] sg_write: process 218 (syz.3.361) changed security contexts after opening file descriptor, this is not allowed. [ 118.168628][ T5759] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.357315][ T6992] loop3: detected capacity change from 0 to 1024 [ 118.406958][ T6992] hfsplus: unable to parse mount options [ 118.722137][ T6996] loop1: detected capacity change from 0 to 32768 [ 118.740385][ T6996] JBD2: Ignoring recovery information on journal [ 118.785005][ T6996] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 118.946080][ T7006] dvmrp0: entered allmulticast mode [ 118.963802][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 119.422303][ T5886] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 119.560130][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 119.580076][ T7030] netlink: 72 bytes leftover after parsing attributes in process `syz.1.379'. [ 119.614778][ T5886] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 119.627054][ T5886] usb 3-1: config 0 has no interface number 0 [ 119.648973][ T5886] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 119.661621][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 119.674865][ T5886] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.700590][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 119.707469][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 119.714052][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 119.720493][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 119.723354][ T5886] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 119.727022][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 119.742425][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 119.748955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.751295][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.756802][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.756885][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.756900][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.756969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.794810][ T5886] usb 3-1: Product: syz [ 119.796270][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.808419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.815893][ T5886] usb 3-1: Manufacturer: syz [ 119.816274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.828795][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.836642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.844611][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.852469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.860398][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.862844][ T5886] usb 3-1: SerialNumber: syz [ 119.868243][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.880781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.888655][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.896611][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.904489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.912441][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.920270][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.928271][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.936141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.944112][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.951963][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.953698][ T5886] usb 3-1: config 0 descriptor?? [ 119.959835][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.972670][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.980599][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.988464][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.996420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.004292][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.012234][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.018932][ T7016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.020105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.035445][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.043304][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.044723][ T5886] usb-storage 3-1:0.20: USB Mass Storage device detected [ 120.051207][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.066064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.073995][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.081843][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.089775][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.097656][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.105578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.113453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.121341][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.129224][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.130171][ T5886] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 120.137135][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.137152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.137230][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.137243][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.137310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.183902][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.191805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.199671][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.207593][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.215472][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.223380][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.231221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.239155][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.247011][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.254958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.262823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.270712][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.278588][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.286507][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.290701][ T5886] scsi host1: usb-storage 3-1:0.20 [ 120.294353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.294432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.315183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.323104][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.330944][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.338870][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.346735][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.354664][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.362519][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.370406][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.378290][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.386216][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.394102][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.402013][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.409832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.417777][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.425622][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.433559][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.441385][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.519235][ T5886] usb 3-1: USB disconnect, device number 2 [ 120.971471][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 121.182068][ T5886] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.199930][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 121.256655][ T7081] random: crng reseeded on system resumption [ 121.361959][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 121.372470][ T5886] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 121.381843][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.390093][ T5886] usb 4-1: Product: syz [ 121.394584][ T5886] usb 4-1: