last executing test programs: 8m8.151622315s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) 8m8.025453033s ago: executing program 2 (id=8): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f0000000440)={[{@user_xattr}, {@block_validity}, {@noblock_validity}, {@bh}, {@mblk_io_submit}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noblock_validity}, {@test_dummy_encryption}, {@nouid32}]}, 0x1, 0x453, &(0x7f0000000c40)="$eJzs281vFOUfAPDvzLbw+/HWivgColbR2PjS0oLKwYtGEw+amOgBj7UtBFmooTUR0mg1Bo+GxLvxaOJf4EkvRj2ZeNW7ISHaC+hpzczOlO2yu7R06xb280kGnmfm2T7Pt888O8/MMw2gb41k/yQRuyLit4gYqmdXFxip/3dteXH67+XF6SRqtTf/TPJyV5cXp8ui5ed2FpnRNCL9NCkqWW3+/IXTU9Xq7LkiP75w5r3x+fMXnjl1Zurk7MnZs5PHjh09MvH8c5PPrj2YJGl7aHfW1gMfzh3c/+rbl16fPn7pnZ++yUrvKo43xrERaUN6JAv8r1quudzj3ahsC9ndkE4Gbl6GraESEVl3Debjfygqcb3zhuKVT3raOGBTZdem7e0PL9VaqbTcC9x2kuh1C4DeKC/02f1vuf1HU48t4cqL9Rugq8ni9LXl+lY/MrByLz+4ifeuIxFxfOmfL7MtuvgcAgCgne+y+c/TreZ/adzbUG5PsTY0HBF3RcTeiLg7IvZFxD0Redn7IuL+G2pIO9bfvDR04/wnvXzLwa1BNv97oVjbWj3/W2n3cKXI7c7jH0xOnKrOHi5+J6MxuD3LT3So4/uXf/283bHG+V+2ZfWXc8GiHZcHmh7QzUwtTOWT0i648nHEgYFW8ScrKwFJROyPiAPr+9F7ysSpJ78+2K7QzePvoM0603rUvop4Iuv/WrIUTfGXks7rk+P/i+rs4fHyrLjRz79cfKNd/RuKvwuy/t+x+vxvLjKcNK7Xzq+/jou/f9b2nuZWz/9tyVt5v2wr9n0wtbBwbiJiW/Janl+1f/L6Z8t8WT6Lf/RQ6/G/t/hMVs8DEZGdxA9GxEMR8XDR9kci4tGIONQh/h9feuzdW49/c2Xxz7T8/ls5/5v6f/2Jyukfvm1X/9r6/2ieGi325N9/N7HWBm7kdwcAAAC3izR/Bz5Jx1bSaTo2Vn+Hf1/sSKtz8wtPnZh7/+xM/V354RhMyyddQw3PQyeSpeIn1vOTxbPi8viR4rnxF5X/5/mx6bnqTI9jh363s834z/xR6XXrgE3XhXU04DbVPP47v7IB3Elc/6F/Gf/Qv4x/6F+txv9HTXlrAXBncv2H/mX8Q/8y/qF/Gf/Qlzbyd/0S/ZyIdEs0Y5MSQ1ujGT1M9PqbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//82merZ") sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16, @ANYBLOB="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"], 0x8c8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100f811a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0}) 8m5.046801806s ago: executing program 2 (id=18): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nobarrier}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) 8m2.450826894s ago: executing program 2 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000400000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000408500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8m1.956204155s ago: executing program 32 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000400000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000408500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.234108863s ago: executing program 4 (id=1232): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_msg}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, 0x0, 0x0, 0x8040000, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 6.356002059s ago: executing program 0 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x100, 0x3, 0x288}, &(0x7f0000000100), &(0x7f0000000140)) 6.211214499s ago: executing program 1 (id=1235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013"], 0x120}}, 0x0) 4.570435035s ago: executing program 1 (id=1236): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 4.388315777s ago: executing program 4 (id=1238): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4002, &(0x7f0000000380)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x4}}, {@inlinecrypt}, {@data_err_ignore}, {@max_batch_time}, {@noblock_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1c7980, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200400, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) unshare(0x600) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONE(r7, 0x40049409, r7) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r6, &(0x7f0000000440)="c0b83f4049e1689abf3e5fce8422eaedd53ff01114af477f96ba00d8bb88762beaf3f1d8bf6c62f5d7c9c9a01504cee76b5691a1deb859e721b0b0fe350a3189d2317dd0c733f4f466818dab59a7693d6bf1a63887df64879cfd60d6abc0cab9c393dc6cc5bfc056e180ac5a9fd6bb2d9beea6befa511d78e69e7017c57dc25ae886aa0f009cda0af438ec9e4ca74dcaaceffaa3ae5b86033fee6871ca612f29030bda520684564eb323b86b9d7617f7f6933d69f50c58e082b4fed1985a50e1b4b888f3866e7e1538e7392c60f3a0", &(0x7f0000000240)=""/28, 0x4}, 0x20) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SOUND_PCM_READ_BITS(r8, 0x80045005, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="3c0100001a2001002bbd7000fedbdf250000000000000000000001d64692af3c856014bb0000000000000000000000004e2400054e2000000a00800088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000034000004d63c000000ffffffff0000000000000000000000000900000000000000000100000000000001010000000000000700000000000000000000000000000057410000000000000300000000000000080400000000000001000000000000000200000000000000c9000000000000000900000000000000f5ffffff010100009806000028bd700002350000020004c0e4000000000000004c00120065636861696e69762872666337353339657370286563622874776f66697368292c636d61632d6165732d636529290000000000000000000000000000000000000000000000020000"], 0x13c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000000c0)={r2, 0x1, r3, 0x7fff, 0x80000}) 4.287461743s ago: executing program 0 (id=1239): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/51, 0x0, 0xda07ae6bc7164467}) socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 3.87816435s ago: executing program 1 (id=1240): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014) 3.792758975s ago: executing program 3 (id=1241): socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) close(0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004"], 0x50) 3.71016307s ago: executing program 1 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c5}, 0x20044050) 2.730378774s ago: executing program 1 (id=1243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e9ffffff0000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080080004608f0ff76000000bf9810000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.730014554s ago: executing program 3 (id=1244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80000000000d, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x9, 0x9, 0x3, 0x691d383d, [0x3c238710, 0x8], [0x40, 0x8001], 0x13a}}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmc(0x0, 0x1, 0x20000) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=r1], 0x3, 0x1510, &(0x7f0000003640)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045515, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) close(0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.64224415s ago: executing program 4 (id=1245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 2.440126103s ago: executing program 0 (id=1246): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_msg}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, 0x0, 0x0, 0x8040000, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 1.277958738s ago: executing program 4 (id=1247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013"], 0x120}}, 0x0) 1.098555049s ago: executing program 4 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x100, 0x3, 0x288}, &(0x7f0000000100), &(0x7f0000000140)) 990.224837ms ago: executing program 3 (id=1249): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x80, 0x22, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 697.254936ms ago: executing program 0 (id=1250): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014) 697.053785ms ago: executing program 4 (id=1251): setregid(0xee00, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) 510.133458ms ago: executing program 0 (id=1252): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000002fc0)) 314.43564ms ago: executing program 0 (id=1253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x10) syz_usb_connect$uac1(0x2, 0xc2, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003090000406b1d01014000010203010902b00003010e10040904000000010100000a24010100050201020c24070510b5c6a1cfd29608090401000001020000090401010101020000072401090600000c240201fe02090404d875b1082402011004060c0905010910005209060725010008ff01090402000001020000090402010101020000072401010801000d24020104020501ceb739b26b0724012b8a05000724010900071008240201000208a209058209fc"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 314.27825ms ago: executing program 3 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000002000010000000000000000000a01"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 157.8694ms ago: executing program 3 (id=1255): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x0) 25.243109ms ago: executing program 3 (id=1256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) 0s ago: executing program 1 (id=1257): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000100)={[{@acl}, {@nobarrier}, {@flushoncommit}, {@commit={'commit', 0x3d, 0x80000000}}, {@nodatasum}, {@autodefrag}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@usebackuproot}]}, 0x3, 0x510e, &(0x7f000000a240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 63.553077][ T5771] cgroup: Unknown subsys name 'net' [ 