last executing test programs: 23.042778366s ago: executing program 1 (id=1123): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad101020301090224"], 0x0) io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f00000001c0)=ANY=[], 0x0) 18.983301877s ago: executing program 1 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f00000002c0)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, r3, 0x0) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 13.888514999s ago: executing program 0 (id=1135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) 13.853743703s ago: executing program 2 (id=1136): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)}}], 0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) close(r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x54e979305c31cc96}, 0x40000) socket(0x3, 0x3, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 13.827999605s ago: executing program 1 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 12.529903953s ago: executing program 2 (id=1139): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x2, 0x0) 12.253109571s ago: executing program 0 (id=1140): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad101020301090224"], 0x0) io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f00000001c0)=ANY=[], 0x0) 11.523088553s ago: executing program 1 (id=1142): prlimit64(0x0, 0xe, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(r5, 0x94ed, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r6, r7+60000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x700, 0x0) 9.144472128s ago: executing program 2 (id=1146): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="580000eade05f2040000000003000000000039", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000108000000000000005da100000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000040900010073797a3000000000080003400000000a1488080000000100000000000000"], 0x64}}, 0x0) 9.056913316s ago: executing program 0 (id=1147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000019}) process_mrelease(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x2, 0x12) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 8.998285882s ago: executing program 3 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000000}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x38dc68d3d6e0aeb0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000003780)) timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={&(0x7f0000000080)="86d6a9f135832f72517903001729aa125aa5cee17480a102b9426b30f58c659b9a5103", 0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424"], 0x0) 8.600796651s ago: executing program 1 (id=1149): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = fanotify_init(0x40, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0xffffffbb) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000001080)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x8, 0x101, 0x2, 0x2, 0x3, 0x5, "6ecc04ff698aa601"}}, 0x120) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000001700)={0xa, {0x3, 0x4, 0x9}}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000003e40)) 6.670007591s ago: executing program 0 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 6.545423814s ago: executing program 1 (id=1151): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) sched_setattr(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a00"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff020000000000000000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0), 0x0) 5.731820934s ago: executing program 3 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 5.458577581s ago: executing program 0 (id=1153): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="580000eade05f2040000000003000000000039", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000108000000000000005da100000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000040900010073797a3000000000080003400000000a1488080000000100000000000000"], 0x64}}, 0x0) 5.456433561s ago: executing program 2 (id=1154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) 4.475253718s ago: executing program 2 (id=1155): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad101020301090224"], 0x0) io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f00000001c0)=ANY=[], 0x0) 2.383779124s ago: executing program 3 (id=1156): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}) 2.352297358s ago: executing program 0 (id=1157): prlimit64(0x0, 0xe, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(r5, 0x94ed, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r6, r7+60000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x700, 0x0) 2.106177802s ago: executing program 3 (id=1158): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) brk(0x101) mq_unlink(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 986.990533ms ago: executing program 3 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000019}) process_mrelease(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x2, 0x12) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) brk(0x200000ffc000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) 144.466566ms ago: executing program 3 (id=1160): prlimit64(0x0, 0xe, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x700, 0x0) 0s ago: executing program 2 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.195' (ED25519) to the list of known hosts. [ 82.358718][ T5777] cgroup: Unknown subsys name 'net' [ 82.493489][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.219721][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.375844][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.385265][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.388727][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.393782][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.401603][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.408292][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.415565][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.422441][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.430728][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.436025][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.445144][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.462996][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.466939][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.479415][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.488734][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.497392][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.505453][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.512897][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.539647][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.548813][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.557332][ T5105] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.575114][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.585095][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.592894][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.012974][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.120329][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 87.255043][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 87.492501][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.505338][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.512808][ T5790] bridge_slave_0: entered allmulticast mode [ 87.523709][ T5790] bridge_slave_0: entered promiscuous mode [ 87.534670][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.590978][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.598274][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.606026][ T5790] bridge_slave_1: entered allmulticast mode [ 87.613537][ T5790] bridge_slave_1: entered promiscuous mode [ 87.650457][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.657793][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.665858][ T5795] bridge_slave_0: entered allmulticast mode [ 87.673688][ T5795] bridge_slave_0: entered promiscuous mode [ 87.682613][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.690444][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.698658][ T5795] bridge_slave_1: entered allmulticast mode [ 87.706754][ T5795] bridge_slave_1: entered promiscuous mode [ 87.812014][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.819427][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.827693][ T5794] bridge_slave_0: entered allmulticast mode [ 87.834841][ T5794] bridge_slave_0: entered promiscuous mode [ 87.843736][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.851391][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.858905][ T5794] bridge_slave_1: entered allmulticast mode [ 87.866118][ T5794] bridge_slave_1: entered promiscuous mode [ 87.876025][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.892719][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.916412][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.952809][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.018012][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.030556][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.042755][ T5790] team0: Port device team_slave_0 added [ 88.053518][ T5790] team0: Port device team_slave_1 added [ 88.059845][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.067590][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.075044][ T5789] bridge_slave_0: entered allmulticast mode [ 88.082112][ T5789] bridge_slave_0: entered promiscuous mode [ 88.138952][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.146269][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.153490][ T5789] bridge_slave_1: entered allmulticast mode [ 88.161638][ T5789] bridge_slave_1: entered promiscuous mode [ 88.186939][ T5795] team0: Port device team_slave_0 added [ 88.204926][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.211917][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.238351][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.273762][ T5795] team0: Port device team_slave_1 added [ 88.296855][ T5794] team0: Port device team_slave_0 added [ 88.303582][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.310872][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.337665][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.351543][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.364121][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.389884][ T5794] team0: Port device team_slave_1 added [ 88.429571][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.436712][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.463378][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.477598][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.484784][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.511599][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.511783][ T5800] Bluetooth: hci0: command tx timeout [ 88.528268][ T5105] Bluetooth: hci1: command tx timeout [ 88.546499][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.553581][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.579676][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.590378][ T5105] Bluetooth: hci2: command tx timeout [ 88.627264][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.634248][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.660358][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.671235][ T5105] Bluetooth: hci3: command tx timeout [ 88.684393][ T5789] team0: Port device team_slave_0 added [ 88.709640][ T5790] hsr_slave_0: entered promiscuous mode [ 88.716582][ T5790] hsr_slave_1: entered promiscuous mode [ 88.728270][ T5789] team0: Port device team_slave_1 added [ 88.766678][ T5795] hsr_slave_0: entered promiscuous mode [ 88.773184][ T5795] hsr_slave_1: entered promiscuous mode [ 88.779853][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.787966][ T5795] Cannot create hsr debugfs directory [ 88.844216][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.851256][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.877463][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.893464][ T5794] hsr_slave_0: entered promiscuous mode [ 88.900046][ T5794] hsr_slave_1: entered promiscuous mode [ 88.909005][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.917154][ T5794] Cannot create hsr debugfs directory [ 88.955422][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.962607][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.989111][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.120841][ T5789] hsr_slave_0: entered promiscuous mode [ 89.127699][ T5789] hsr_slave_1: entered promiscuous mode [ 89.134105][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.141980][ T5789] Cannot create hsr debugfs directory [ 