Manufacturer: syz [ 121.399283][ T5886] usb 4-1: SerialNumber: syz [ 121.408854][ T5886] usb 4-1: config 0 descriptor?? [ 121.417264][ T5886] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 121.433324][ T5886] usb 4-1: Detected FT-X [ 121.620772][ T5886] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 122.042318][ T5886] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 122.077529][ T5886] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.103040][ T5886] usb 4-1: USB disconnect, device number 5 [ 122.121426][ T5886] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.131053][ T7105] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.143290][ T5886] ftdi_sio 4-1:0.0: device disconnected [ 122.352309][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 122.545449][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 122.565737][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 122.592005][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 122.601128][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.637823][ T9] usb 2-1: config 0 descriptor?? [ 122.652641][ T7103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.682676][ T5805] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 122.845897][ T5805] usb 3-1: device descriptor read/64, error -71 [ 123.121496][ T9] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 123.136891][ T5805] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.288177][ T9] usb 2-1: USB disconnect, device number 3 [ 123.313062][ T5805] usb 3-1: device descriptor read/64, error -71 [ 123.442206][ T5805] usb usb3-port1: attempt power cycle [ 123.842135][ T3621] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.882083][ T5805] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 123.926683][ T5805] usb 3-1: device descriptor read/8, error -71 [ 124.032729][ T3621] usb 1-1: Using ep0 maxpacket: 16 [ 124.046869][ T3621] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.061660][ T3621] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.084516][ T3621] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.099776][ T3621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.108075][ T3621] usb 1-1: Product: syz [ 124.113545][ T3621] usb 1-1: Manufacturer: syz [ 124.122052][ T3621] usb 1-1: SerialNumber: syz [ 124.232018][ T5805] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 124.486374][ T3621] usb 1-1: 0:2 : does not exist [ 124.492618][ T3621] usb 1-1: unit 9 not found! [ 124.524047][ T5805] usb 3-1: device descriptor read/8, error -71 [ 124.538233][ T3621] usb 1-1: USB disconnect, device number 2 [ 124.652221][ T5805] usb usb3-port1: unable to enumerate USB device [ 125.322071][ T3621] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.530724][ T3621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.558127][ T3621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.594044][ T3621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.623852][ T3621] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 125.642283][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.660666][ T3621] usb 4-1: config 0 descriptor?? [ 125.862159][ T5764] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.941735][ T7227] mmap: syz.2.463 (7227) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.052886][ T5764] usb 1-1: Using ep0 maxpacket: 16 [ 126.060962][ T5764] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.078778][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.082740][ T3621] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 126.086052][ T5764] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 126.099786][ T3621] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 126.105234][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.110679][ T3621] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 126.124182][ T3621] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 126.131069][ T3621] acrux 0003:1A34:0802.0002: unknown main item tag 0x0 [ 126.141046][ T5764] usb 1-1: config 0 descriptor?? [ 126.161423][ T3621] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 126.163593][ T5764] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 126.193132][ T3621] acrux 0003:1A34:0802.0002: no inputs found [ 126.199152][ T3621] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19 [ 126.310359][ T3621] usb 4-1: USB disconnect, device number 6 [ 126.372701][ T5906] usb 1-1: USB disconnect, device number 3 [ 126.813660][ T7251] binder: 7250:7251 unknown command 1074553619 [ 126.819877][ T7251] binder: 7250:7251 ioctl c0306201 200000000540 returned -22 [ 126.828951][ T7251] binder: 7250:7251 unknown command 1074553620 [ 126.835421][ T7251] binder: 7250:7251 ioctl c0306201 200000000640 returned -22 [ 126.927838][ T7253] binder_alloc: 7252: pid 7252 spamming oneway? 1 buffers allocated for a total size of 5240 [ 127.061793][ T7261] ipip0: entered promiscuous mode [ 127.338819][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 127.605958][ T23] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 127.614408][ T23] usb 4-1: config 0 has no interface number 0 [ 127.620476][ T23] usb 4-1: config 0 interface 31 has no altsetting 0 [ 127.644760][ T23] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=55.ea [ 127.654025][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.662057][ T23] usb 4-1: Product: syz [ 127.666217][ T23] usb 4-1: Manufacturer: syz [ 127.670791][ T23] usb 4-1: SerialNumber: syz [ 127.677231][ T23] usb 4-1: config 0 descriptor?? [ 127.684727][ T23] kvaser_usb 4-1:0.31: Cannot get usb endpoint(s) [ 127.893601][ T23] usb 4-1: USB disconnect, device number 7 [ 128.264507][ T7287] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 128.989467][ T7314] syz_tun: entered allmulticast mode [ 129.222865][ T7325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.507'. [ 129.255802][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 129.444286][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.666647][ T5906] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 129.678352][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.702989][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.726537][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.762641][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.779951][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.812183][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.828285][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.850509][ T5906] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 129.863688][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 129.873525][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.121224][ T28] usb 1-1: USB disconnect, device number 4 [ 130.130738][ T7349] dvmrp0: left allmulticast mode [ 130.136026][ T3621] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.332057][ T3621] usb 2-1: Using ep0 maxpacket: 32 [ 130.343471][ T3621] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 130.355564][ T3621] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 130.383342][ T3621] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 130.394404][ T3621] usb 2-1: config 1 has no interface number 0 [ 130.400520][ T3621] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.411933][ T3621] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 130.425118][ T3621] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 130.434431][ T3621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.464001][ T3621] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 130.471971][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.677553][ T23] usb 4-1: config 7 has an invalid interface number: 227 but max is 0 [ 130.685158][ T3621] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 130.697586][ T23] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 