63.712041][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.072356][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.526122][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.534295][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.542292][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.550400][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.552064][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.558629][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.566230][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.572588][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.587740][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.595718][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.603512][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.612232][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.617820][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.620258][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.628005][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.634625][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.641530][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.654593][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.663736][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.674319][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.681794][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.685862][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.692447][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.703461][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.102061][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 67.164922][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 67.185034][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 67.336680][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.344533][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.352257][ T5781] bridge_slave_0: entered allmulticast mode [ 67.359100][ T5781] bridge_slave_0: entered promiscuous mode [ 67.395042][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.402322][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.409673][ T5781] bridge_slave_1: entered allmulticast mode [ 67.416928][ T5781] bridge_slave_1: entered promiscuous mode [ 67.431136][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.438562][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.446352][ T5784] bridge_slave_0: entered allmulticast mode [ 67.453104][ T5784] bridge_slave_0: entered promiscuous mode [ 67.464568][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.471801][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.479603][ T5784] bridge_slave_1: entered allmulticast mode [ 67.486368][ T5784] bridge_slave_1: entered promiscuous mode [ 67.502003][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.509169][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.516588][ T5783] bridge_slave_0: entered allmulticast mode [ 67.523237][ T5783] bridge_slave_0: entered promiscuous mode [ 67.530383][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 67.541223][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.548435][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.555648][ T5783] bridge_slave_1: entered allmulticast mode [ 67.562276][ T5783] bridge_slave_1: entered promiscuous mode [ 67.597521][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.631882][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.661131][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.682903][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.712303][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.748648][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.791664][ T5781] team0: Port device team_slave_0 added [ 67.801105][ T5781] team0: Port device team_slave_1 added [ 67.818414][ T5784] team0: Port device team_slave_0 added [ 67.856531][ T5783] team0: Port device team_slave_0 added [ 67.864198][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.871725][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.898568][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.912125][ T5784] team0: Port device team_slave_1 added [ 67.929090][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.936324][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.943443][ T5782] bridge_slave_0: entered allmulticast mode [ 67.950383][ T5782] bridge_slave_0: entered promiscuous mode [ 67.959096][ T5783] team0: Port device team_slave_1 added [ 67.965073][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.972286][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.979560][ T5782] bridge_slave_1: entered allmulticast mode [ 67.987425][ T5782] bridge_slave_1: entered promiscuous mode [ 67.994571][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.002070][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.028219][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.058603][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.065833][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.091961][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.140482][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.147920][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.174681][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.211470][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.223567][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.249739][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.256753][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.282878][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.313594][ T5781] hsr_slave_0: entered promiscuous mode [ 68.320539][ T5781] hsr_slave_1: entered promiscuous mode [ 68.340395][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.347739][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.373918][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.404314][ T5782] team0: Port device team_slave_0 added [ 68.446859][ T5782] team0: Port device team_slave_1 added [ 68.455696][ T5784] hsr_slave_0: entered promiscuous mode [ 68.461907][ T5784] hsr_slave_1: entered promiscuous mode [ 68.468355][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.476616][ T5784] Cannot create hsr debugfs directory [ 68.498536][ T5783] hsr_slave_0: entered promiscuous mode [ 68.504890][ T5783] hsr_slave_1: entered promiscuous mode [ 68.511114][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.519041][ T5783] Cannot create hsr debugfs directory [ 68.552187][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.559275][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.585229][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.633838][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.640990][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.667494][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.686501][ T5103] Bluetooth: hci2: command tx timeout [ 68.765598][ T5103] Bluetooth: hci3: command tx timeout [ 68.770260][ T51] Bluetooth: hci0: command tx timeout [ 68.771268][ T5103] Bluetooth: hci1: command tx timeout [ 68.811111][ T5782] hsr_slave_0: entered promiscuous mode [ 68.817550][ T5782] hsr_slave_1: entered promiscuous mode [ 68.823645][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.831790][ T5782] Cannot create hsr debugfs directory [ 69.059375][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.082184][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.093882][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.123988][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.162306][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.198035][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.209380][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.237694][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.289293][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.298632][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.311355][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.335047][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.423098][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.432886][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.448639][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.469230][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.530128][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.559553][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.601347][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.608874][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.641568][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.648797][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.704621][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.733578][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.757080][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.764216][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.782844][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.814804][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.821971][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.870559][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.929365][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.958605][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.984801][ T988] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.991982][ T988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.003083][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.010211][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.045407][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.052519][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.063709][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.070832][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.107764][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.271348][ T5781] veth0_vlan: entered promiscuous mode [ 70.317918][ T5781] veth1_vlan: entered promiscuous mode [ 70.413409][ T5781] veth0_macvtap: entered promiscuous mode [ 70.469114][ T5781] veth1_macvtap: entered promiscuous mode [ 