89.500316][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.520451][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.531173][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.542048][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.617075][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.638660][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.657945][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.669856][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.739589][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.761724][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.785104][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.798115][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.926410][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.937976][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.948938][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.961515][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.000503][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.063494][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.119904][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.160070][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.167594][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.200027][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.207247][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.229234][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.248245][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.255466][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.281155][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.303872][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.311132][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.337479][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.401508][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.408726][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.444406][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.470980][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.478185][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.530464][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.585132][ T5105] Bluetooth: hci1: command tx timeout [ 90.590614][ T5105] Bluetooth: hci0: command tx timeout [ 90.618892][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.668843][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.674741][ T5105] Bluetooth: hci2: command tx timeout [ 90.676103][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.726698][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.733907][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.745132][ T5105] Bluetooth: hci3: command tx timeout [ 90.819860][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.018128][ T5794] veth0_vlan: entered promiscuous mode [ 91.073738][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.086592][ T5794] veth1_vlan: entered promiscuous mode [ 91.199665][ T5794] veth0_macvtap: entered promiscuous mode [ 91.244548][ T5794] veth1_macvtap: entered promiscuous mode [ 91.288134][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.307493][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.328340][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.341972][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.350997][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.360772][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.370502][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.381531][ T5790] veth0_vlan: entered promiscuous mode [ 91.397110][ T5790] veth1_vlan: entered promiscuous mode [ 91.452543][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.549524][ T5795] veth0_vlan: entered promiscuous mode [ 91.567895][ T5790] veth0_macvtap: entered promiscuous mode [ 91.630590][ T5795] veth1_vlan: entered promiscuous mode [ 91.646608][ T5790] veth1_macvtap: entered promiscuous mode [ 91.660198][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.679212][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.683692][ T5789] veth0_vlan: entered promiscuous mode [ 91.734546][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.746144][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.758964][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.778929][ T5789] veth1_vlan: entered promiscuous mode [ 91.813407][ T5795] veth0_macvtap: entered promiscuous mode [ 91.826855][ T5795] veth1_macvtap: entered promiscuous mode [ 91.831614][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.842664][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.847668][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.861272][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.876135][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.900484][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.911746][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.925501][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.934445][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.993633][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.011065][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.021859][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.033750][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.047360][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.061369][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.072217][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.082113][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.092753][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.106327][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.143465][ T5789] veth0_macvtap: entered promiscuous mode [ 92.166651][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.179105][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.200240][ T966] cfg80211: failed to load regulatory.db [ 92.210783][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.220692][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252539][ T5789] veth1_macvtap: entered promiscuous mode [ 92.369043][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.387492][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.402855][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.423909][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.453874][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.471276][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.483633][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.551345][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.562491][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.573157][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.594923][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.605084][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.752610][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.770689][ T5105] Bluetooth: hci0: command tx timeout [ 92.776996][ T5105] Bluetooth: hci1: command tx timeout [ 92.783142][ T5105] Bluetooth: hci2: command tx timeout [ 92.826580][ T5800] Bluetooth: hci3: command tx timeout [ 92.972241][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.165491][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.201803][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.243396][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.262550][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.273303][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.283124][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360210][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.369328][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.910090][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.940589][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.120328][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.145998][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.247035][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.255115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.265123][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.305428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.537421][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.818064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.826772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.835461][ T5800] Bluetooth: hci2: command tx timeout [ 94.840990][ T5800] Bluetooth: hci1: command tx timeout [ 94.846503][ T5105] Bluetooth: hci0: command tx timeout [ 94.905362][ T5800] Bluetooth: hci3: command tx timeout [ 94.920691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 94.929686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.622023][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.635979][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.654264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.685253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.762857][ T5884] syz.3.5 (5884) used greatest stack depth: 17672 bytes left [ 96.456380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.515289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.124768][ T5912] Invalid ELF section header size [ 98.496065][ T5913] program syz.3.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.709393][ T5936] veth0_to_team: entered promiscuous mode [ 102.741956][ T5940] Invalid ELF section header size [ 103.224076][ T5941] program syz.0.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.277450][ T5908] syz.2.3 (5908): drop_caches: 2 [ 106.909511][ T5958] veth0_to_team: entered promiscuous mode [ 107.387261][ T5965] syz.1.18[5965]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 107.530088][ T5967] Invalid ELF section header size [ 107.570818][ T5968] syz.0.17: attempt to access beyond end of device [ 107.570818][ T5968] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 107.585693][ T5968] gfs2: error 10 reading superblock [ 107.588207][ T5965] loop1: detected capacity change from 0 to 512 [ 108.317796][ T5965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.363847][ T5967] program syz.2.19 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.636623][ T5977] netlink: 52 bytes leftover after parsing attributes in process `syz.0.20'. [ 109.262844][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.882475][ T6041] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.894481][ T6041] Cannot find add_set index 0 as target [ 119.903427][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.810093][ T6049] netlink: 52 bytes leftover after parsing attributes in process `syz.0.36'. [ 125.556703][ T6074] Invalid ELF section header size [ 125.951526][ T6076] program syz.0.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.765736][ T6102] syz.3.48: attempt to access beyond end of device [ 127.765736][ T6102] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 127.779107][ T6102] gfs2: error 10 reading superblock [ 128.922154][ T6111] Invalid ELF section header size [ 129.173006][ T6112] program syz.3.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.622753][ T6115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.47'. [ 132.102503][ T6144] Invalid ELF section header size [ 132.564909][ T6146] program syz.0.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.163864][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.178366][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.934869][ T6178] syz.0.64: attempt to access beyond end of device [ 137.934869][ T6178] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 137.975525][ T6178] gfs2: error 10 reading superblock [ 138.262380][ T6181] Invalid ELF section header size [ 138.955432][ T6181] program syz.2.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.253475][ T6171] loop1: detected capacity change from 0 to 40427 [ 139.288152][ T6171] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.296512][ T6171] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.436282][ T6171] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 141.415742][ T966] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.814671][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 141.835558][ T966] usb 2-1: config 0 has an invalid interface number: 114 but max is 0 [ 141.844201][ T966] usb 2-1: config 0 has no interface number 0 [ 141.864770][ T966] usb 2-1: config 0 interface 114 has no altsetting 0 [ 141.896755][ T966] usb 2-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 141.906951][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.919445][ T966] usb 2-1: Product: syz [ 141.927772][ T966] usb 2-1: Manufacturer: syz [ 141.932752][ T966] usb 2-1: SerialNumber: syz [ 141.998881][ T966] usb 2-1: config 0 descriptor?? [ 142.443189][ T5830] hid-generic 0101:0002:0002.0001: item fetching failed at offset 3/10 [ 142.613647][ T5830] hid-generic: probe of 0101:0002:0002.0001 failed with error -22 [ 142.663316][ T966] usb 2-1: bad CDC descriptors [ 142.697977][ T966] usb 2-1: bad CDC descriptors [ 142.736953][ T966] usb 2-1: USB disconnect, device number 2 [ 142.894103][ T6226] syzkaller0: entered promiscuous mode [ 142.899817][ T6226] syzkaller0: entered allmulticast mode [ 142.915501][ T6226] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 143.149888][ T6230] Invalid ELF section header size [ 143.227588][ T6060] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 143.261141][ T6231] program syz.0.