130.730256][ T23] usb 4-1: config 7 has no interface number 0 [ 130.739853][ T23] usb 4-1: config 7 interface 227 has no altsetting 0 [ 130.766208][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 130.795048][ T23] usb 4-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44 [ 130.811926][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.820127][ T23] usb 4-1: Product: syz [ 130.828515][ T23] usb 4-1: Manufacturer: syz [ 130.846689][ T23] usb 4-1: SerialNumber: syz [ 131.069713][ T23] cdc_wdm 4-1:7.227: More than one union descriptor, skipping ... [ 131.078343][ T23] cdc_wdm: probe of 4-1:7.227 failed with error -22 [ 131.092335][ T23] usb 4-1: USB disconnect, device number 8 [ 131.126795][ T5764] usb 2-1: USB disconnect, device number 4 [ 131.133414][ T5764] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 131.615953][ T7369] netlink: 44 bytes leftover after parsing attributes in process `syz.3.526'. [ 132.907168][ T7389] input: syz1 as /devices/virtual/input/input5 [ 132.928630][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.935088][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.552121][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 133.755213][ T23] usb 3-1: config 3 has an invalid interface number: 173 but max is 0 [ 133.763494][ T23] usb 3-1: config 3 has no interface number 0 [ 133.769622][ T23] usb 3-1: config 3 interface 173 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 133.780555][ T23] usb 3-1: config 3 interface 173 has no altsetting 0 [ 133.789850][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 133.798955][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.807093][ T23] usb 3-1: Product: syz [ 133.811253][ T23] usb 3-1: Manufacturer: syz [ 133.820428][ T23] usb 3-1: SerialNumber: syz [ 133.827532][ T7397] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.832135][ T5906] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 133.836673][ T23] pl2303 3-1:3.173: required interrupt-in endpoint missing [ 134.021962][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 134.028977][ T5906] usb 4-1: config 0 has no interfaces? [ 134.036729][ T5906] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 134.047096][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.060343][ T5906] usb 4-1: Product: syz [ 134.066651][ T5906] usb 4-1: Manufacturer: syz [ 134.071259][ T5906] usb 4-1: SerialNumber: syz [ 134.076062][ T3621] usb 3-1: USB disconnect, device number 7 [ 134.086621][ T5906] r8152-cfgselector 4-1: config 0 descriptor?? [ 134.316800][ T5906] r8152-cfgselector 4-1: Unknown version 0x0000 [ 134.324962][ T5906] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 135.310779][ T27] audit: type=1326 audit(1767969556.710:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.336158][ T27] audit: type=1326 audit(1767969556.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.358651][ T27] audit: type=1326 audit(1767969556.720:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.382905][ T27] audit: type=1326 audit(1767969556.720:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.405502][ T27] audit: type=1326 audit(1767969556.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.427741][ T27] audit: type=1326 audit(1767969556.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.449964][ T27] audit: type=1326 audit(1767969556.720:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.451993][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.472141][ T27] audit: type=1326 audit(1767969556.720:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff80618df90 code=0x7ffc0000 [ 135.472180][ T27] audit: type=1326 audit(1767969556.720:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.472213][ T27] audit: type=1326 audit(1767969556.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80618f749 code=0x7ffc0000 [ 135.681998][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 135.689642][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.700595][ T23] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 135.709688][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.720462][ T23] usb 3-1: config 0 descriptor?? [ 135.935968][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 135.942083][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.953444][ T23] usb 3-1: USB disconnect, device number 8 [ 136.152027][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.332625][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 136.339441][ T5906] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.350768][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.357490][ T5906] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 136.366603][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.382620][ T5906] usb 2-1: config 0 descriptor?? [ 136.470596][ T7450] binder: 7449:7450 ioctl c0306201 200000000680 returned -14 [ 136.857955][ T5906] steelseries 0003:1038:12B6.0003: item fetching failed at offset 0/2 [ 136.874150][ T5906] steelseries: probe of 0003:1038:12B6.0003 failed with error -22 [ 137.057891][ T5906] usb 2-1: USB disconnect, device number 5 [ 137.862950][ T5906] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 138.113672][ T5906] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 138.121792][ T5906] usb 4-1: config 0 has no interface number 0 [ 138.138177][ T5906] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 138.181993][ T5906] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.196285][ T5906] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 138.231685][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.251916][ T5906] usb 4-1: Product: syz [ 138.256107][ T5906] usb 4-1: Manufacturer: syz [ 138.260706][ T5906] usb 4-1: SerialNumber: syz [ 138.284206][ T5906] usb 4-1: config 0 descriptor?? [ 138.289836][ T7484] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.323771][ T5906] usb-storage 4-1:0.20: USB Mass Storage device detected [ 138.358086][ T5906] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 138.629381][ T5906] scsi host1: usb-storage 4-1:0.20 [ 138.661981][ T5906] usb 4-1: USB disconnect, device number 10 [ 139.215775][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 139.226871][ T7513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 139.292196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 139.478045][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 139.488687][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 139.506226][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.593'. [ 139.515328][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 139.842014][ T3621] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 140.038011][ T3621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 140.051461][ T3621] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 140.101903][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.135204][ T3621] usb 4-1: config 0 descriptor?? [ 140.159631][ T7525] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.300841][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 140.310932][ T7555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'. [ 140.320069][ T7555] netlink: 'syz.2.608': attribute type 11 has an invalid length. [ 140.442129][ T5805] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.597311][ T3621] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 140.656562][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 140.667960][ T5805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.692391][ T5805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.710105][ T5805] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.726249][ T5805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.736177][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.744627][ T5805] usb 2-1: Product: syz [ 140.748871][ T5805] usb 2-1: Manufacturer: syz [ 140.758098][ T5805] usb 2-1: SerialNumber: syz [ 140.791885][ T5764] usb 4-1: USB disconnect, device number 11 [ 140.894212][ T7570] usb usb1: usbfs: process 7570 (syz.2.615) did not claim interface 0 before use [ 140.987043][ T5805] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 141.001220][ T5805] cdc_ncm 2-1:1.0: bind() failure [ 141.023375][ T5805] usb 2-1: USB disconnect, device number 6 [ 141.519646][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.826895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.883054][ T5764] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.914662][ T7619] netlink: 64 bytes leftover after parsing attributes in process `syz.3.632'. [ 143.087065][ T5764] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 143.844805][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.862481][ T5764] usb 3-1: Product: syz [ 143.866678][ T5764] usb 3-1: Manufacturer: syz [ 143.871280][ T5764] usb 3-1: SerialNumber: syz [ 143.890297][ T5764] usb 3-1: config 0 descriptor?? [ 147.002389][ T5764] usb-storage 3-1:0.0: USB Mass Storage device detected [ 148.475050][ T5764] usb 3-1: USB disconnect, device number 9 [ 148.890233][ T7656] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 148.900206][ T7656] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 148.908772][ T7656] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 148.946992][ T7649] xt_bpf: check failed: parse error [ 148.953402][ T7649] warning: `syz.2.642' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.325783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.414299][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.425977][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.442156][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.450024][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.457601][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.471964][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.095537][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 151.296713][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.320086][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.330257][ T7664] bridge_slave_0: entered allmulticast mode [ 151.340271][ T7664] bridge_slave_0: entered promiscuous mode [ 151.350496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.374394][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.381770][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.390021][ T7664] bridge_slave_1: entered allmulticast mode [ 151.397011][ T7664] bridge_slave_1: entered promiscuous mode [ 151.562060][ T5774] Bluetooth: hci4: command tx timeout [ 151.700539][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.815334][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.863028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.910554][ T7664] team0: Port device team_slave_0 added [ 151.920002][ T7664] team0: Port device team_slave_1 added [ 151.926386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 151.967974][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.983106][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.022729][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.034627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 152.051440][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.064733][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.092582][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.363939][ T7664] hsr_slave_0: entered promiscuous mode [ 152.381809][ T7664] hsr_slave_1: entered promiscuous mode [ 152.397334][ T7664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.405462][ T7664] Cannot create hsr debugfs directory [ 152.696089][ T7664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.710320][ T7664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.721513][ T7664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.732371][ T7664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.088440][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.127565][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.170824][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.178025][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.226158][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.233972][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.532158][ T5805] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.659789][ T5774] Bluetooth: hci4: command tx timeout [ 153.804675][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 153.958819][ T5805] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 154.022847][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.030880][ T5805] usb 2-1: Product: syz [ 154.065494][ T5805] usb 2-1: Manufacturer: syz [ 154.070136][ T5805] usb 2-1: SerialNumber: syz [ 154.232504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.241124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.641106][ T5805] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 154.722981][ T5805] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.726706][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.796129][ T7738] trusted_key: encrypted_key: insufficient parameters specified [ 154.836656][ T5805] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 154.875828][ T5805] usb 2-1: media controller created [ 155.722036][ T5774] Bluetooth: hci4: command tx timeout [ 155.780380][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.304739][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 156.486451][ T5805] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 156.505447][ T7757] syzkaller0: entered promiscuous mode [ 156.510952][ T7757] syzkaller0: entered allmulticast mode [ 156.547010][ T5805] usb 2-1: USB disconnect, device number 7 [ 156.723170][ T7664] veth0_vlan: entered promiscuous mode [ 156.772622][ T7664] veth1_vlan: entered promiscuous mode [ 156.834906][ T7764] tipc: Started in network mode [ 156.840091][ T7764] tipc: Node identity 9ef126d04734, cluster identity 4711 [ 156.848566][ T7764] tipc: Enabled bearer , priority 0 [ 156.877902][ T7764] syzkaller0: entered promiscuous mode [ 156.886285][ T7764] syzkaller0: entered allmulticast mode [ 156.904641][ T7664] veth0_macvtap: entered promiscuous mode [ 157.038365][ T5805] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 157.181819][ T7664] veth1_macvtap: entered promiscuous mode [ 157.213314][ T7768] tipc: Resetting bearer [ 157.223189][ T7763] tipc: Resetting bearer [ 157.287522][ T7763] tipc: Disabling bearer [ 157.302603][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.356355][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.361580][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.371905][ T5805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 157.390260][ T5805] usb 2-1: New USB device found, idVendor=045e, idProduct=001d, bcdDevice= 0.00 [ 157.400840][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.412101][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.441787][ T5805] usb 2-1: config 0 descriptor?? [ 157.446844][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.467472][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.477381][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.504690][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.521155][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.546093][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.574483][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.592220][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.604239][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.616109][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.635212][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.649055][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.661186][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.671748][ T7664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.683763][ T7664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.696032][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.716309][ T7664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.726020][ T7664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.736318][ T7664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.746048][ T7664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.803121][ T5774] Bluetooth: hci4: command tx timeout [ 157.833424][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.880128][ T5805] hid-generic 0003:045E:001D.0005: unbalanced collection at end of report description [ 157.892260][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.914572][ T5805] hid-generic: probe of 0003:045E:001D.0005 failed with error -22 [ 157.924563][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.971590][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.980921][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.033053][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 158.046776][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 158.058278][ T9] usb 3-1: config 179 has no interface number 0 [ 158.065148][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 158.077834][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 158.087591][ T7774] usb 2-1: USB disconnect, device number 8 [ 158.089635][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 158.911377][ T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 158.922943][ T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 158.941603][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 158.950956][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.962361][ T7772] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 159.428132][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 159.613055][ T7774] usb 3-1: USB disconnect, device number 10 [ 159.613060][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 159.631400][ T7774] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 161.804928][ T787] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 162.052917][ T787] usb 3-1: Using ep0 maxpacket: 32 [ 162.065227][ T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.089996][ T787] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.099649][ T787] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.124434][ T787] usb 3-1: Product: syz [ 162.142844][ T787] usb 3-1: Manufacturer: syz [ 162.147473][ T787] usb 3-1: SerialNumber: syz [ 162.184119][ T787] usb 3-1: config 0 descriptor?? [ 162.189819][ T7808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.034978][ T3621] usb 3-1: USB disconnect, device number 11 [ 165.518464][ T7806] team0 (unregistering): Port device team_slave_0 removed [ 165.561468][ T7806] team0 (unregistering): Port device team_slave_1 removed [ 166.072867][ T7857] ufs: You didn't specify the type of your ufs filesystem [ 166.072867][ T7857] [ 166.072867][ T7857] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 166.072867][ T7857] [ 166.072867][ T7857] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 166.108166][ T7857] ufs: ufstype=old is supported read-only [ 166.123876][ T7857] ufs: ufs_fill_super(): bad magic number [ 167.232137][ T5805] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 167.522720][ T5805] usb 3-1: config 1 has an invalid interface number: 140 but max is 0 [ 167.668239][ T5805] usb 3-1: config 1 has no interface number 0 [ 167.843093][ T5805] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 167.852327][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.278188][ T5805] usb 3-1: Invalid descriptor size=18. [ 171.098207][ T7774] usb 3-1: USB disconnect, device number 12 [ 171.659300][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 173.001991][ T7774] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.203157][ T7774] usb 2-1: Using ep0 maxpacket: 8 [ 173.210507][ T7774] usb 2-1: unable to get BOS descriptor or descriptor too short [ 173.232726][ T7774] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 173.246248][ T7774] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 173.265281][ T7774] usb 2-1: config 4 has no interface number 0 [ 173.278310][ T7774] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 173.293215][ T7774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.414394][ T7774] usb 2-1: Product: syz [ 173.418595][ T7774] usb 2-1: Manufacturer: syz [ 173.423270][ T7774] usb 2-1: SerialNumber: syz [ 174.207979][ T7774] usb 2-1: Found UVC 0.00 device syz (04f2:b746) [ 174.222001][ T7774] usb 2-1: No valid video chain found. [ 174.257196][ T7774] usb 2-1: USB disconnect, device number 9 [ 177.500091][ T28] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 178.501072][ T28] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 179.212497][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.234765][ T28] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.247925][ T28] usb 2-1: string descriptor 0 read error: -22 [ 179.255611][ T28] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.268371][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.286494][ T28] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 179.530455][ T23] usb 2-1: USB disconnect, device number 10 [ 179.651940][ T3621] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.147701][ T3621] usb 4-1: device descriptor read/all, error -71 [ 183.155055][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 183.155075][ T27] audit: type=1804 audit(1767969603.770:36): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.755" name="/newroot/168/bus/file0" dev="overlay" ino=919 res=1 errno=0 [ 184.325546][ T8062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.412135][ T3621] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 184.605298][ T8069] nbd0: detected capacity change from 0 to 63 [ 184.623571][ T3621] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.638730][ T3621] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.646721][ T5774] block nbd0: Receive control failed (result -104) [ 184.684717][ T3621] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.715055][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.957950][ T3621] usb 4-1: usb_control_msg returned -32 [ 184.984532][ T3621] usbtmc 4-1:16.0: can't read capabilities [ 185.063073][ T8078] trusted_key: syz.2.765 sent an empty control message without MSG_MORE. [ 186.924089][ T3621] usb 4-1: USB disconnect, device number 14 [ 189.090422][ T8132] pimreg: entered allmulticast mode [ 189.120793][ T8132] pimreg: left allmulticast mode [ 189.587416][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 189.623497][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 189.792100][ T7774] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.133652][ T7774] usb 2-1: config 1 has an invalid interface number: 140 but max is 0 [ 190.141904][ T7774] usb 2-1: config 1 has no interface number 0 [ 190.166756][ T7774] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 190.172023][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 190.185247][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 190.199520][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.232864][ T9] usb 5-1: config 0 descriptor?? [ 190.262553][ T7774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.266712][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 190.324826][ T7774] usb 2-1: Invalid descriptor size=18. [ 191.322728][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 191.337565][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 191.344233][ T5772] Bluetooth: hci2: command 0x0406 tx timeout [ 192.132094][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.652097][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 