70.489692][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.510430][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.539633][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.598515][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.611264][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.620808][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.629982][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.658701][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.717904][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.732405][ T5783] veth0_vlan: entered promiscuous mode [ 70.765523][ T5103] Bluetooth: hci2: command tx timeout [ 70.808661][ T5784] veth0_vlan: entered promiscuous mode [ 70.820321][ T5783] veth1_vlan: entered promiscuous mode [ 70.847086][ T5103] Bluetooth: hci0: command tx timeout [ 70.847104][ T51] Bluetooth: hci3: command tx timeout [ 70.852506][ T5103] Bluetooth: hci1: command tx timeout [ 70.868997][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.882791][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.904377][ T5784] veth1_vlan: entered promiscuous mode [ 70.939554][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.945858][ T5782] veth0_vlan: entered promiscuous mode [ 70.949737][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.995947][ T5782] veth1_vlan: entered promiscuous mode [ 71.012634][ T5783] veth0_macvtap: entered promiscuous mode [ 71.076728][ T5783] veth1_macvtap: entered promiscuous mode [ 71.108106][ T5784] veth0_macvtap: entered promiscuous mode [ 71.160689][ T5782] veth0_macvtap: entered promiscuous mode [ 71.178126][ T5784] veth1_macvtap: entered promiscuous mode [ 71.190129][ T5782] veth1_macvtap: entered promiscuous mode [ 71.208457][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.225210][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.238917][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.263849][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.279804][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.312312][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.441306][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.557160][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.583525][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.592747][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.599011][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.617132][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.621298][ T5872] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 71.628894][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.656738][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.671715][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.683222][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.859093][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.871247][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.881984][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.895471][ T5874] syz.1.2[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.919226][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.938356][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.957602][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.972524][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.982539][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.004251][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.014961][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.036118][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.065369][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.078921][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.113900][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.135036][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.151440][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.163133][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.177927][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.190787][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.212922][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.232623][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.243875][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.260595][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271965][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.301655][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.314346][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.325139][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.340376][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.380195][ T5878] loop1: detected capacity change from 0 to 32768 [ 72.393233][ T5878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.5 (5878) [ 72.417218][ T5878] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 72.427712][ T5878] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 72.436502][ T5878] BTRFS info (device loop1): using free space tree [ 72.544406][ T5878] BTRFS info (device loop1): enabling ssd optimizations [ 72.551610][ T5878] BTRFS info (device loop1): auto enabling async discard [ 72.615582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.624137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.632702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.688934][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.724703][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.765664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.775868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.828296][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.838045][ T5781] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 72.852038][ T5103] Bluetooth: hci2: command tx timeout [ 72.858274][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.900943][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.911714][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.927123][ T5103] Bluetooth: hci1: command tx timeout [ 72.927152][ T5797] Bluetooth: hci0: command tx timeout [ 72.938549][ T51] Bluetooth: hci3: command tx timeout [ 73.077555][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.088870][ T5796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (5796) [ 73.135313][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.168863][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.198023][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.350920][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.393082][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.827998][ T5900] loop3: detected capacity change from 0 to 4096 [ 73.852042][ T5900] ======================================================= [ 73.852042][ T5900] WARNING: The mand mount option has been deprecated and [ 73.852042][ T5900] and is ignored by this kernel. Remove the mand [ 73.852042][ T5900] option from the mount to silence this warning. [ 73.852042][ T5900] ======================================================= [ 74.140357][ T5908] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 74.152090][ T5907] IPVS: stopping master sync thread 5908 ... [ 74.444281][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.051272][ T51] Bluetooth: hci2: command tx timeout [ 75.057712][ T51] Bluetooth: hci3: command tx timeout [ 75.063216][ T51] Bluetooth: hci0: command tx timeout [ 75.069192][ T51] Bluetooth: hci1: command tx timeout [ 75.111144][ T5916] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 75.391411][ T5918] loop2: detected capacity change from 0 to 512 [ 75.453161][ T5918] EXT4-fs: Ignoring removed bh option [ 75.497487][ T5918] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.525608][ T5920] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9'. [ 75.606690][ T5924] loop0: detected capacity change from 0 to 512 [ 75.753307][ T5924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.785376][ T5918] EXT4-fs (loop2): Test dummy encryption mode enabled [ 75.883013][ T5924] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.901881][ T5918] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.8: inode #13: comm syz.2.8: iget: illegal inode # [ 75.939857][ T5918] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.8: couldn't read orphan inode 13 (err -117) [ 75.992710][ T5924] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #4: comm syz.0.10: corrupted inode contents [ 76.006477][ T5918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.085126][ T5924] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #4: comm syz.0.10: mark_inode_dirty error [ 76.110206][ T5924] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #4: comm syz.0.10: corrupted inode contents [ 76.605814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.872458][ T5924] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.10: mark_inode_dirty error [ 76.883703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 76.916357][ T5924] Quota error (device loop0): write_blk: dquota write failed [ 76.927461][ T5924] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 76.944376][ T5924] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10: Failed to acquire dquot type 1 [ 77.059339][ T5948] loop7: detected capacity change from 0 to 7 [ 77.079452][ T5948] Dev loop7: unable to read RDB block 7 [ 77.105274][ T5948] loop7: unable to read partition table [ 77.120770][ T5784] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 77.149152][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.166969][ T5948] loop7: partition table beyond EOD, truncated [ 77.202100][ T5948] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 77.234259][ T5784] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 426: padding at end of block bitmap is not set [ 77.285472][ T5784] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 77.315139][ T5784] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor: invalid indirect mapped block 131072 (level 2) [ 77.507824][ T5784] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 77.740871][ T5784] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 77.876986][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 78.275216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.285925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.008324][ T5958] loop1: detected capacity change from 0 to 512 [ 79.021897][ T5958] EXT4-fs: Ignoring removed nobh option [ 79.167440][ T5958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.197500][ T5958] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.309029][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.405539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 79.552304][ T5965] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.579537][ T5965] CIFS mount error: No usable UNC path provided in device string! [ 79.579537][ T5965] [ 79.589793][ T5965] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 79.605577][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.673189][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.049293][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.148857][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.264447][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.323908][ T27] audit: type=1326 audit(1761659767.076:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 80.422181][ T27] audit: type=1326 audit(1761659767.076:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 80.473073][ T27] audit: type=1326 audit(1761659767.106:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 80.711987][ T27] audit: type=1326 audit(1761659767.116:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 80.931446][ T27] audit: type=1326 audit(1761659767.116:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 81.035379][ T27] audit: type=1326 audit(1761659767.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 81.190594][ T27] audit: type=1326 audit(1761659767.166:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 81.301766][ T27] audit: type=1326 audit(1761659767.166:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 81.763337][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.775890][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.784480][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.853665][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.916714][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.925621][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.938038][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.430837][ T786] cfg80211: failed to load regulatory.db [ 83.206682][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.177162][ T5103] Bluetooth: hci3: command tx timeout [ 84.813881][ T6034] loop3: detected capacity change from 0 to 256 [ 84.815832][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 85.255591][ T6034] FAT-fs (loop3): Directory bread(block 64) failed [ 85.290122][ T6034] FAT-fs (loop3): Directory bread(block 65) failed [ 85.310756][ T6034] FAT-fs (loop3): Directory bread(block 66) failed [ 85.325461][ T6034] FAT-fs (loop3): Directory bread(block 67) failed [ 85.342391][ T6034] FAT-fs (loop3): Directory bread(block 68) failed [ 85.355684][ T6034] FAT-fs (loop3): Directory bread(block 69) failed [ 85.362394][ T6034] FAT-fs (loop3): Directory bread(block 70) failed [ 85.392922][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 85.430412][ T6034] FAT-fs (loop3): Directory bread(block 71) failed [ 85.441466][ T6029] loop0: detected capacity change from 0 to 8 [ 85.478853][ T6034] FAT-fs (loop3): Directory bread(block 72) failed [ 85.485834][ T6034] FAT-fs (loop3): Directory bread(block 73) failed [ 85.570306][ T6049] loop1: detected capacity change from 0 to 512 [ 85.638248][ T6049] EXT4-fs (loop1): 1 truncate cleaned up [ 85.672568][ T6049] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.738387][ T12] hsr_slave_0: left promiscuous mode [ 85.797848][ T12] hsr_slave_1: left promiscuous mode [ 85.818740][ T6049] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.41: invalid indirect mapped block 234881024 (level 0) [ 85.844029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.868389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.892994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.936709][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.957413][ T12] bridge_slave_1: left allmulticast mode [ 85.983485][ T12] bridge_slave_1: left promiscuous mode [ 85.995330][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.035841][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.054926][ T12] bridge_slave_0: left allmulticast mode [ 86.071343][ T12] bridge_slave_0: left promiscuous mode [ 86.082414][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.225330][ T5103] Bluetooth: hci3: command tx timeout [ 86.543222][ T12] veth1_macvtap: left promiscuous mode [ 86.552304][ T12] veth0_macvtap: left promiscuous mode [ 86.558501][ T12] veth1_vlan: left promiscuous mode [ 86.563963][ T12] veth0_vlan: left promiscuous mode [ 86.626581][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.822323][ T5786] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.840664][ T5786] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 86.863109][ T5786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.885799][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 86.907988][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 86.938234][ T5786] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 86.959025][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 86.967564][ T5786] usb 2-1: Product: syz [ 86.984853][ T5786] usb 2-1: Manufacturer: syz [ 87.024960][ T5786] cdc_wdm 2-1:1.0: skipping garbage [ 87.031027][ T5786] cdc_wdm 2-1:1.0: skipping garbage [ 87.060395][ T5786] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 87.077398][ T5786] cdc_wdm 2-1:1.0: Unknown control protocol [ 87.249771][ T5882] usb 2-1: USB disconnect, device number 2 [ 87.544879][ T12] team0 (unregistering): Port device team_slave_1 removed [ 87.621023][ T12] team0 (unregistering): Port device team_slave_0 removed [ 87.702257][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.742398][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.425368][ T5103] Bluetooth: hci3: command tx timeout [ 88.581857][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 89.261132][ T12] bond0 (unregistering): Released all slaves [ 89.453042][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.752932][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.761841][ T6097] loop0: detected capacity change from 0 to 64 [ 89.895257][ T5992] bridge_slave_0: entered allmulticast mode [ 89.936663][ T5992] bridge_slave_0: entered promiscuous mode [ 89.984851][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.017869][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 90.017887][ T27] audit: type=1800 audit(1761659776.776:15): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.53" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 90.055352][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.082844][ T5992] bridge_slave_1: entered allmulticast mode [ 90.096142][ T5992] bridge_slave_1: entered promiscuous mode [ 90.262889][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.324551][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.446460][ T5103] Bluetooth: hci3: command tx timeout [ 90.489736][ T6103] loop3: detected capacity change from 0 to 16 [ 90.500636][ T5992] team0: Port device team_slave_0 added [ 90.521425][ T5992] team0: Port device team_slave_1 added [ 90.611564][ T6103] erofs: (device loop3): mounted with root inode @ nid 36. [ 90.794825][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.825845][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.885573][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.909592][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.917404][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.956775][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.076927][ T5992] hsr_slave_0: entered promiscuous mode [ 91.089973][ T5992] hsr_slave_1: entered promiscuous mode [ 91.096545][ T5992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.104128][ T5992] Cannot create hsr debugfs directory [ 91.135232][ T5850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.354046][ T5850] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.372496][ T5850] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.384636][ T5850] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.394116][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 91.458975][ T5850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 91.477730][ T5992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.481680][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58'. [ 91.497494][ T5850] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.507007][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.515021][ T5850] usb 2-1: Product: syz [ 91.523021][ T5850] usb 2-1: Manufacturer: syz [ 91.536590][ T5992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.571051][ T5992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.586308][ T5850] cdc_wdm 2-1:1.0: skipping garbage [ 91.613863][ T5850] cdc_wdm 2-1:1.0: skipping garbage [ 91.643128][ T5992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.660605][ T5850] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 91.717434][ T5850] cdc_wdm 2-1:1.0: Unknown control protocol [ 92.554271][ T5850] usb 2-1: USB disconnect, device number 3 [ 92.692521][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.831320][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.850889][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.858805][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.097945][ T5992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.149426][ T5992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.338181][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.345410][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.663090][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 95.053070][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.579817][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 96.194222][ T6183] random: crng reseeded on system resumption [ 96.315334][ T5850] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.752141][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.882432][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.061316][ T5850] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 97.325870][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.342956][ T5850] usb 1-1: config 0 descriptor?? [ 97.442450][ T5992] veth0_vlan: entered promiscuous mode [ 97.495125][ T5992] veth1_vlan: entered promiscuous mode [ 97.580659][ T5992] veth0_macvtap: entered promiscuous mode [ 97.618496][ T5992] veth1_macvtap: entered promiscuous mode [ 97.686783][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.715358][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.753291][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.777050][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.779235][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.784261][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.824937][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.855216][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.855318][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.872401][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.889939][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.895258][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.904156][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.949787][ T5850] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.980823][ T5850] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 98.000281][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.074540][ T5850] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 98.083568][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.104819][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.121662][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.132101][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.152610][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.187846][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.247764][ T5992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.268753][ T5992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.283472][ T5992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.308809][ T5992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.495813][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.545349][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.624185][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.653289][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.673005][ T5850] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 98.723534][ T5850] usb 1-1: USB disconnect, device number 2 [ 99.491135][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.76'. [ 101.457997][ T6244] sched: RT throttling activated [ 101.477666][ T6249] delete_channel: no stack [ 101.498664][ T6251] random: crng reseeded on system resumption [ 102.896184][ T5791] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.085469][ T5791] usb 1-1: Using ep0 maxpacket: 8 [ 103.093699][ T5791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.116573][ T5791] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 103.135343][ T5791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 103.150030][ T5791] usb 1-1: SerialNumber: syz [ 103.178154][ T5791] usb 1-1: config 0 descriptor?? [ 103.192677][ T5791] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 103.210764][ T5791] usb 1-1: No valid video chain found. [ 103.530169][ T5791] usb 1-1: USB disconnect, device number 3 [ 105.537381][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 107.181507][ T6326] loop4: detected capacity change from 0 to 1024 [ 107.373207][ T27] audit: type=1800 audit(1761659794.126:16): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.95" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 109.272257][ T6351] sp0: Synchronizing with TNC [ 109.574122][ T6346] [U] è [ 111.651065][ T6366] loop0: detected capacity change from 0 to 512 [ 111.751057][ T6366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.878090][ T6366] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.106: iget: bad i_size value: 38620345925642 [ 111.935382][ T27] audit: type=1326 audit(1761659798.686:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbf8efc9 code=0x7ffc0000 [ 111.995722][ T6366] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.106: couldn't read orphan inode 15 (err -117) [ 112.033066][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.033989][ T27] audit: type=1326 audit(1761659798.686:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbf8efc9 code=0x7ffc0000 [ 112.691875][ T27] audit: type=1326 audit(1761659798.716:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f28dbf8efc9 code=0x7ffc0000 [ 112.901843][ T27] audit: type=1326 audit(1761659798.716:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6375 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28dbf8efc9 code=0x7ffc0000 [ 113.042058][ T6385] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.106: bg 0: block 5: invalid block bitmap [ 113.115383][ T6390] loop4: detected capacity change from 0 to 128 [ 113.310317][ T6385] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 6 with error 28 [ 113.323279][ T6385] EXT4-fs (loop0): This should not happen!! Data will be lost [ 113.323279][ T6385] [ 113.333237][ T6385] EXT4-fs (loop0): Total free blocks count 0 [ 113.339277][ T6385] EXT4-fs (loop0): Free/Dirty block details [ 113.345277][ T6385] EXT4-fs (loop0): free_blocks=0 [ 113.350290][ T6385] EXT4-fs (loop0): dirty_blocks=66 [ 113.355657][ T6385] EXT4-fs (loop0): Block reservation details [ 113.361657][ T6385] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 113.480392][ T6385] syz.0.106 (6385) used greatest stack depth: 20816 bytes left [ 113.543871][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 8 with max blocks 60 with error 28 [ 114.730987][ T6404] loop4: detected capacity change from 0 to 512 [ 114.770603][ T6404] EXT4-fs: Ignoring removed i_version option [ 114.830842][ T6404] EXT4-fs: Ignoring removed bh option [ 114.956008][ T6404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.022408][ T6404] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.283092][ T5992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.497742][ T6457] geneve2: entered promiscuous mode [ 118.593815][ T6457] geneve2: entered allmulticast mode [ 121.245072][ T6472] loop0: detected capacity change from 0 to 512 [ 121.316283][ T6472] EXT4-fs: Ignoring removed i_version option [ 121.347176][ T6472] EXT4-fs: Ignoring removed bh option [ 122.551334][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.639941][ T6472] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.179035][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.895085][ T6539] loop1: detected capacity change from 0 to 128 [ 129.091831][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 130.277538][ T6592] sp0: Synchronizing with TNC [ 131.520801][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 132.783225][ T6590] [U] è [ 133.036458][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042914][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.192006][ T6622] 9pnet_virtio: no channels available for device [ 133.769044][ T6625] loop4: detected capacity change from 0 to 64 [ 133.861628][ T6625] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 134.492941][ T6629] loop1: detected capacity change from 0 to 764 [ 135.983443][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 136.663305][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 136.883386][ T6657] bridge_slave_1: left allmulticast mode [ 137.171870][ T6657] bridge_slave_1: left promiscuous mode [ 137.196996][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.268741][ T6657] bridge_slave_0: left allmulticast mode [ 137.299404][ T6657] bridge_slave_0: left promiscuous mode [ 137.305732][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.560828][ T6661] loop1: detected capacity change from 0 to 32768 [ 137.604450][ T6661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.180 (6661) [ 137.635564][ T6661] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.646390][ T6661] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.655647][ T6661] BTRFS info (device loop1): turning on flush-on-commit [ 137.662675][ T6661] BTRFS info (device loop1): max_inline at 0 [ 137.669172][ T6661] BTRFS info (device loop1): enabling disk space caching [ 137.676347][ T6661] BTRFS info (device loop1): setting nodatasum [ 137.682936][ T6661] BTRFS info (device loop1): turning off barriers [ 137.689535][ T6661] BTRFS info (device loop1): disabling tree log [ 137.697497][ T6661] BTRFS info (device loop1): enabling ssd optimizations [ 137.704477][ T6661] BTRFS info (device