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.465367][ T5800] Bluetooth: hci0: command 0x0401 tx timeout [ 143.491068][ T6060] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.543874][ T6060] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.553547][ T6060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.564765][ T6060] usb 4-1: Product: syz [ 143.569077][ T6060] usb 4-1: Manufacturer: syz [ 143.574382][ T6060] usb 4-1: SerialNumber: syz [ 143.610569][ T6060] usb 4-1: config 0 descriptor?? [ 143.921598][ T6235] capability: warning: `syz.3.75' uses 32-bit capabilities (legacy support in use) [ 144.570600][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.681180][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.200557][ T6243] loop0: detected capacity change from 0 to 40427 [ 146.244995][ T6243] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 146.257698][ T6243] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 146.387203][ T6243] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.577329][ T5830] usb 4-1: USB disconnect, device number 2 [ 146.831127][ T6243] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 146.885500][ T6243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 147.003909][ T6260] syz.3.81: attempt to access beyond end of device [ 147.003909][ T6260] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 147.017067][ T6260] gfs2: error 10 reading superblock [ 149.114755][ T6275] Invalid ELF section header size [ 149.825011][ T6275] program syz.1.84 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.921561][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 149.954717][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 149.976144][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 149.988886][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 150.266047][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 150.273769][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 150.354938][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 152.626219][ T6292] loop2: detected capacity change from 0 to 40427 [ 152.639481][ T6292] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 152.666823][ T6292] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 152.770306][ T6292] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.944870][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.157528][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 153.190360][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.204007][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.251776][ T23] usb 1-1: Product: syz [ 153.258878][ T23] usb 1-1: Manufacturer: syz [ 153.263723][ T23] usb 1-1: SerialNumber: syz [ 153.278239][ T23] usb 1-1: config 0 descriptor?? [ 153.288313][ T6292] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 153.304103][ T6292] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.795155][ T6313] Cannot find add_set index 0 as target [ 154.602191][ T6299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.627720][ T6299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.599039][ T6060] usb 1-1: USB disconnect, device number 2 [ 156.975799][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.164745][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 157.216001][ T5878] usb 2-1: config 0 has an invalid interface number: 114 but max is 0 [ 157.243432][ T5878] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 157.768532][ T5878] usb 2-1: config 0 has no interface number 0 [ 157.775157][ T5878] usb 2-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.789712][ T5878] usb 2-1: config 0 interface 114 has no altsetting 0 [ 157.806576][ T6339] Zero length message leads to an empty skb [ 157.839845][ T5878] usb 2-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 157.863983][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.882866][ T5878] usb 2-1: Product: syz [ 157.915228][ T5878] usb 2-1: Manufacturer: syz [ 157.919965][ T5878] usb 2-1: SerialNumber: syz [ 157.927819][ T5878] usb 2-1: config 0 descriptor?? [ 158.151770][ T5878] usb 2-1: bad CDC descriptors [ 158.229243][ T5878] usb 2-1: bad CDC descriptors [ 158.281880][ T5878] usb 2-1: USB disconnect, device number 3 [ 159.154271][ T5800] Bluetooth: hci0: command 0x0401 tx timeout [ 159.448652][ T6352] syz.2.103: attempt to access beyond end of device [ 159.448652][ T6352] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 159.462657][ T6352] gfs2: error 10 reading superblock [ 160.279667][ T6357] Cannot find add_set index 0 as target [ 162.888138][ T6368] Invalid ELF section header size [ 163.609735][ T6368] program syz.3.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.802803][ T6408] Invalid ELF section header size [ 168.133012][ T6409] program syz.2.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.945359][ T5800] Bluetooth: hci0: command 0x0401 tx timeout [ 172.982577][ T6449] Invalid ELF section header size [ 173.111986][ T6453] program syz.2.127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.033579][ T6451] syz.3.126 (6451): drop_caches: 2 [ 175.608689][ T6443] loop1: detected capacity change from 0 to 40427 [ 175.728728][ T6443] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 175.977621][ T6443] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.004967][ T6443] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 176.543653][ T6476] Cannot find add_set index 0 as target [ 179.325443][ T6485] veth0_to_team: entered promiscuous mode [ 183.651390][ T6516] Invalid ELF section header size [ 184.053799][ T6526] Cannot find add_set index 0 as target [ 185.193039][ T6523] program syz.0.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.527017][ T5793] hid-generic 0101:0002:0002.0002: item fetching failed at offset 3/10 [ 187.537195][ T5793] hid-generic: probe of 0101:0002:0002.0002 failed with error -22 [ 187.730640][ T6547] Invalid ELF section header size [ 193.702506][ T6595] Cannot find add_set index 0 as target [ 194.515803][ T6597] veth0_to_team: entered promiscuous mode [ 196.617991][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.625549][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.191489][ T6636] Cannot find add_set index 0 as target [ 210.791650][ T6683] Cannot find add_set index 0 as target [ 212.104962][ T5799] Bluetooth: hci0: command 0x0401 tx timeout [ 212.111261][ T6673] Bluetooth: hci3: command 0x0406 tx timeout [ 212.185117][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 212.191502][ T6673] Bluetooth: hci1: command 0x0406 tx timeout [ 213.235574][ T6694] netlink: 32 bytes leftover after parsing attributes in process `syz.3.177'. [ 216.033694][ T6718] Invalid ELF section header size [ 216.383481][ T6719] program syz.1.187 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.636373][ T6730] syz.1.189: attempt to access beyond end of device [ 217.636373][ T6730] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 217.650089][ T6730] gfs2: error 10 reading superblock [ 219.234347][ T6745] syzkaller0: entered promiscuous mode [ 219.254710][ T6745] syzkaller0: entered allmulticast mode [ 219.668907][ T6749] Invalid ELF section header size [ 222.952980][ T6769] kvm: pic: non byte write [ 222.979210][ T6771] Invalid ELF section header size [ 223.587756][ T6771] program syz.1.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.822275][ T6778] syzkaller0: entered promiscuous mode [ 223.830290][ T6778] syzkaller0: entered allmulticast mode [ 223.998140][ T6778] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 224.914670][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 225.606669][ T6800] Cannot find add_set index 0 as target [ 226.863064][ T6801] Invalid ELF section header size [ 227.125590][ T6802] program syz.1.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.795508][ T6814] Invalid ELF section header size [ 230.968022][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 232.523131][ T6842] loop2: detected capacity change from 0 to 512 [ 233.061416][ T6842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.872098][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.365064][ T6851] syzkaller0: entered promiscuous mode [ 234.370634][ T6851] syzkaller0: entered allmulticast mode [ 234.466764][ T6854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 235.404633][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 235.609104][ T6860] syzkaller0: entered promiscuous mode [ 235.614839][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 235.626314][ T6860] syzkaller0: entered allmulticast mode [ 235.636386][ T8] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 235.661194][ T8] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 235.687156][ T8] usb 1-1: config 0 has no interface number 1 [ 235.693649][ T8] usb 1-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 235.717348][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 49, using maximum allowed: 30 [ 235.729988][ T8] usb 1-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 235.751259][ T8] usb 1-1: config 0 interface 114 has no altsetting 0 [ 235.768476][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.811458][ T8] usb 1-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 235.846750][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.860591][ T8] usb 1-1: Product: syz [ 235.866455][ T8] usb 1-1: Manufacturer: syz [ 235.871545][ T8] usb 1-1: SerialNumber: syz [ 235.899944][ T8] usb 1-1: config 0 descriptor?? [ 236.365207][ T8] usb 1-1: bad CDC descriptors [ 236.520935][ T8] usb 1-1: bad CDC descriptors [ 236.791864][ T8] usb 1-1: USB disconnect, device number 3 [ 237.085830][ T6880] binder: 6878:6880 ioctl 4018620d 0 returned -22 [ 237.180563][ T6876] kvm: pic: non byte write [ 237.288795][ T6882] Invalid ELF section header size [ 238.133497][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 239.064766][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 245.605862][ T6924] Invalid ELF section header size [ 248.350067][ T6951] loop0: detected capacity change from 0 to 512 [ 248.480102][ T6951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.317895][ T6969] syz.1.244: attempt to access beyond end of device [ 251.317895][ T6969] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 251.605250][ T6969] gfs2: error 10 reading superblock [ 251.796933][ T6976] syz.2.246: attempt to access beyond end of device [ 251.796933][ T6976] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 251.811667][ T6976] gfs2: error 10 reading superblock [ 252.387793][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.429551][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.245'. [ 252.810500][ T6983] tipc: Started in network mode [ 252.832606][ T6983] tipc: Node identity e20a41cb4f0b, cluster identity 4711 [ 252.854254][ T6983] tipc: Enabled bearer , priority 0 [ 252.883831][ T6983] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 252.934164][ T6983] tipc: Resetting bearer [ 252.994477][ T6981] tipc: Disabling bearer [ 253.337394][ T6986] Invalid ELF section header size [ 253.521078][ T6987] program syz.2.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 254.227122][ T6989] syzkaller0: entered promiscuous mode [ 254.232673][ T6989] syzkaller0: entered allmulticast mode [ 256.027068][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.033495][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.049027][ T7017] Invalid ELF section header size [ 258.984900][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 259.272199][ T7030] syz.1.260: attempt to access beyond end of device [ 259.272199][ T7030] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 259.288104][ T7030] gfs2: error 10 reading superblock [ 262.576085][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 263.695408][ T7067] Invalid ELF section header size [ 264.399228][ T7074] syz.2.271: attempt to access beyond end of device [ 264.399228][ T7074] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 264.412652][ T7074] gfs2: error 10 reading superblock [ 264.942549][ T7079] loop3: detected capacity change from 0 to 4096 [ 265.182292][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 265.208384][ T7079] EXT4-fs (loop3): Test dummy encryption mode enabled [ 265.311188][ T7079] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 265.324846][ T7079] System zones: 0-5 [ 265.349063][ T7079] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.559433][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.404631][ T7108] Invalid ELF section header size [ 269.871519][ T7113] program syz.3.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.451388][ T7111] syzkaller0: entered promiscuous mode [ 270.458030][ T7111] syzkaller0: entered allmulticast mode [ 271.797539][ T7125] loop1: detected capacity change from 0 to 4096 [ 271.807745][ T7125] EXT4-fs (loop1): Test dummy encryption mode enabled [ 271.837961][ T7125] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 271.903964][ T7125] System zones: 0-5 [ 271.955738][ T7125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.747188][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.666207][ T7159] syz.3.291: attempt to access beyond end of device [ 276.666207][ T7159] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 276.680112][ T7159] gfs2: error 10 reading superblock [ 278.511049][ T7170] loop3: detected capacity change from 0 to 4096 [ 278.577105][ T7170] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.598114][ T7178] tipc: Started in network mode [ 278.609490][ T7178] tipc: Node identity a6e6fc22a2de, cluster identity 4711 [ 278.614677][ T7170] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 278.627073][ T7178] tipc: Enabled bearer , priority 0 [ 278.646937][ T7178] syzkaller0: entered promiscuous mode [ 278.652554][ T7178] syzkaller0: entered allmulticast mode [ 278.668257][ T7170] System zones: 0-5 [ 278.708731][ T7178] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 278.727465][ T7170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.785730][ T7176] tipc: Resetting bearer [ 279.025053][ T7176] tipc: Disabling bearer [ 280.962788][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.904755][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 282.104797][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 282.147316][ T27] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 282.176592][ T27] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 282.237404][ T27] usb 1-1: config 0 has no interface number 0 [ 282.266603][ T27] usb 1-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.283638][ T27] usb 1-1: config 0 interface 114 has no altsetting 0 [ 282.311090][ T27] usb 1-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 282.326831][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.356561][ T27] usb 1-1: Product: syz [ 282.361574][ T27] usb 1-1: Manufacturer: syz [ 282.379045][ T27] usb 1-1: SerialNumber: syz [ 282.542608][ T27] usb 1-1: config 0 descriptor?? [ 282.817806][ T27] usb 1-1: bad CDC descriptors [ 282.840672][ T27] usb 1-1: bad CDC descriptors [ 282.851131][ T27] usb 1-1: USB disconnect, device number 4 [ 284.162207][ T7224] fuse: Bad value for 'rootmode' [ 284.898233][ T7228] loop1: detected capacity change from 0 to 4096 [ 284.914422][ T7228] EXT4-fs (loop1): Test dummy encryption mode enabled [ 284.931247][ T7228] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 284.940485][ T7228] System zones: 0-5 [ 286.082847][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.854339][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.125166][ T966] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 289.464750][ T966] usb 1-1: Using ep0 maxpacket: 32 [ 289.472907][ T966] usb 1-1: config 0 has an invalid interface number: 114 but max is 0 [ 289.484914][ T966] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 289.496520][ T966] usb 1-1: config 0 has no interface number 0 [ 289.503265][ T966] usb 1-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.588524][ T966] usb 1-1: config 0 interface 114 has no altsetting 0 [ 289.620942][ T7258] Invalid ELF section header size [ 289.646409][ T966] usb 1-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 289.646550][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.646648][ T966] usb 1-1: Product: syz [ 289.646743][ T966] usb 1-1: Manufacturer: syz [ 289.646840][ T966] usb 1-1: SerialNumber: syz [ 289.783594][ T966] usb 1-1: config 0 descriptor?? [ 290.011593][ T7261] program syz.1.