192.682250][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 192.710485][ T8] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 192.718549][ T7774] usb 2-1: USB disconnect, device number 11 [ 192.773953][ T8] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.792363][ T9] usb 5-1: Detected FT232A [ 192.798126][ T8] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 192.809323][ T8] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 192.824299][ T8] usb 3-1: config 168 interface 0 has no altsetting 0 [ 192.832881][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 192.840345][ T8] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 192.886932][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.903528][ T8] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.951353][ T9] usb 5-1: USB disconnect, device number 2 [ 192.966691][ T8] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 193.045562][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.055031][ T8] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 193.096703][ T9] ftdi_sio 5-1:0.0: device disconnected [ 193.113870][ T8] usb 3-1: config 168 interface 0 has no altsetting 0 [ 193.147059][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 193.164537][ T8] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 193.189376][ T8] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 193.211795][ T8] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 193.235143][ T8] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 193.253087][ T8] usb 3-1: config 168 interface 0 has no altsetting 0 [ 193.263894][ T8] usb 3-1: string descriptor 0 read error: -22 [ 193.270268][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 193.284163][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.293608][ T8171] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.438924][ T8] adutux 3-1:168.0: interrupt endpoints not found [ 194.275526][ T8178] kernel profiling enabled (shift: 17) [ 194.303431][ T7774] usb 3-1: USB disconnect, device number 13 [ 194.372565][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.389637][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.519380][ T8184] Bluetooth: MGMT ver 1.22 [ 195.074171][ T8189] capability: warning: `syz.4.798' uses deprecated v2 capabilities in a way that may be insecure [ 197.064263][ T5768] Bluetooth: hci2: Malformed LE Event: 0x1b [ 198.692558][ T7774] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 199.324800][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.385616][ T7774] usb 2-1: unable to get BOS descriptor or descriptor too short [ 199.396595][ T7774] usb 2-1: config 2 has an invalid interface number: 224 but max is 0 [ 199.832880][ T7774] usb 2-1: config 2 has no interface number 0 [ 199.843798][ T7774] usb 2-1: string descriptor 0 read error: -22 [ 199.850095][ T7774] usb 2-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=f7.48 [ 199.860326][ T7774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.894772][ T7774] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 199.902277][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 199.913516][ T5851] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 199.930450][ T5851] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 199.984319][ T5851] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 200.004202][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.024443][ T5851] usb 5-1: Product: syz [ 200.028673][ T5851] usb 5-1: Manufacturer: syz [ 200.071402][ T5851] usb 5-1: SerialNumber: syz [ 200.309753][ T7774] gspca_stv06xx: I2C: Read error writing address: -71 [ 200.333826][ T7774] usb 2-1: USB disconnect, device number 12 [ 200.505968][ T5851] usb 5-1: USB disconnect, device number 3 [ 211.926096][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.836'. [ 214.286643][ T8328] syzkaller0: entered promiscuous mode [ 214.490452][ T8328] syzkaller0: entered allmulticast mode [ 214.848172][ T7626] block nbd0: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 30 seconds [ 214.859294][ T7626] block nbd0: Possible stuck request ffff888022060200: control (read@1024,1024B). Runtime 30 seconds [ 214.870189][ T7626] block nbd0: Possible stuck request ffff888022060400: control (read@2048,1024B). Runtime 30 seconds [ 214.881048][ T7626] block nbd0: Possible stuck request ffff888022060600: control (read@3072,1024B). Runtime 30 seconds [ 215.681956][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 216.707175][ T5080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.728743][ T5080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.776361][ T5080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.789715][ T5080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.802202][ T5080] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.809728][ T5080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.927245][ T8] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 216.939921][ T8] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 216.950979][ T8] usb 2-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 216.962051][ T8] usb 2-1: config 0 has no interface number 0 [ 216.974958][ T8] usb 2-1: config 0 interface 166 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.992410][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=f001, bcdDevice=3e.33 [ 217.004648][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.082790][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 217.343952][ T8] usb 2-1: config 0 descriptor?? [ 217.444300][ T8] hub 2-1:0.166: bad descriptor, ignoring hub [ 217.459907][ T8] hub: probe of 2-1:0.166 failed with error -5 [ 217.473944][ T8] cp210x 2-1:0.166: cp210x converter detected [ 218.049133][ T8341] chnl_net:caif_netlink_parms(): no params data found [ 218.842576][ T5768] Bluetooth: hci5: command tx timeout [ 218.856065][ T8] cp210x 2-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 218.882295][ T8] cp210x 2-1:0.166: querying part number failed [ 218.906581][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 219.002325][ T8] usb 2-1: USB disconnect, device number 13 [ 219.159473][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.169511][ T8] cp210x 2-1:0.166: device disconnected [ 219.243427][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.251370][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.296661][ T8341] bridge_slave_0: entered allmulticast mode [ 219.326299][ T8341] bridge_slave_0: entered promiscuous mode [ 219.335977][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.344707][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.354464][ T8341] bridge_slave_1: entered allmulticast mode [ 219.372942][ T8341] bridge_slave_1: entered promiscuous mode [ 219.480166][ T8341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.527724][ T8341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.025553][ T8341] team0: Port device team_slave_0 added [ 220.129567][ T8341] team0: Port device team_slave_1 added [ 220.238528][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.254978][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.280954][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.309582][ T8341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.324475][ T8341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.335038][ T8341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.361171][ T8341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.481403][ T8341] hsr_slave_0: entered promiscuous mode [ 220.489980][ T8341] hsr_slave_1: entered promiscuous mode [ 220.498969][ T8341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.528364][ T8341] Cannot create hsr debugfs directory [ 220.778995][ T8392] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.052206][ T5768] Bluetooth: hci5: command tx timeout [ 223.114769][ T5768] Bluetooth: hci5: command tx timeout [ 223.300613][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 223.568791][ T8407] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 223.682710][ T8341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.799261][ T8341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.817388][ T8341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.842601][ T8341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 225.066343][ T8341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.117187][ T8341] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.262474][ T5768] Bluetooth: hci5: command tx timeout [ 225.303293][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.310411][ T8008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.353352][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.360486][ T8008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.250600][ T8341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.301866][ T8341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.248062][ T8446] binder: 8445:8446 ioctl c0306201 200000000c80 returned -14 [ 227.304522][ T8341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.081533][ T8341] veth0_vlan: entered promiscuous mode [ 228.146805][ T8341] veth1_vlan: entered promiscuous mode [ 228.754122][ T8468] ptrace attach of "./syz-executor exec"[8467] was attempted by "./syz-executor exec"[8468] [ 229.549000][ T8341] veth0_macvtap: entered promiscuous mode [ 229.652701][ T8341] veth1_macvtap: entered promiscuous mode [ 229.762304][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.795661][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.822008][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.833814][ T8473] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.842430][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.861176][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.928070][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.078773][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.143932][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.172055][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.186026][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.205273][ T8341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.247094][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.272880][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.312053][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.332094][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.341975][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.362997][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.380896][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.413650][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.432023][ T8341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.454523][ T8341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.466719][ T8341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.503322][ T8341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.522339][ T8341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.531108][ T8341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.541299][ T8341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.745231][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.760677][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.822886][ T8402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.830753][ T8402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.961891][ T5851] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 235.304267][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 235.506745][ T5851] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 235.536282][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.569525][ T5851] usb 6-1: config 0 descriptor?? [ 235.881008][ T7774] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.391021][ T8533] ptrace attach of "./syz-executor exec"[8538] was attempted by "./syz-executor exec"[8533] [ 236.411060][ T7774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.431956][ T7774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.442799][ T7774] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 236.454067][ T7774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.469035][ T7774] usb 2-1: config 0 descriptor?? [ 236.481487][ T5851] usb 6-1: language id specifier not provided by device, defaulting to English [ 236.689749][ T5851] letsketch 0003:6161:4D15.0006: Device info: 㡵 [ 236.879531][ T5851] letsketch 0003:6161:4D15.0006: Device info: â°‰ [ 236.885395][ T7774] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 236.906908][ T7774] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 237.082632][ T5851] letsketch 0003:6161:4D15.0006: Device info: 繋 [ 237.094011][ T7774] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 237.414714][ T5851] usb 6-1: Max retries (5) exceeded reading string descriptor 1 [ 237.422530][ T5851] letsketch: probe of 0003:6161:4D15.0006 failed with error -71 [ 238.104093][ T5851] usb 6-1: USB disconnect, device number 2 [ 238.154677][ T7774] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 238.221939][ T7774] usb 2-1: USB disconnect, device number 14 [ 238.255222][ T8558] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 238.267971][ T8555] IPVS: stopping master sync thread 8558 ... [ 243.958987][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 244.111993][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.153107][ T8607] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 244.351964][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 244.375893][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.406979][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.421731][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.481982][ T5833] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.511517][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.536111][ T5833] usb 6-1: config 0 descriptor?? [ 244.891989][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 244.945790][ T7626] block nbd0: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 60 seconds [ 244.957128][ T7626] block nbd0: Possible stuck request ffff888022060200: control (read@1024,1024B). Runtime 60 seconds [ 244.968159][ T7626] block nbd0: Possible stuck request ffff888022060400: control (read@2048,1024B). Runtime 60 seconds [ 244.979040][ T7626] block nbd0: Possible stuck request ffff888022060600: control (read@3072,1024B). Runtime 60 seconds [ 244.993877][ T5833] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 245.025511][ T5833] microsoft 0003:045E:07DA.0008: invalid report_size 14543 [ 245.035695][ T5833] microsoft 0003:045E:07DA.0008: item 0 2 1 7 parsing failed [ 245.093004][ T5833] microsoft 0003:045E:07DA.0008: parse failed [ 245.105572][ T5833] microsoft: probe of 0003:045E:07DA.0008 failed with error -22 [ 245.141928][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 245.154220][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.183439][ T5833] usb 6-1: USB disconnect, device number 3 [ 245.190970][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.213553][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.228984][ T23] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 245.248102][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.270006][ T23] usb 4-1: config 0 descriptor?? [ 245.785632][ T23] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0009/input/input7 [ 245.845212][ T23] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0009/input/input8 [ 246.012628][ T23] kye 0003:0458:5011.