loop1): force clearing of disk cache [ 137.711723][ T6661] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 137.721670][ T6661] BTRFS info (device loop1): use zstd compression, level 3 [ 137.729423][ T6661] BTRFS info (device loop1): max_inline at 4096 [ 137.735788][ T6661] BTRFS info (device loop1): disk space caching is enabled [ 137.967652][ T6661] BTRFS info (device loop1): rebuilding free space tree [ 138.029918][ T6661] BTRFS info (device loop1): disabling free space tree [ 138.037123][ T6661] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.047290][ T6661] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.110203][ T27] audit: type=1800 audit(1761659824.866:21): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.180" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 138.245808][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.333620][ T6702] veth0_vlan: left promiscuous mode [ 138.354459][ T6702] vlan0: entered promiscuous mode [ 138.365428][ T6702] veth0_vlan: entered promiscuous mode [ 139.930988][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 140.785391][ T6734] syz.0.191 uses obsolete (PF_INET,SOCK_PACKET) [ 141.162609][ T6746] netlink: 'syz.3.194': attribute type 29 has an invalid length. [ 141.335929][ T6755] netlink: 596 bytes leftover after parsing attributes in process `syz.3.194'. [ 143.579785][ T5946] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.935412][ T5946] usb 5-1: device descriptor read/64, error -71 [ 144.425469][ T5946] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.618261][ T5946] usb 5-1: device descriptor read/64, error -71 [ 144.748114][ T5946] usb usb5-port1: attempt power cycle [ 144.954230][ T6779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 145.159404][ T5946] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.204953][ T5946] usb 5-1: device descriptor read/8, error -71 [ 145.399237][ T6746] netlink: 'syz.3.194': attribute type 29 has an invalid length. [ 145.485531][ T5946] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 145.627589][ T5946] usb 5-1: device descriptor read/8, error -71 [ 145.905397][ T5946] usb usb5-port1: unable to enumerate USB device [ 146.449814][ T27] audit: type=1400 audit(1761659833.116:22): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=6790 comm="syz.1.204" [ 148.145972][ T6802] block nbd4: Unsupported socket: should be TCP or UNIX. [ 148.204292][ T6802] netlink: 'syz.4.206': attribute type 10 has an invalid length. [ 149.357974][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 150.250171][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.363104][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.452946][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.538311][ T6875] block nbd1: Unsupported socket: should be TCP or UNIX. [ 152.547357][ T6875] netlink: 'syz.1.220': attribute type 10 has an invalid length. [ 152.721080][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.859065][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.043913][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.169716][ T9] usb 1-1: string descriptor 0 read error: -71 [ 153.189437][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.199039][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.477684][ T9] usb 1-1: can't set config #1, error -71 [ 153.503861][ T9] usb 1-1: USB disconnect, device number 4 [ 155.629666][ T6916] netlink: 'syz.1.229': attribute type 64 has an invalid length. [ 156.295531][ T6910] loop0: detected capacity change from 0 to 131072 [ 156.387035][ T6910] F2FS-fs (loop0): invalid crc value [ 156.586035][ T6910] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.648447][ T6933] block nbd4: Unsupported socket: should be TCP or UNIX. [ 156.657304][ T6933] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 156.888153][ T6910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 159.702726][ T6951] block nbd1: Unsupported socket: should be TCP or UNIX. [ 159.711306][ T6951] netlink: 'syz.1.244': attribute type 10 has an invalid length. [ 163.045821][ T27] audit: type=1400 audit(1761659849.806:23): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=6973 comm="syz.0.235" [ 165.099589][ T6988] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 167.774027][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.250'. [ 168.052807][ T7019] netlink: 'syz.0.254': attribute type 64 has an invalid length. [ 168.055239][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.256807][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.275178][ T9] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 168.295313][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.315323][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 168.345197][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 168.367098][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.385197][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.393633][ T9] usb 2-1: Product: syz [ 168.397899][ T9] usb 2-1: Manufacturer: syz [ 168.410739][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 168.420022][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 168.425432][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 168.784531][ T9] usb 2-1: USB disconnect, device number 4 [ 169.666069][ T7034] block nbd0: Unsupported socket: should be TCP or UNIX. [ 169.674996][ T7034] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 175.154574][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 176.314682][ T7073] netlink: 'syz.4.266': attribute type 64 has an invalid length. [ 178.233493][ T7089] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 179.411978][ T7098] loop1: detected capacity change from 0 to 4096 [ 179.667982][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 180.552478][ T5103] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 180.893678][ T7112] loop0: detected capacity change from 0 to 32768 [ 180.988866][ T7112] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.092431][ T7112] XFS (loop0): Ending clean mount [ 181.108991][ T7112] XFS (loop0): Quotacheck needed: Please wait. [ 181.193543][ T7112] XFS (loop0): Quotacheck: Done. [ 181.972025][ T5782] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.081872][ T7139] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 182.626980][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.796922][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 182.895424][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 182.908361][ T5882] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.935209][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.958766][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.982598][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.001903][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.017277][ T5882] usb 1-1: Product: syz [ 183.021497][ T5882] usb 1-1: Manufacturer: syz [ 183.040241][ T5882] usb 1-1: SerialNumber: syz [ 183.891315][ T5882] usb 1-1: 0:2 : does not exist [ 184.317773][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.366655][ T5882] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 184.427143][ T5882] usb 1-1: USB disconnect, device number 5 [ 184.501016][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.979690][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.988633][ T9] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 185.002641][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.013376][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 185.029375][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 185.051635][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.064346][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.077497][ T9] usb 2-1: Product: syz [ 185.083532][ T9] usb 2-1: Manufacturer: syz [ 185.094475][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 185.101294][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 185.108057][ T9] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 185.502271][ T9] usb 2-1: USB disconnect, device number 5 [ 185.651924][ T7183] block nbd0: Unsupported socket: should be TCP or UNIX. [ 185.662828][ T7183] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 189.755230][ T5882] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 189.875342][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 190.158576][ T7234] loop1: detected capacity change from 0 to 32768 [ 190.241439][ T5882] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 190.370987][ T5882] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 190.476724][ T7234] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.554749][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 190.700900][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 190.718472][ T7234] XFS (loop1): Ending clean mount [ 190.726469][ T7234] XFS (loop1): Quotacheck needed: Please wait. [ 190.789310][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 190.824634][ T7234] XFS (loop1): Quotacheck: Done. [ 191.054470][ T5882] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.063827][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.077059][ T5882] usb 5-1: Product: syz [ 191.081839][ T5882] usb 5-1: Manufacturer: syz [ 191.105646][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 191.111500][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 191.123224][ T5882] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 191.690433][ T5882] usb 5-1: USB disconnect, device number 6 [ 191.737446][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 191.743510][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 