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.438242][ T966] usb 1-1: bad CDC descriptors [ 290.474347][ T966] usb 1-1: bad CDC descriptors [ 290.514679][ T966] usb 1-1: USB disconnect, device number 5 [ 291.253392][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 291.664745][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 291.705085][ T5878] usb 4-1: config 0 has an invalid interface number: 114 but max is 0 [ 291.750343][ T7273] fuse: Bad value for 'rootmode' [ 291.753053][ T5878] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 291.815042][ T5878] usb 4-1: config 0 has no interface number 0 [ 291.831802][ T5878] usb 4-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.851377][ T5878] usb 4-1: config 0 interface 114 has no altsetting 0 [ 292.021138][ T5878] usb 4-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 292.032200][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.057803][ T5878] usb 4-1: Product: syz [ 292.063977][ T5878] usb 4-1: Manufacturer: syz [ 292.114775][ T5878] usb 4-1: SerialNumber: syz [ 292.161782][ T5878] usb 4-1: config 0 descriptor?? [ 292.432908][ T5878] usb 4-1: bad CDC descriptors [ 292.452875][ T5878] usb 4-1: bad CDC descriptors [ 292.488209][ T5878] usb 4-1: USB disconnect, device number 3 [ 293.692391][ T7285] loop0: detected capacity change from 0 to 4096 [ 293.752596][ T7285] EXT4-fs (loop0): Test dummy encryption mode enabled [ 293.768922][ T7285] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 293.780204][ T7285] System zones: 0-5 [ 293.838313][ T7285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.390508][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.406109][ T7303] syz.3.326: attempt to access beyond end of device [ 295.406109][ T7303] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 295.420649][ T7303] gfs2: error 10 reading superblock [ 295.854386][ T7306] Invalid ELF section header size [ 296.400489][ T7306] program syz.2.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.620292][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 296.734709][ T7317] syz.1.330: attempt to access beyond end of device [ 296.734709][ T7317] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 296.750343][ T7317] gfs2: error 10 reading superblock [ 296.959016][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 297.193847][ T7318] fuse: Unknown parameter 'use00000000000000000000' [ 297.234617][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 297.254094][ T5878] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 297.295362][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.465635][ T5878] usb 1-1: Product: syz [ 297.470772][ T5878] usb 1-1: Manufacturer: syz [ 297.507955][ T5878] usb 1-1: SerialNumber: syz [ 297.624597][ T5878] usb 1-1: config 0 descriptor?? [ 298.002476][ T5878] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 299.717037][ T5878] gspca_topro: reg_r err -71 [ 299.905431][ T5878] gspca_topro: Sensor soi763a [ 300.101552][ T5878] usb 1-1: USB disconnect, device number 6 [ 300.645980][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.338'. [ 300.656269][ T7350] netlink: set zone limit has 8 unknown bytes [ 302.184747][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 303.264044][ T7364] fuse: Unknown parameter 'use00000000000000000000' [ 306.571235][ T7350] syz.0.338 (7350): drop_caches: 2 [ 311.160984][ T7410] syz.0.352: attempt to access beyond end of device [ 311.160984][ T7410] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 311.175353][ T7410] gfs2: error 10 reading superblock [ 311.881808][ T7413] fuse: Unknown parameter 'use00000000000000000000' [ 316.072809][ T7444] Invalid ELF section header size [ 317.475980][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.482456][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.812686][ T7452] tipc: Started in network mode [ 317.854070][ T7452] tipc: Node identity a67a34c3b7dc, cluster identity 4711 [ 317.861728][ T7452] tipc: Enabled bearer , priority 0 [ 317.871170][ T7452] syzkaller0: entered promiscuous mode [ 317.877487][ T7452] syzkaller0: entered allmulticast mode [ 317.894246][ T7452] tipc: Resetting bearer [ 318.406221][ T7451] tipc: Resetting bearer [ 318.765467][ T7451] tipc: Disabling bearer [ 319.978888][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 320.050732][ T7467] fuse: Unknown parameter 'user_i00000000000000000000' [ 320.174569][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 320.219460][ T5878] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 320.255166][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.284700][ T5878] usb 4-1: Product: syz [ 320.300438][ T5878] usb 4-1: Manufacturer: syz [ 320.342582][ T5878] usb 4-1: SerialNumber: syz [ 320.393507][ T5878] usb 4-1: config 0 descriptor?? [ 320.457490][ T5878] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 323.019212][ T5878] gspca_topro: reg_w err -71 [ 323.084671][ T5878] gspca_topro: Sensor soi763a [ 323.120476][ T7485] Invalid ELF section header size [ 323.122375][ T5878] usb 4-1: USB disconnect, device number 4 [ 324.578869][ T7495] program syz.2.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.059937][ T7502] netlink: 52 bytes leftover after parsing attributes in process `syz.3.375'. [ 326.008986][ T7509] fuse: Unknown parameter 'user_i00000000000000000000' [ 326.141713][ T7511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.376'. [ 327.656122][ T7522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 327.722969][ T7522] netlink: set zone limit has 8 unknown bytes [ 330.534652][ T7533] Invalid ELF section header size [ 330.828517][ T7534] program syz.2.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.272508][ T7522] syz.1.379 (7522): drop_caches: 2 [ 332.539188][ T7547] fuse: Unknown parameter 'user_i00000000000000000000' [ 333.936058][ T7556] loop0: detected capacity change from 0 to 4096 [ 333.985426][ T7556] EXT4-fs (loop0): Test dummy encryption mode enabled [ 334.035371][ T7556] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 334.043812][ T7556] System zones: 0-5 [ 334.096233][ T7556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.976977][ T7580] tipc: Enabled bearer , priority 0 [ 336.985762][ T7580] syzkaller0: entered promiscuous mode [ 336.991305][ T7580] syzkaller0: entered allmulticast mode [ 337.015219][ T7580] tipc: Resetting bearer [ 337.040259][ T7579] tipc: Resetting bearer [ 337.666735][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.689852][ T7579] tipc: Disabling bearer [ 337.726279][ T7573] loop2: detected capacity change from 0 to 40427 [ 337.759555][ T7573] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 337.823722][ T7573] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 337.897408][ T7573] F2FS-fs (loop2): Found nat_bits in checkpoint [ 338.026638][ T7590] Invalid ELF section header size [ 338.314986][ T7024] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 338.347736][ T7592] program syz.0.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.472742][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 338.637933][ T7024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.660917][ T7573] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 338.681021][ T7573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 338.704598][ T7024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.728863][ T7024] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 338.748470][ T7024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.778311][ T7024] usb 4-1: config 0 descriptor?? [ 338.923206][ T7596] fuse: Unknown parameter 'user_id00000000000000000000' [ 339.031001][ T7598] Invalid ELF section header size [ 339.297710][ T7024] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 339.305811][ T7024] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 339.378877][ T7024] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 339.472867][ T7024] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 340.211353][ T7024] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 340.400594][ T7024] usb 4-1: USB disconnect, device number 5 [ 342.005407][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 342.244484][ C1] sched: RT throttling activated [ 342.337939][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.400329][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.451308][ T5878] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 342.492973][ T7619] tipc: Enabling of bearer rejected, failed to enable media [ 342.511601][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.530531][ T7619] syzkaller0: entered promiscuous mode [ 342.542462][ T5878] usb 3-1: config 0 descriptor?? [ 342.550309][ T7619] syzkaller0: entered allmulticast mode [ 343.412497][ T5878] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 343.424271][ T5878] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 343.454377][ T5878] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 343.580157][ T7631] Invalid ELF section header size [ 343.747940][ T5878] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 344.193089][ T7633] fuse: Unknown parameter 'user_id00000000000000000000' [ 344.428948][ T5878] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 344.457779][ T5878] usb 3-1: USB disconnect, device number 2 [ 344.729732][ T7623] loop1: detected capacity change from 0 to 40427 [ 344.741251][ T7623] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 344.780964][ T7623] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 345.047030][ T7623] F2FS-fs (loop1): Found nat_bits in checkpoint [ 345.790358][ T6599] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 348.150670][ T7666] syz.2.419: attempt to access beyond end of device [ 348.150670][ T7666] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 348.168291][ T7666] gfs2: error 10 reading superblock [ 348.728094][ T7672] Invalid ELF section header size [ 349.496285][ T7676] fuse: Unknown parameter 'user_id00000000000000000000' [ 350.744878][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 351.599798][ T7696] Invalid ELF section header size [ 353.195899][ T7706] Invalid ELF section header size [ 353.275653][ T7707] syz.0.429: attempt to access beyond end of device [ 353.275653][ T7707] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 353.290060][ T7707] gfs2: error 10 reading superblock [ 353.710523][ T7696] program syz.2.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.517414][ T7713] Invalid ELF section header size [ 354.819424][ T7714] program syz.3.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.083769][ T7716] fuse: Bad value for 'fd' [ 356.944952][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 357.324959][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 357.563463][ T9] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 357.769529][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.778775][ T9] usb 3-1: Product: syz [ 357.783666][ T9] usb 3-1: Manufacturer: syz [ 357.789147][ T9] usb 3-1: SerialNumber: syz [ 357.805853][ T9] usb 3-1: config 0 descriptor?? [ 358.612243][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 358.739936][ T7739] Invalid ELF section header size [ 359.421175][ T7743] netlink: 52 bytes leftover after parsing attributes in process `syz.3.441'. [ 359.890660][ T9] gspca_topro: reg_w err -110 [ 359.934607][ T9] gspca_topro: Sensor soi763a [ 360.200405][ T7749] ======================================================= [ 360.200405][ T7749] WARNING: The mand mount option has been deprecated and [ 360.200405][ T7749] and is ignored by this kernel. Remove the mand [ 360.200405][ T7749] option from the mount to silence this warning. [ 360.200405][ T7749] ======================================================= [ 360.296957][ T7749] tmpfs: Bad value for 'nr_blocks' [ 360.366505][ T7754] fuse: Bad value for 'fd' [ 362.024978][ T9] usb 3-1: USB disconnect, device number 3 [ 362.141087][ T7760] tipc: Enabling of bearer rejected, failed to enable media [ 362.183234][ T7749] binder: 7748:7749 ioctl 40189206 200000000340 returned -22 [ 365.394395][ T7796] syz.0.453: attempt to access beyond end of device [ 365.394395][ T7796] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 365.409459][ T7796] gfs2: error 10 reading superblock [ 366.870361][ T7803] fuse: Bad value for 'fd' [ 368.772601][ T7812] tmpfs: Bad value for 'nr_blocks' [ 369.150129][ T7815] binder: 7811:7815 ioctl 40189206 200000000340 returned -22 [ 369.473584][ T7819] tmpfs: Bad value for 'nr_blocks' [ 369.830010][ T7820] binder: 7818:7820 ioctl 40189206 200000000340 returned -22 [ 371.085791][ T7830] Invalid ELF section header size [ 371.177608][ T7831] program syz.1.