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 246.800477][ T8626] Unsupported ieee802154 address type: 0 [ 246.905635][ C1] kye 0003:0458:5011.0009: usb_submit_urb(ctrl) failed: -1 [ 247.794742][ T23] usb 4-1: USB disconnect, device number 15 [ 248.627230][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 250.334064][ T8675] program syz.5.942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.635998][ T8686] ISOFS: Unable to identify CD-ROM format. [ 255.161373][ T5851] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 255.462614][ T5851] usb 6-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping [ 255.601940][ T5851] usb 6-1: config 0 interface 0 has no altsetting 0 [ 257.552628][ T5851] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.562264][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.569258][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.746852][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.793962][ T5851] usb 6-1: Product: syz [ 257.798168][ T5851] usb 6-1: Manufacturer: syz [ 257.843699][ T5851] usb 6-1: SerialNumber: syz [ 257.898217][ T5851] usb 6-1: config 0 descriptor?? [ 257.926335][ T5851] usb 6-1: can't set config #0, error -71 [ 257.952782][ T5851] usb 6-1: USB disconnect, device number 4 [ 260.038284][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.084273][ T8752] team0: Port device batadv1 added [ 260.683510][ T8762] NILFS (nullb0): couldn't find nilfs on the device [ 264.761810][ C0] sched: RT throttling activated [ 265.130837][ T8780] netlink: 'syz.5.973': attribute type 1 has an invalid length. [ 265.632107][ T5851] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 265.817922][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 265.828022][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 265.847824][ T5851] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 265.856948][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.865021][ T5851] usb 4-1: Product: syz [ 265.869183][ T5851] usb 4-1: Manufacturer: syz [ 265.873864][ T5851] usb 4-1: SerialNumber: syz [ 265.880122][ T5851] usb 4-1: config 0 descriptor?? [ 265.885973][ T8784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.893365][ T8784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 265.901396][ T5851] usb 4-1: ucan: probing device on interface #0 [ 265.907763][ T5851] usb 4-1: ucan: invalid EP count (1) [ 265.913185][ T5851] usb 4-1: ucan: probe failed; try to update the device firmware [ 268.374609][ T23] usb 4-1: USB disconnect, device number 16 [ 270.238917][ T5851] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.530581][ T5851] usb 2-1: Using ep0 maxpacket: 16 [ 270.563260][ T5851] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.580625][ T8805] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.978' sets config #0 [ 270.586124][ T5851] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 270.614166][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 270.640138][ T5851] usb 2-1: Product: syz [ 270.651937][ T5851] usb 2-1: Manufacturer: syz [ 270.653034][ T8805] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.978' sets config #1 [ 270.687071][ T5851] usb 2-1: SerialNumber: syz [ 270.709272][ T5851] usb 2-1: config 0 descriptor?? [ 270.833265][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.977'. [ 271.247265][ T7363] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 271.271357][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 271.290221][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.070012][ T28] usb 2-1: USB disconnect, device number 15 [ 272.871502][ T8789] syz_tun (unregistering): left allmulticast mode [ 273.062100][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.147135][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.240180][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.290123][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.322704][ T5080] Bluetooth: hci4: command 0x0406 tx timeout [ 274.728680][ T11] hsr_slave_0: left promiscuous mode [ 274.735202][ T11] hsr_slave_1: left promiscuous mode [ 274.741443][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.763116][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.780079][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.787694][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.802862][ T11] bridge_slave_1: left allmulticast mode [ 274.808524][ T11] bridge_slave_1: left promiscuous mode [ 274.823292][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.848854][ T11] bridge_slave_0: left allmulticast mode [ 274.854752][ T11] bridge_slave_0: left promiscuous mode [ 274.860524][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.898896][ T11] veth1_macvtap: left promiscuous mode [ 274.905265][ T11] veth0_macvtap: left promiscuous mode [ 274.910937][ T11] veth1_vlan: left promiscuous mode [ 274.917283][ T11] veth0_vlan: left promiscuous mode [ 275.022224][ T7626] block nbd0: Possible stuck request ffff888022060000: control (read@0,1024B). Runtime 90 seconds [ 275.033126][ T7626] block nbd0: Possible stuck request ffff888022060200: control (read@1024,1024B). Runtime 90 seconds [ 275.044096][ T7626] block nbd0: Possible stuck request ffff888022060400: control (read@2048,1024B). Runtime 90 seconds [ 275.056291][ T7626] block nbd0: Possible stuck request ffff888022060600: control (read@3072,1024B). Runtime 90 seconds [ 275.564059][ T11] team0 (unregistering): Port device team_slave_1 removed [ 275.610158][ T11] team0 (unregistering): Port device team_slave_0 removed [ 275.657056][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.703495][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.205607][ T11] bond0 (unregistering): Released all slaves [ 278.288880][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.422645][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.488910][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.558769][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.686685][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.769778][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.855127][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.922195][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.588758][ T11] hsr_slave_0: left promiscuous mode [ 280.595043][ T11] hsr_slave_1: left promiscuous mode [ 280.601118][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.622149][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.630025][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.638209][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.646495][ T11] bridge_slave_1: left allmulticast mode [ 280.652414][ T11] bridge_slave_1: left promiscuous mode [ 280.658148][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.668003][ T11] bridge_slave_0: left allmulticast mode [ 280.674133][ T11] bridge_slave_0: left promiscuous mode [ 280.679852][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.696496][ T11] hsr_slave_0: left promiscuous mode [ 280.702794][ T11] hsr_slave_1: left promiscuous mode [ 280.708765][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.716504][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.724864][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.732732][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.740214][ T11] bridge_slave_1: left allmulticast mode [ 280.745956][ T11] bridge_slave_1: left promiscuous mode [ 280.752424][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.762097][ T11] bridge_slave_0: left allmulticast mode [ 280.767775][ T11] bridge_slave_0: left promiscuous mode [ 280.774067][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.816396][ T11] veth1_macvtap: left promiscuous mode [ 280.822016][ T11] veth0_macvtap: left promiscuous mode [ 280.827542][ T11] veth1_vlan: left promiscuous mode [ 280.832950][ T11] veth0_vlan: left promiscuous mode [ 280.840158][ T11] veth1_macvtap: left promiscuous mode [ 280.845821][ T11] veth0_macvtap: left promiscuous mode [ 280.851370][ T11] veth1_vlan: left promiscuous mode [ 280.856852][ T11] veth0_vlan: left promiscuous mode