191.751040][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.853002][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.087453][ T7264] loop1: detected capacity change from 0 to 1024 [ 193.986895][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 194.452192][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.458650][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.672796][ T7286] loop4: detected capacity change from 0 to 32768 [ 195.736767][ T7286] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 195.772447][ T7286] XFS (loop4): Ending clean mount [ 195.783341][ T7286] XFS (loop4): Quotacheck needed: Please wait. [ 196.593494][ T7286] XFS (loop4): Quotacheck: Done. [ 197.966353][ T5992] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.195000][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 199.355331][ T786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.115327][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 200.146058][ T786] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.154793][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.219730][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.254881][ T786] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.268611][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.285303][ T786] usb 2-1: Product: syz [ 200.299881][ T786] usb 2-1: Manufacturer: syz [ 200.304516][ T786] usb 2-1: SerialNumber: syz [ 200.369939][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 201.415425][ T786] usb 2-1: 0:2 : does not exist [ 201.700051][ T786] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 201.781076][ T786] usb 2-1: USB disconnect, device number 6 [ 202.015662][ T7337] loop0: detected capacity change from 0 to 32768 [ 202.043626][ T7337] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.111276][ T7337] XFS (loop0): Ending clean mount [ 202.212717][ T5782] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.406765][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 206.801405][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.352'. [ 207.246220][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 208.226505][ T5850] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.247210][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 208.376173][ T7399] loop0: detected capacity change from 0 to 1024 [ 208.535498][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 208.599697][ T5850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.760775][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.990252][ T5850] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.069033][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.114060][ T5850] usb 5-1: Product: syz [ 209.136819][ T5850] usb 5-1: Manufacturer: syz [ 209.153056][ T5850] usb 5-1: SerialNumber: syz [ 209.309114][ T7405] loop1: detected capacity change from 0 to 4096 [ 209.911451][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 209.950307][ T5850] usb 5-1: cannot find UAC_HEADER [ 210.113388][ T5850] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 210.203122][ T5850] usb 5-1: USB disconnect, device number 7 [ 210.329829][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.370992][ T7422] sg_write: process 334 (syz.1.366) changed security contexts after opening file descriptor, this is not allowed. [ 211.477921][ T7425] program syz.1.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.339867][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 213.082230][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 213.187299][ T7439] erspan0: entered promiscuous mode [ 213.219033][ T7439] macvtap1: entered promiscuous mode [ 213.239999][ T7439] macvtap1: entered allmulticast mode [ 213.275568][ T7439] erspan0: entered allmulticast mode [ 213.384869][ T7448] loop1: detected capacity change from 0 to 2048 [ 213.469627][ T7448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.624340][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.373'. [ 215.257192][ T1086] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 215.431770][ T1086] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 215.444593][ T7460] syz.4.372 (7460) used greatest stack depth: 20272 bytes left [ 215.474891][ T1086] EXT4-fs (loop1): This should not happen!! Data will be lost [ 215.474891][ T1086] [ 215.494839][ T1086] EXT4-fs (loop1): Total free blocks count 0 [ 215.530448][ T1086] EXT4-fs (loop1): Free/Dirty block details [ 216.205414][ T1086] EXT4-fs (loop1): free_blocks=4096 [ 216.221918][ T1086] EXT4-fs (loop1): dirty_blocks=512 [ 216.245323][ T1086] EXT4-fs (loop1): Block reservation details [ 216.345139][ T1086] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 216.358704][ T1086] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 218.510427][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 218.651901][ T7482] loop1: detected capacity change from 0 to 128 [ 218.813896][ T7482] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.863015][ T7482] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.014603][ T7488] netlink: set zone limit has 8 unknown bytes [ 219.056438][ T5781] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.811415][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 221.045642][ T27] audit: type=1326 audit(1761659907.796:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.134952][ T27] audit: type=1326 audit(1761659907.796:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.157176][ T27] audit: type=1326 audit(1761659907.796:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.179338][ T27] audit: type=1326 audit(1761659907.796:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.201591][ T27] audit: type=1326 audit(1761659907.796:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.223967][ T27] audit: type=1326 audit(1761659907.796:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.249814][ T27] audit: type=1326 audit(1761659907.796:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.274717][ T27] audit: type=1326 audit(1761659907.886:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.302269][ T27] audit: type=1326 audit(1761659907.886:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7491 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee098efc9 code=0x7ffc0000 [ 221.336934][ T27] audit: type=1326 audit(1761659907.886:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feee09c1885 code=0x7ffc0000 [ 222.557341][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 222.722280][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 222.783280][ T7519] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 222.783280][ T7519] The task syz.0.393 (7519) triggered the difference, watch for misbehavior. [ 224.648529][ T7534] loop1: detected capacity change from 0 to 1024 [ 224.671603][ T7534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.594498][ T7534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.211888][ T7546] program syz.0.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.263182][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.845370][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 228.086039][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 228.092292][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.409'. [ 228.126444][ T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.218942][ T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.314437][ T786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.549043][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.557958][ T786] usb 1-1: Product: syz [ 228.563410][ T786] usb 1-1: Manufacturer: syz [ 228.569372][ T786] usb 1-1: SerialNumber: syz [ 228.875212][ T42] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 229.194016][ T42] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.299439][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.384445][ T42] usb 5-1: Product: syz [ 229.435905][ T42] usb 5-1: Manufacturer: syz [ 229.468133][ T42] usb 5-1: SerialNumber: syz [ 229.486504][ T42] usb 5-1: config 0 descriptor?? [ 229.596287][ T786] usb 1-1: cannot find UAC_HEADER [ 229.640580][ T786] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 229.668796][ T786] usb 1-1: USB disconnect, device number 6 [ 229.723730][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.741027][ T42] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.891817][ T42] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 231.110674][ T786] usb 5-1: USB disconnect, device number 8 [ 231.539689][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 231.568903][ T7609] loop0: detected capacity change from 0 to 512 [ 231.580046][ T7609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 231.593152][ T7609] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.648267][ T7609] EXT4-fs (loop0): 1 truncate cleaned up [ 231.673319][ T7609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.632836][ T5782] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 232.678713][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.055184][ T5946] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 233.265171][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 233.272845][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.283697][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.300010][ T5946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.313808][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.324487][ T5946] usb 2-1: Product: syz [ 233.343036][ T5946] usb 2-1: Manufacturer: syz [ 233.361236][ T5946] usb 2-1: SerialNumber: syz [ 233.767942][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 