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.308150][ T7845] syz.0.469: attempt to access beyond end of device [ 373.308150][ T7845] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 373.321516][ T7845] gfs2: error 10 reading superblock [ 373.936906][ T7852] kvm: pic: non byte write [ 375.022481][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 378.913985][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.923685][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.649172][ T7907] loop2: detected capacity change from 0 to 512 [ 379.709865][ T7907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.384269][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.664938][ T5793] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 383.906575][ T5793] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 383.916996][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.925285][ T5793] usb 1-1: Product: syz [ 383.934672][ T5793] usb 1-1: Manufacturer: syz [ 383.939464][ T5793] usb 1-1: SerialNumber: syz [ 383.990993][ T5793] usb 1-1: config 0 descriptor?? [ 385.241763][ T5793] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.425035][ T7941] Invalid ELF section header size [ 386.402094][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 386.746490][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 386.856149][ T5830] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 386.977666][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.050172][ T5830] usb 2-1: Product: syz [ 387.060905][ T5830] usb 2-1: Manufacturer: syz [ 387.071788][ T5830] usb 2-1: SerialNumber: syz [ 387.087532][ T5830] usb 2-1: config 0 descriptor?? [ 387.249657][ T5830] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 387.366296][ T5793] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 387.422131][ T5793] usb 1-1: USB disconnect, device number 7 [ 388.594283][ T5830] gspca_topro: reg_w err -71 [ 388.644709][ T5830] gspca_topro: Sensor soi763a [ 388.671600][ T5830] usb 2-1: USB disconnect, device number 4 [ 390.794085][ T7979] Invalid ELF section header size [ 391.320195][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 391.633896][ T7991] loop0: detected capacity change from 0 to 4096 [ 391.675654][ T5793] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 391.802941][ T7991] EXT4-fs (loop0): Test dummy encryption mode enabled [ 391.814599][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 391.820369][ T7991] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 391.841824][ T7991] System zones: 0-5 [ 391.961680][ T5793] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 391.969484][ T7991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.973059][ T5793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.993790][ T5793] usb 3-1: Product: syz [ 391.998216][ T5793] usb 3-1: Manufacturer: syz [ 392.002980][ T5793] usb 3-1: SerialNumber: syz [ 392.065834][ T5793] usb 3-1: config 0 descriptor?? [ 392.076694][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.090323][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.123207][ T27] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 392.132720][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.427647][ T27] usb 4-1: config 0 descriptor?? [ 392.472774][ T5793] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 392.707088][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.964074][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 392.989976][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 393.027758][ T27] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 393.173090][ T27] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 393.384707][ T27] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 393.452615][ T27] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 393.539637][ T27] usb 4-1: USB disconnect, device number 6 [ 393.920610][ T8006] fido_id[8006]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 394.297127][ T5793] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 394.307993][ T5793] usb 3-1: USB disconnect, device number 4 [ 395.805345][ T8019] tmpfs: Bad value for 'nr_blocks' [ 395.810776][ T8021] Invalid ELF section header size [ 396.659031][ T8025] tipc: Enabled bearer , priority 0 [ 396.897740][ T8028] binder: 8018:8028 ioctl 40189206 200000000340 returned -22 [ 396.947032][ T8026] loop0: detected capacity change from 0 to 4096 [ 396.985151][ T8025] syzkaller0: entered promiscuous mode [ 396.990704][ T8025] syzkaller0: entered allmulticast mode [ 397.007319][ T8026] EXT4-fs (loop0): Test dummy encryption mode enabled [ 397.042825][ T8026] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 397.052241][ T8026] System zones: 0-5 [ 397.071068][ T8026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.071678][ T8025] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 397.541891][ T8025] tipc: Resetting bearer [ 397.724963][ T5878] tipc: Node number set to 2902540747 [ 397.739496][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.904090][ T8023] tipc: Resetting bearer [ 398.248042][ T8023] tipc: Disabling bearer [ 399.215979][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.517'. [ 399.225834][ T8044] netlink: set zone limit has 8 unknown bytes [ 399.897154][ T8050] Invalid ELF section header size [ 402.773556][ T8050] program syz.1.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.846646][ T8044] syz.3.517 (8044): drop_caches: 2 [ 403.007189][ T8064] syzkaller0: entered promiscuous mode [ 403.018043][ T8064] syzkaller0: entered allmulticast mode [ 403.616188][ T8071] loop1: detected capacity change from 0 to 4096 [ 403.676351][ T8071] EXT4-fs (loop1): Test dummy encryption mode enabled [ 403.734822][ T8071] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 403.747750][ T8074] Invalid ELF section header size [ 404.234710][ T8071] System zones: 0-5 [ 404.385888][ T8071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.584575][ T8017] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 405.074643][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 405.279097][ T8017] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 405.298523][ T8017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.307103][ T8017] usb 1-1: Product: syz [ 405.308404][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.324911][ T8017] usb 1-1: Manufacturer: syz [ 405.329583][ T8017] usb 1-1: SerialNumber: syz [ 405.355532][ T8017] usb 1-1: config 0 descriptor?? [ 405.524293][ T8083] trusted_key: syz.3.527 sent an empty control message without MSG_MORE. [ 405.580225][ T8017] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 407.946940][ T8017] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 408.534920][ T8017] usb 1-1: USB disconnect, device number 8 [ 409.623511][ T8113] syz.3.532: attempt to access beyond end of device [ 409.623511][ T8113] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 409.637244][ T8113] gfs2: error 10 reading superblock [ 411.156032][ T8123] Invalid ELF section header size [ 411.930069][ T8129] loop3: detected capacity change from 0 to 512 [ 412.012422][ T8129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.808294][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.397858][ T8172] Invalid ELF section header size [ 419.890944][ T8187] loop1: detected capacity change from 0 to 512 [ 419.943585][ T8187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.001767][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.146476][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 423.594380][ T8215] Invalid ELF section header size [ 423.749461][ T8216] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.218022][ T8217] kvm: pic: non byte write [ 425.552538][ T8223] loop3: detected capacity change from 0 to 512 [ 426.090803][ T8228] tmpfs: Bad value for 'nr_blocks' [ 426.091115][ T8223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.502960][ T8231] binder: 8227:8231 ioctl 40189206 200000000340 returned -22 [ 427.457448][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.269969][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 429.556616][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 429.606669][ T5878] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 429.629199][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.642414][ T5878] usb 2-1: Product: syz [ 429.654665][ T5878] usb 2-1: Manufacturer: syz [ 429.659337][ T5878] usb 2-1: SerialNumber: syz [ 429.700531][ T8251] program syz.2.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.717120][ T5878] usb 2-1: config 0 descriptor?? [ 429.940835][ T8260] program syz.3.572 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.362426][ T5878] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 431.149155][ T8268] loop3: detected capacity change from 0 to 512 [ 431.214774][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 431.424701][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 431.469275][ T27] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 431.478606][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.486998][ T27] usb 3-1: Product: syz [ 431.491515][ T27] usb 3-1: Manufacturer: syz [ 431.502390][ T27] usb 3-1: SerialNumber: syz [ 431.588303][ T27] usb 3-1: config 0 descriptor?? [ 431.597032][ T8271] program syz.0.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.642196][ T27] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 431.672668][ T8268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.742969][ T5878] gspca_topro: reg_w err -71 [ 431.815093][ T5878] gspca_topro: Sensor soi763a [ 431.854773][ T5878] usb 2-1: USB disconnect, device number 5 [ 432.649751][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.820010][ T8281] tmpfs: Bad value for 'nr_blocks' [ 433.888824][ T8282] binder: 8280:8282 ioctl 40189206 200000000340 returned -22 [ 433.949576][ T27] gspca_topro: reg_r err -71 [ 433.954400][ T27] gspca_topro: Sensor soi763a [ 434.020795][ T27] usb 3-1: USB disconnect, device number 5 [ 434.406284][ T8286] syz.1.578: attempt to access beyond end of device [ 434.406284][ T8286] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 434.419657][ T8286] gfs2: error 10 reading superblock [ 437.172040][ T8310] loop1: detected capacity change from 0 to 512 [ 437.258331][ T8310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.144551][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.349338][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.382037][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.965097][ T8387] tmpfs: Bad value for 'nr_blocks' [ 445.124189][ T8388] binder: 8386:8388 ioctl 40189206 200000000340 returned -22 [ 449.064571][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 449.807905][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 449.827772][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.852228][ T27] usb 2-1: Product: syz [ 449.859265][ T27] usb 2-1: Manufacturer: syz [ 449.864306][ T27] usb 2-1: SerialNumber: syz [ 449.899369][ T27] usb 2-1: config 0 descriptor?? [ 450.150545][ T27] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 451.100581][ T8425] fuse: Bad value for 'fd' [ 452.084936][ T27] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 452.123798][ T27] usb 2-1: USB disconnect, device number 6 [ 452.170159][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 461.030246][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 461.040125][ T8498] tmpfs: Bad value for 'nr_blocks' [ 472.810037][ T50] Bluetooth: hci0: unexpected event for opcode 0x202d [ 475.759051][ T8607] tmpfs: Bad value for 'nr_blocks' [ 476.066733][ T8608] binder: 8606:8608 ioctl 40189206 200000000340 returned -22 [ 479.655878][ T50] Bluetooth: hci0: unexpected event for opcode 0x202d [ 481.260892][ T8651] loop3: detected capacity change from 0 to 512 [ 481.388342][ T8651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.398067][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.501981][ T8715] Invalid ELF section header size [ 490.431094][ T8718] loop3: detected capacity change from 0 to 4096 [ 490.472041][ T8718] EXT4-fs (loop3): Test dummy encryption mode enabled [ 490.548104][ T8718] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 490.559739][ T8718] System zones: 0-5 [ 490.637998][ T8718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.569991][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.218439][ T8763] Invalid ELF section header size [ 496.109009][ T8769] tmpfs: Bad value for 'nr_blocks' [ 496.335080][ T5878] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 496.641044][ T5878] usb 3-1: device descriptor read/64, error -71 [ 496.885205][ T8770] binder: 8768:8770 ioctl 40189206 200000000340 returned -22 [ 496.924933][ T5878] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 497.184869][ T5878] usb 3-1: device descriptor read/64, error -71 [ 497.304875][ T5878] usb usb3-port1: attempt power cycle [ 498.555455][ T5878] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 499.543255][ T5878] usb 3-1: device descriptor read/8, error -71 [ 499.652849][ T8793] tmpfs: Bad value for 'nr_blocks' [ 500.741553][ T8793] binder: 8792:8793 ioctl 40189206 200000000340 returned -22 [ 501.146149][ T8808] Invalid ELF section header size [ 501.789742][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.800518][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.991953][ T8836] tmpfs: Bad value for 'nr_blocks' [ 505.542681][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 506.134609][ T5878] usb 3-1: device descriptor read/64, error -71 [ 506.418374][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 506.702915][ T5878] usb 3-1: device descriptor read/64, error -71 [ 506.861555][ T5878] usb usb3-port1: attempt power cycle [ 507.344618][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 507.375363][ T5878] usb 3-1: device descriptor read/8, error -71 [ 507.548681][ T8849] loop3: detected capacity change from 0 to 512 [ 507.605814][ T8849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.629855][ T8853] Invalid ELF section header size [ 507.658044][ T5878] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 508.004150][ T5878] usb 3-1: device descriptor read/8, error -71 [ 508.663295][ T5878] usb usb3-port1: unable to enumerate USB device [ 509.044668][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.922357][ T6060] hid-generic 0101:0002:0002.0006: item fetching failed at offset 3/10 [ 509.945252][ T6060] hid-generic: probe of 0101:0002:0002.0006 failed with error -22 [ 510.171344][ T8866] tmpfs: Bad value for 'nr_blocks' [ 513.108486][ T8890] loop1: detected capacity change from 0 to 512 [ 513.196615][ T8890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.205082][ T5847] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 514.381213][ T5847] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.391241][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.399536][ T5847] usb 3-1: Product: syz [ 514.404996][ T28] audit: type=1800 audit(1760476523.392:2): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.734" name="bus" dev="overlay" ino=1026 res=0 errno=0 [ 514.433112][ T5847] usb 3-1: Manufacturer: syz [ 514.495729][ T5847] usb 3-1: SerialNumber: syz [ 514.509439][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.619592][ T5847] usb 3-1: config 0 descriptor?? [ 515.322555][ T5847] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 517.362653][ T5847] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 517.577626][ T5847] usb 3-1: USB disconnect, device number 14 [ 518.662104][ T8908] Invalid ELF section header size [ 518.845362][ T8909] program syz.3.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.383448][ T8912] tmpfs: Bad value for 'nr_blocks' [ 519.724577][ T8913] binder: 8911:8913 ioctl 40189206 200000000340 returned -22 [ 522.240477][ T8933] Invalid ELF section header size [ 523.571045][ T8941] tmpfs: Bad value for 'nr_blocks' [ 524.402110][ T8949] Invalid ELF section header size [ 525.207688][ T8949] program syz.2.749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.168687][ T8968] Invalid ELF section header size [ 531.419894][ T9004] Invalid ELF section header size [ 534.287245][ T9022] loop2: detected capacity change from 0 to 512 [ 534.356916][ T9022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.214297][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.019664][ T9049] Invalid ELF section header size [ 539.574759][ T9056] Can't find ip_set type hash [ 539.755958][ T9059] syz.0.775: attempt to access beyond end of device [ 539.755958][ T9059] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 539.800807][ T9059] gfs2: error 10 reading superblock [ 540.284175][ T9064] loop1: detected capacity change from 0 to 512 [ 540.351135][ T9064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.641989][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.453866][ T9088] Invalid ELF section header size [ 545.494544][ T6060] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 546.264819][ T6060] usb 3-1: Using ep0 maxpacket: 32 [ 546.417335][ T6060] usb 3-1: no configurations [ 546.445473][ T6060] usb 3-1: can't read configurations, error -22 [ 547.466109][ T6060] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 547.684655][ T6060] usb 3-1: Using ep0 maxpacket: 32 [ 547.693034][ T6060] usb 3-1: no configurations [ 547.718942][ T6060] usb 3-1: can't read configurations, error -22 [ 548.521724][ T6060] usb usb3-port1: attempt power cycle [ 548.726780][ T9126] Invalid ELF section header size [ 550.334720][ T5793] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 550.560416][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.577569][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.614499][ T5793] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 550.623990][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.661065][ T5793] usb 2-1: config 0 descriptor?? [ 551.105000][ T6441] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 551.340645][ T5793] usbhid 2-1:0.0: can't add hid device: -32 [ 551.349400][ T5793] usbhid: probe of 2-1:0.0 failed with error -32 [ 551.404664][ T6441] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 551.435758][ T5793] usb 2-1: USB disconnect, device number 7 [ 551.451606][ T6441] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.477176][ T6441] usb 1-1: Product: syz [ 551.500743][ T6441] usb 1-1: Manufacturer: syz [ 551.507946][ T6441] usb 1-1: SerialNumber: syz [ 551.537824][ T6441] usb 1-1: config 0 descriptor?? [ 551.815368][ T6441] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.728506][ T5847] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 553.934981][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 554.017130][ T6441] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 554.076015][ T6441] usb 1-1: USB disconnect, device number 9 [ 554.153625][ T5847] usb 4-1: no configurations [ 554.224291][ T5847] usb 4-1: can't read configurations, error -22 [ 554.415684][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 554.560130][ T9160] tipc: Enabled bearer , priority 0 [ 554.568974][ T9160] syzkaller0: entered promiscuous mode [ 554.575560][ T9160] syzkaller0: entered allmulticast mode [ 554.591671][ T9160] tipc: Resetting bearer [ 554.604129][ T9159] tipc: Resetting bearer [ 554.663254][ T9159] tipc: Disabling bearer [ 554.685025][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 554.691131][ T5847] usb 4-1: no configurations [ 554.711968][ T5847] usb 4-1: can't read configurations, error -22 [ 554.726145][ T5847] usb usb4-port1: attempt power cycle [ 555.134703][ T5847] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 555.238627][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 555.280109][ T5847] usb 4-1: no configurations [ 555.311349][ T5847] usb 4-1: can't read configurations, error -22 [ 555.589593][ T9167] Can't find ip_set type hash:net, [ 555.604594][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 555.665340][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 555.686493][ T5847] usb 4-1: no configurations [ 555.701898][ T5847] usb 4-1: can't read configurations, error -22 [ 555.719259][ T5847] usb usb4-port1: unable to enumerate USB device [ 559.104622][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 561.244697][ T5847] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 562.144543][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 562.150496][ T5847] usb 2-1: no configurations [ 562.161493][ T5847] usb 2-1: can't read configurations, error -22 [ 562.357868][ T5847] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 562.544493][ T6060] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 562.569897][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 562.592449][ T5847] usb 2-1: no configurations [ 562.597512][ T5847] usb 2-1: can't read configurations, error -22 [ 562.609699][ T5847] usb usb2-port1: attempt power cycle [ 562.724481][ T6060] usb 4-1: Using ep0 maxpacket: 16 [ 562.736330][ T6060] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.765841][ T6060] usb 4-1: config 0 has no interfaces? [ 562.787255][ T6060] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 562.800017][ T6060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.819931][ T6060] usb 4-1: Product: syz [ 562.827860][ T6060] usb 4-1: Manufacturer: syz [ 562.844684][ T6060] usb 4-1: SerialNumber: syz [ 562.868158][ T6060] usb 4-1: config 0 descriptor?? [ 563.054758][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 563.086774][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 563.093975][ T5847] usb 2-1: no configurations [ 563.104423][ T5847] usb 2-1: can't read configurations, error -22 [ 563.129544][ T6060] usb 4-1: USB disconnect, device number 11 [ 563.228449][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.245558][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.264561][ T6441] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 563.275955][ T5847] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 563.329411][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 563.387366][ T5847] usb 2-1: no configurations [ 563.392014][ T5847] usb 2-1: can't read configurations, error -22 [ 563.458607][ T6441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.459098][ T5847] usb usb2-port1: unable to enumerate USB device [ 563.499240][ T6441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.510692][ T6441] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 563.519996][ T6441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.535323][ T6441] usb 3-1: config 0 descriptor?? [ 563.625679][ T9228] tmpfs: Bad value for 'nr_blocks' [ 564.474016][ T6441] usbhid 3-1:0.0: can't add hid device: -32 [ 564.480600][ T6441] usbhid: probe of 3-1:0.0 failed with error -32 [ 564.525343][ T6441] usb 3-1: USB disconnect, device number 18 [ 567.947235][ T6441] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 568.134452][ T6441] usb 3-1: Using ep0 maxpacket: 8 [ 568.142223][ T6441] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 568.155815][ T6441] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 568.165776][ T6441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.173935][ T6441] usb 3-1: Product: syz [ 568.179741][ T6441] usb 3-1: Manufacturer: syz [ 568.184693][ T6441] usb 3-1: SerialNumber: syz [ 568.536581][ T9272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.829'. [ 568.561058][ T6441] usb 3-1: USB disconnect, device number 19 [ 569.301595][ T6441] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 570.222046][ T6441] usb 4-1: Using ep0 maxpacket: 16 [ 570.230620][ T6441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.244605][ T6441] usb 4-1: config 0 has no interfaces? [ 570.254988][ T6441] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 570.274481][ T6441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.294952][ T6441] usb 4-1: Product: syz [ 570.299262][ T6441] usb 4-1: Manufacturer: syz [ 570.303863][ T6441] usb 4-1: SerialNumber: syz [ 570.375581][ T6441] usb 4-1: config 0 descriptor?? [ 570.955858][ T9287] usb 4-1: USB disconnect, device number 12 [ 571.425381][ T9298] Invalid ELF section header size [ 572.645579][ T9298] program syz.1.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.210743][ T9309] Cannot find add_set index 0 as target [ 574.781050][ T9322] tmpfs: Bad value for 'nr_blocks' [ 575.925867][ T9330] kvm: pic: non byte write [ 580.396660][ T9358] tmpfs: Bad value for 'nr_blocks' [ 581.155157][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 583.964739][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 587.145335][ T8017] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 587.319479][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 587.354616][ T8017] usb 1-1: Using ep0 maxpacket: 32 [ 587.410718][ T8017] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.657521][ T8017] usb 1-1: config 0 has no interfaces? [ 587.780290][ T8017] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 588.104742][ T8017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.259898][ T8017] usb 1-1: Product: syz [ 588.264146][ T8017] usb 1-1: Manufacturer: syz [ 588.284510][ T8017] usb 1-1: SerialNumber: syz [ 588.306545][ T8017] usb 1-1: config 0 descriptor?? [ 588.444028][ T9408] program syz.3.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.338170][ T966] usb 1-1: USB disconnect, device number 10 [ 593.305064][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 596.186284][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 597.999309][ T9476] program syz.0.879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 600.044888][ T9500] tmpfs: Bad value for 'nr_blocks' [ 602.661165][ T28] audit: type=1800 audit(1760476611.712:3): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.889" name="bus" dev="overlay" ino=1109 res=0 errno=0 [ 605.342902][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 606.134216][ T9529] Invalid ELF header magic: != ELF [ 606.945862][ T9537] tmpfs: Bad value for 'nr_blocks' [ 607.692171][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 607.907277][ T9529] program syz.2.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.247084][ T9549] loop2: detected capacity change from 0 to 4096 [ 609.274022][ T9549] EXT4-fs (loop2): Test dummy encryption mode enabled [ 609.556656][ T28] audit: type=1800 audit(1760476618.442:4): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.898" name="bus" dev="overlay" ino=1090 res=0 errno=0 [ 609.580574][ T9549] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 609.590297][ T9549] System zones: 0-5 [ 609.599049][ T9549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.611812][ T966] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 612.084124][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.104315][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.114742][ T966] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 612.123829][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.224120][ T966] usb 2-1: config 0 descriptor?? [ 612.801356][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.001837][ T966] usbhid 2-1:0.0: can't add hid device: -71 [ 613.037400][ T966] usbhid: probe of 2-1:0.0 failed with error -71 [ 613.062472][ T966] usb 2-1: USB disconnect, device number 12 [ 615.673898][ T9576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.902'. [ 615.683314][ T9576] netlink: set zone limit has 8 unknown bytes [ 616.263765][ T9576] syz.3.902 (9576): drop_caches: 2 [ 621.578859][ T9632] Invalid ELF header magic: != ELF [ 622.364727][ T9632] program syz.1.917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.425456][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 624.670328][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.679976][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.418558][ T9683] loop3: detected capacity change from 0 to 4096 [ 627.459740][ T9683] EXT4-fs (loop3): Test dummy encryption mode enabled [ 627.549919][ T9683] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 627.596577][ T9683] System zones: 0-5 [ 627.626914][ T9683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.861625][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.074287][ T50] Bluetooth: hci0: unexpected event for opcode 0x202d [ 633.324268][ T9731] loop1: detected capacity change from 0 to 4096 [ 633.362786][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 634.177528][ T9731] EXT4-fs (loop1): Test dummy encryption mode enabled [ 634.219700][ T9731] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 634.232831][ T9731] System zones: 0-5 [ 634.503512][ T9731] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.060481][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.316387][ T28] audit: type=1800 audit(1760476647.372:5): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.948" name="bus" dev="overlay" ino=1420 res=0 errno=0 [ 638.457341][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 644.746322][ T9788] loop0: detected capacity change from 0 to 4096 [ 644.766460][ T9788] EXT4-fs (loop0): Test dummy encryption mode enabled [ 644.866461][ T9788] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 644.900723][ T9788] System zones: 0-5 [ 644.947493][ T9788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.296171][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.830778][ T9805] Invalid ELF section header size [ 647.913561][ T9806] program syz.0.956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 648.792765][ T9809] Invalid ELF section header size [ 648.923621][ T9811] program syz.0.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.427030][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 649.755708][ T9814] tmpfs: Bad value for 'nr_blocks' [ 650.671610][ T9824] Invalid ELF section header size [ 651.401668][ T50] Bluetooth: hci3: unexpected event for opcode 0x202d [ 652.276687][ T9824] program syz.1.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.534676][ T9287] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 652.795823][ T9287] usb 1-1: Using ep0 maxpacket: 8 [ 652.852920][ T9287] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 652.888840][ T9287] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 652.910240][ T9287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.964570][ T9287] usb 1-1: Product: syz [ 652.968910][ T9287] usb 1-1: Manufacturer: syz [ 652.973629][ T9287] usb 1-1: SerialNumber: syz [ 654.875225][ T9287] usb 1-1: USB disconnect, device number 11 [ 655.341685][ T9842] loop2: detected capacity change from 0 to 40427 [ 655.368546][ T9842] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 655.417480][ T9842] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 655.478286][ T9842] F2FS-fs (loop2): Found nat_bits in checkpoint [ 656.035999][ T9842] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 656.129616][ T9842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 656.235383][ T9856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 659.037516][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 659.091747][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 659.109072][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 659.154668][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 659.162473][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 659.213103][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 659.254455][ T5789] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 660.871610][ T9883] tmpfs: Bad value for 'nr_blocks' [ 662.137557][ T9883] binder: 9882:9883 ioctl 40189206 200000000340 returned -22 [ 662.534070][ T28] audit: type=1800 audit(1760476671.582:6): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.978" name="bus" dev="overlay" ino=1482 res=0 errno=0 [ 666.081648][ T28] audit: type=1800 audit(1760476675.132:7): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="bus" dev="overlay" ino=1201 res=0 errno=0 [ 675.038549][ T50] Bluetooth: hci2: unexpected event for opcode 0x202d [ 677.014970][ T9951] Invalid ELF section header size [ 679.304748][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 679.885945][ T9951] program syz.1.994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.344457][ T6441] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 682.394473][ T966] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 682.410994][ T9990] loop2: detected capacity change from 0 to 40427 [ 682.424854][ T9990] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 682.452053][ T9990] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 682.478307][ T9990] F2FS-fs (loop2): Found nat_bits in checkpoint [ 682.544730][ T6441] usb 4-1: Using ep0 maxpacket: 32 [ 682.573376][ T6441] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 682.587374][ T966] usb 2-1: Using ep0 maxpacket: 8 [ 682.600069][ T6441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.610850][ T6441] usb 4-1: Product: syz [ 682.615310][ T9990] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 682.615538][ T9990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 682.625687][ T966] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 682.642638][ T6441] usb 4-1: Manufacturer: syz [ 682.650638][ T6441] usb 4-1: SerialNumber: syz [ 682.673199][ T966] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 682.686810][ T6441] usb 4-1: config 0 descriptor?? [ 682.706725][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.723510][ T6441] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 682.730949][ T966] usb 2-1: Product: syz [ 682.738133][ T966] usb 2-1: Manufacturer: syz [ 682.743064][ T966] usb 2-1: SerialNumber: syz [ 686.934096][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.942203][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.242303][ T966] usb 2-1: USB disconnect, device number 13 [ 687.248663][ T6441] gspca_topro: reg_w err -71 [ 687.289285][ T6441] gspca_topro: Sensor soi763a [ 687.325033][ T6441] usb 4-1: USB disconnect, device number 13 [ 689.626212][T10031] tmpfs: Bad value for 'nr_blocks' [ 690.518164][ T28] audit: type=1800 audit(1760476699.522:8): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1015" name="bus" dev="overlay" ino=1392 res=0 errno=0 [ 692.137465][ T6441] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 692.527020][ T6441] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 692.557963][ T6441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.679396][ T6441] usb 3-1: Product: syz [ 692.717728][ T6441] usb 3-1: Manufacturer: syz [ 692.774652][ T6060] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 692.787169][ T6441] usb 3-1: SerialNumber: syz [ 692.919547][ T6441] usb 3-1: config 0 descriptor?? [ 693.027682][ T6060] usb 1-1: Using ep0 maxpacket: 32 [ 693.181151][ T6060] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 693.340754][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.366471][ T6441] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 693.398259][ T6060] usb 1-1: Product: syz [ 693.564092][ T6060] usb 1-1: Manufacturer: syz [ 693.574702][ T6060] usb 1-1: SerialNumber: syz [ 693.808440][ T6060] usb 1-1: config 0 descriptor?? [ 693.995446][ T6060] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 695.482865][ T6060] gspca_topro: reg_r err -71 [ 695.520412][ T6060] gspca_topro: Sensor soi763a [ 695.544823][ T6441] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 695.562441][ T6060] usb 1-1: USB disconnect, device number 12 [ 696.298250][ T6441] usb 3-1: USB disconnect, device number 20 [ 696.481214][T10077] tmpfs: Bad value for 'nr_blocks' [ 696.576932][T10080] Invalid ELF section header size [ 697.180148][T10083] program syz.3.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.572584][ T50] Bluetooth: hci0: unexpected event for opcode 0x202d [ 701.959842][ T28] audit: type=1800 audit(1760476711.012:9): pid=10121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1035" name="bus" dev="overlay" ino=1272 res=0 errno=0 [ 705.468216][T10128] tmpfs: Bad value for 'nr_blocks' [ 707.647685][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 709.514690][ T6441] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 709.796435][ T6441] usb 4-1: Using ep0 maxpacket: 16 [ 709.822907][ T6441] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.836268][ T6441] usb 4-1: config 0 has no interfaces? [ 709.860172][ T6441] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 709.869770][ T6441] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.882672][ T6441] usb 4-1: Product: syz [ 709.892777][ T6441] usb 4-1: Manufacturer: syz [ 709.900281][ T6441] usb 4-1: SerialNumber: syz [ 709.938339][ T6441] usb 4-1: config 0 descriptor?? [ 710.813099][T10164] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1046'. [ 711.248377][ T786] usb 4-1: USB disconnect, device number 14 [ 711.387493][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 711.569582][T10167] tmpfs: Bad value for 'nr_blocks' [ 712.259901][ T50] Bluetooth: hci1: unexpected event for opcode 0x202d [ 713.339120][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1051'. [ 714.520051][ T28] audit: type=1800 audit(1760476723.572:10): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1055" name="bus" dev="overlay" ino=1457 res=0 errno=0 [ 716.104500][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 718.770569][T10212] tmpfs: Bad value for 'nr_blocks' [ 720.875229][T10218] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1060'. [ 721.011940][T10227] loop1: detected capacity change from 0 to 4096 [ 721.040734][T10227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 721.105356][T10227] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 721.159573][T10227] System zones: 0-5 [ 721.188594][T10233] tmpfs: Bad value for 'nr_blocks' [ 721.206538][T10227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.930406][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.064034][T10249] tmpfs: Bad value for 'nr_blocks' [ 725.154526][ T6441] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 725.281567][ T50] Bluetooth: hci0: unexpected event for opcode 0x202d [ 725.384783][ T6441] usb 3-1: Using ep0 maxpacket: 16 [ 725.410595][ T6441] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.422037][ T6441] usb 3-1: config 0 has no interfaces? [ 725.464532][ T6441] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 725.499751][ T6441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.514606][ T6441] usb 3-1: Product: syz [ 725.519572][ T6441] usb 3-1: Manufacturer: syz [ 725.524917][ T6441] usb 3-1: SerialNumber: syz [ 725.550727][ T6441] usb 3-1: config 0 descriptor?? [ 726.059246][ T27] usb 3-1: USB disconnect, device number 21 [ 728.781231][T10289] tmpfs: Bad value for 'nr_blocks' [ 729.476629][T10292] Invalid ELF section header size [ 729.925475][T10294] program syz.0.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 731.465897][T10307] Invalid ELF section header size [ 732.984861][ T28] audit: type=1800 audit(1760476742.042:11): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1085" name="bus" dev="overlay" ino=1666 res=0 errno=0 [ 738.733206][T10338] Invalid ELF section header size [ 740.125330][T10343] program syz.2.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 740.205341][ T28] audit: type=1800 audit(1760476749.262:12): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1092" name="bus" dev="overlay" ino=1507 res=0 errno=0 [ 743.424455][ T966] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 743.640591][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 743.764610][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 743.792724][ T966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.344476][ T966] usb 1-1: config 0 has no interfaces? [ 744.393685][ T966] usb 1-1: string descriptor 0 read error: -71 [ 744.406784][ T966] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 744.448959][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.635268][ T966] usb 1-1: config 0 descriptor?? [ 744.656563][ T966] usb 1-1: can't set config #0, error -71 [ 744.680377][ T966] usb 1-1: USB disconnect, device number 13 [ 745.104732][T10367] Invalid ELF section header size [ 747.594448][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.022400][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.047156][T10384] loop3: detected capacity change from 0 to 4096 [ 748.073975][T10384] EXT4-fs (loop3): Test dummy encryption mode enabled [ 748.120257][T10384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 748.213466][T10384] System zones: 0-5 [ 748.245579][T10384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.276440][T10390] fuse: Unknown parameter 'grou00000000000000000000' [ 748.285605][ T5830] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 748.484443][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 748.500387][ T5830] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 748.608073][ T5830] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 749.111174][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.119894][ T5830] usb 2-1: Product: syz [ 749.124117][ T5830] usb 2-1: Manufacturer: syz [ 749.129262][ T5830] usb 2-1: SerialNumber: syz [ 749.143373][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.174494][ T786] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 749.524682][ T786] usb 1-1: Using ep0 maxpacket: 32 [ 749.538413][ T786] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 749.554441][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.565227][ T786] usb 1-1: Product: syz [ 749.775601][ T786] usb 1-1: Manufacturer: syz [ 752.156593][ T786] usb 1-1: SerialNumber: syz [ 752.169432][ T786] usb 1-1: config 0 descriptor?? [ 752.186541][ T786] usb 1-1: can't set config #0, error -71 [ 752.217179][ T786] usb 1-1: USB disconnect, device number 14 [ 752.348079][ T5830] usb 2-1: USB disconnect, device number 14 [ 752.517689][ T28] audit: type=1800 audit(1760476761.512:13): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1114" name="bus" dev="overlay" ino=1371 res=0 errno=0 [ 755.006317][T10423] Invalid ELF section header size [ 755.436687][ T28] audit: type=1800 audit(1760476764.492:14): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1116" name="bus" dev="overlay" ino=1706 res=0 errno=0 [ 758.200507][ T28] audit: type=1800 audit(1760476767.252:15): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1117" name="bus" dev="overlay" ino=1560 res=0 errno=0 [ 759.437651][T10450] fuse: Bad value for 'fd' [ 761.747821][ T786] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 762.155628][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 762.244089][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.365602][ T786] usb 2-1: config 0 has no interfaces? [ 762.416872][ T786] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 762.476093][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.484169][ T786] usb 2-1: Product: syz [ 762.514511][ T5878] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 762.522579][ T786] usb 2-1: Manufacturer: syz [ 762.532729][ T786] usb 2-1: SerialNumber: syz [ 762.549680][ T786] usb 2-1: config 0 descriptor?? [ 762.668384][ T50] Bluetooth: hci0: unexpected event for opcode 0x202d [ 762.714605][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 762.750934][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.826975][ T5878] usb 3-1: config 0 has no interfaces? [ 763.018724][ T5878] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 763.300985][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.325196][ T6441] usb 2-1: USB disconnect, device number 15 [ 763.333083][ T5878] usb 3-1: Product: syz [ 763.349749][ T5878] usb 3-1: Manufacturer: syz [ 763.369125][ T5878] usb 3-1: SerialNumber: syz [ 763.416819][ T5878] usb 3-1: config 0 descriptor?? [ 763.892129][ T28] audit: type=1800 audit(1760476772.922:16): pid=10489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1130" name="bus" dev="overlay" ino=1418 res=0 errno=0 [ 763.971462][ T786] usb 3-1: USB disconnect, device number 22 [ 769.552450][T10507] Invalid ELF section header size [ 772.274640][ T966] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 772.554435][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 772.580145][ T966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.619672][ T966] usb 1-1: config 0 has no interfaces? [ 772.659637][ T966] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 772.722686][ T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.756688][ T966] usb 1-1: Product: syz [ 772.757198][T10523] loop2: detected capacity change from 0 to 40427 [ 772.760935][ T966] usb 1-1: Manufacturer: syz [ 772.786393][T10523] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 772.802462][T10523] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 772.804489][ T966] usb 1-1: SerialNumber: syz [ 772.837313][ T966] usb 1-1: config 0 descriptor?? [ 772.865529][T10523] F2FS-fs (loop2): Found nat_bits in checkpoint [ 772.877388][ T28] audit: type=1800 audit(1760476781.932:17): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1143" name="bus" dev="overlay" ino=1606 res=0 errno=0 [ 773.073808][T10523] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 773.096131][T10523] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 773.136728][ T5847] usb 1-1: USB disconnect, device number 15 [ 776.625173][ T786] hid-generic 0101:0002:0002.0007: item fetching failed at offset 3/8 [ 776.653042][ T786] hid-generic: probe of 0101:0002:0002.0007 failed with error -22 [ 778.240515][T10579] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1151'. [ 780.881565][T10579] netlink: set zone limit has 8 unknown bytes [ 781.244696][ T786] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 781.444493][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 781.463353][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.484371][ T786] usb 3-1: config 0 has no interfaces? [ 781.497610][ T786] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 781.514406][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.533047][ T786] usb 3-1: Product: syz [ 781.537366][ T786] usb 3-1: Manufacturer: syz [ 781.541998][ T786] usb 3-1: SerialNumber: syz [ 781.578400][ T786] usb 3-1: config 0 descriptor?? [ 782.492321][ T786] usb 3-1: USB disconnect, device number 23 [ 783.384454][ C1] ------------[ cut here ]------------ [ 783.390580][ C1] ODEBUG: free active (active state 0) object: ffff88805ffc8890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 783.404122][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 783.414149][ C1] Modules linked in: [ 783.418151][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 783.425389][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 783.435543][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 783.442032][ C1] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24 [ 783.461728][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 783.467973][ C1] RAX: c258e0fecc235f00 RBX: ffffffff970d7478 RCX: ffff88801b273c00 [ 783.476037][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 783.484068][ C1] RBP: ffffffff8aac9f00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 783.492163][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805ffc8a00 [ 783.500676][ C1] R13: ffffffff89673230 R14: ffff88805ffc8000 R15: ffff88805ffc8890 [ 783.508748][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 783.517772][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 783.524456][ C1] CR2: 00007f2cc91e7dac CR3: 000000002e19f000 CR4: 00000000003506e0 [ 783.532490][ C1] Call Trace: [ 783.535845][ C1] [ 783.538762][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 783.544232][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 783.549545][ C1] __kmem_cache_free+0xba/0x1f0 [ 783.554505][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 783.559505][ C1] ? call_timer_fn+0x15a/0x530 [ 783.564361][ C1] call_timer_fn+0x16e/0x530 [ 783.569012][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 783.574130][ C1] ? call_timer_fn+0xbf/0x530 [ 783.578984][ C1] ? __run_timers+0x7d0/0x7d0 [ 783.583730][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 783.589063][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 783.594359][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 783.599445][ C1] __run_timers+0x52d/0x7d0 [ 783.604013][ C1] ? detach_timer+0x2b0/0x2b0 [ 783.608818][ C1] ? lock_chain_count+0x20/0x20 [ 783.613740][ C1] run_timer_softirq+0x67/0xf0 [ 783.618625][ C1] handle_softirqs+0x280/0x820 [ 783.623445][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 783.628327][ C1] ? do_softirq+0x180/0x180 [ 783.632887][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 783.638236][ C1] __irq_exit_rcu+0xc7/0x190 [ 783.642932][ C1] ? irq_exit_rcu+0x20/0x20 [ 783.647544][ C1] irq_exit_rcu+0x9/0x20 [ 783.651841][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 783.657600][ C1] [ 783.660569][ C1] [ 783.663545][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 783.669651][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 783.675485][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 93 c8 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 783.695293][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 783.701426][ C1] RAX: c258e0fecc235f00 RBX: ffffffff8161858b RCX: c258e0fecc235f00 [ 783.709591][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400 [ 783.717649][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 783.725714][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a83a8 [ 783.733735][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 783.741795][ C1] ? do_idle+0x1eb/0x510 [ 783.746085][ C1] default_idle+0x13/0x20 [ 783.750462][ C1] default_idle_call+0x6c/0xa0 [ 783.755311][ C1] do_idle+0x1eb/0x510 [ 783.759408][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 783.764666][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 783.770353][ C1] cpu_startup_entry+0x43/0x60 [ 783.775161][ C1] start_secondary+0xee/0xf0 [ 783.779767][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 783.785889][ C1] [ 783.788919][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 783.796209][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 783.803412][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 783.813474][ C1] Call Trace: [ 783.816767][ C1] [ 783.819630][ C1] dump_stack_lvl+0x16c/0x230 [ 783.824334][ C1] ? show_regs_print_info+0x20/0x20 [ 783.829568][ C1] ? load_image+0x3b0/0x3b0 [ 783.834125][ C1] panic+0x2c0/0x710 [ 783.838044][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 783.842603][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 783.848868][ C1] __warn+0x2e0/0x470 [ 783.852871][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 783.858873][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 783.864635][ C1] report_bug+0x2be/0x4f0 [ 783.868985][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 783.874727][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 783.880655][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 783.886489][ C1] handle_bug+0xcf/0x120 [ 783.890785][ C1] exc_invalid_op+0x1a/0x50 [ 783.895320][ C1] asm_exc_invalid_op+0x1a/0x20 [ 783.900361][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 783.906734][ C1] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24 [ 783.926591][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 783.932690][ C1] RAX: c258e0fecc235f00 RBX: ffffffff970d7478 RCX: ffff88801b273c00 [ 783.940690][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 783.948673][ C1] RBP: ffffffff8aac9f00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 783.956668][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805ffc8a00 [ 783.964652][ C1] R13: ffffffff89673230 R14: ffff88805ffc8000 R15: ffff88805ffc8890 [ 783.972726][ C1] ? rose_transmit_link+0x740/0x740 [ 783.977962][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 783.983356][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 783.988571][ C1] __kmem_cache_free+0xba/0x1f0 [ 783.993438][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 783.998388][ C1] ? call_timer_fn+0x15a/0x530 [ 784.003247][ C1] call_timer_fn+0x16e/0x530 [ 784.007857][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 784.012909][ C1] ? call_timer_fn+0xbf/0x530 [ 784.017631][ C1] ? __run_timers+0x7d0/0x7d0 [ 784.022328][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 784.027541][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 784.032759][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 784.037799][ C1] __run_timers+0x52d/0x7d0 [ 784.042326][ C1] ? detach_timer+0x2b0/0x2b0 [ 784.047110][ C1] ? lock_chain_count+0x20/0x20 [ 784.051988][ C1] run_timer_softirq+0x67/0xf0 [ 784.056769][ C1] handle_softirqs+0x280/0x820 [ 784.061543][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 784.066379][ C1] ? do_softirq+0x180/0x180 [ 784.071102][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 784.076346][ C1] __irq_exit_rcu+0xc7/0x190 [ 784.080953][ C1] ? irq_exit_rcu+0x20/0x20 [ 784.085479][ C1] irq_exit_rcu+0x9/0x20 [ 784.089728][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 784.095394][ C1] [ 784.098327][ C1] [ 784.101262][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 784.107284][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 784.113027][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 93 c8 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 784.132831][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 784.139001][ C1] RAX: c258e0fecc235f00 RBX: ffffffff8161858b RCX: c258e0fecc235f00 [ 784.147019][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400 [ 784.155008][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 784.163051][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a83a8 [ 784.171059][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 784.179075][ C1] ? do_idle+0x1eb/0x510 [ 784.183369][ C1] default_idle+0x13/0x20 [ 784.187713][ C1] default_idle_call+0x6c/0xa0 [ 784.193009][ C1] do_idle+0x1eb/0x510 [ 784.197131][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 784.202411][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 784.208072][ C1] cpu_startup_entry+0x43/0x60 [ 784.212849][ C1] start_secondary+0xee/0xf0 [ 784.217449][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 784.223540][ C1] [ 784.226885][ C1] Kernel Offset: disabled [ 784.231409][ C1] Rebooting in 86400 seconds..