234.047193][ T5946] usb 2-1: cannot find UAC_HEADER [ 234.326787][ T5946] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 234.438936][ T5946] usb 2-1: USB disconnect, device number 7 [ 235.177627][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.705216][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 237.245473][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 237.264747][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.284909][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.295004][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.314784][ T42] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.324113][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.580049][ T42] usb 1-1: config 0 descriptor?? [ 238.945716][ T42] usb 1-1: can't set config #0, error -71 [ 238.955546][ T42] usb 1-1: USB disconnect, device number 7 [ 239.564806][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 244.275302][ T5946] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.344325][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.449'. [ 245.107034][ T5946] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.125181][ T5946] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 245.145160][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.164408][ T5946] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.187418][ T5946] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.197092][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.205462][ T5946] usb 2-1: Product: syz [ 245.209750][ T5946] usb 2-1: Manufacturer: syz [ 245.219284][ T5946] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 245.476713][ T786] usb 2-1: USB disconnect, device number 8 [ 247.081256][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 247.275578][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 247.324646][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.424039][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.511742][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.593570][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.648543][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.910741][ T9] usb 5-1: config 0 descriptor?? [ 248.024978][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 250.039601][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.299987][ T9] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 250.323134][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.345209][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.355748][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.374525][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.385641][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.392945][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.413072][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.425417][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.432688][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.455176][ T9] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 250.479322][ T9] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 250.513694][ T9] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 250.545235][ T9] microsoft 0003:045E:07DA.0002: no inputs found [ 250.551648][ T9] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 250.626752][ T9] usb 5-1: USB disconnect, device number 9 [ 250.719382][ T7746] fido_id[7746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 251.162441][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 251.455386][ T5786] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.657459][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 251.685407][ T5786] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 251.699043][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.751774][ T5786] usb 5-1: Product: syz [ 251.781612][ T5786] usb 5-1: Manufacturer: syz [ 251.808965][ T5786] usb 5-1: SerialNumber: syz [ 252.399948][ T5786] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 252.433385][ T5786] snd-usb-audio: probe of 5-1:222.0 failed with error -71 [ 252.446494][ T5786] usb 5-1: USB disconnect, device number 10 [ 252.482535][ T7763] fuse: Bad value for 'fd' [ 252.494505][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.650540][ T7763] Zero length message leads to an empty skb [ 254.596525][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 254.695201][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 255.761268][ T42] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.770152][ T42] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 255.780935][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.795430][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.818165][ T42] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.827808][ T42] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.854865][ T42] usb 2-1: Product: syz [ 255.873630][ T42] usb 2-1: Manufacturer: syz [ 255.888462][ T42] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 255.897737][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.904090][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.418713][ T42] usb 2-1: USB disconnect, device number 9 [ 256.998161][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 258.214222][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 259.884795][ T5786] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.277729][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 260.358075][ T5786] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 260.374471][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.393156][ T5786] usb 2-1: Product: syz [ 260.397907][ T5786] usb 2-1: Manufacturer: syz [ 260.402948][ T5786] usb 2-1: SerialNumber: syz [ 261.390442][ T5786] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 261.467317][ T5786] snd-usb-audio: probe of 2-1:222.0 failed with error -71 [ 261.489048][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.506981][ T5786] usb 2-1: USB disconnect, device number 10 [ 262.941294][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 263.473009][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 265.708317][ T7856] loop0: detected capacity change from 0 to 512 [ 265.941090][ T7856] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 266.000725][ T7856] System zones: 0-2, 18-18, 34-35 [ 266.038918][ T7856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.051906][ T7856] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.121426][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'. [ 266.191336][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.306433][ T5882] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.517002][ T5882] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.535178][ T5882] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 266.552851][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.565139][ T5882] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.597089][ T5882] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.615280][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.645258][ T5882] usb 5-1: Product: syz [ 266.649464][ T5882] usb 5-1: Manufacturer: syz [ 266.680385][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 266.694369][ T5882] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 266.935277][ T5946] usb 5-1: USB disconnect, device number 11 [ 268.777022][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 271.285177][ T786] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 273.296545][ T786] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.317846][ T786] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 273.347521][ T786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.365672][ T786] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.420052][ T786] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.451283][ T786] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.492801][ T786] usb 5-1: Product: syz [ 273.504569][ T786] usb 5-1: Manufacturer: syz [ 273.533803][ T786] cdc_wdm 5-1:1.0: skipping garbage [ 273.545805][ T786] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 273.667714][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 275.073065][ T786] usb 5-1: USB disconnect, device number 12 [ 278.420731][ T7954] netlink: 7 bytes leftover after parsing attributes in process `syz.1.523'. [ 278.508048][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 280.307404][ T7976] loop1: detected capacity change from 0 to 4096 [ 280.315549][ T7976] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.347133][ T7961] loop4: detected capacity change from 0 to 65536 [ 280.375863][ T7976] EXT4-fs (loop1): Test dummy encryption mode enabled [ 280.435211][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.476898][ T7961] XFS (loop4): Deprecated V4 format (crc=0) not supported by kernel. [ 281.725129][ T7976] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 281.764614][ T7987] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 282.219587][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.840464][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 283.875153][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 284.116969][ T42] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.135157][ T42] usb 5-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 284.227633][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.249264][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.309439][ T42] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.326426][ T42] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.346646][ T42] usb 5-1: Product: syz [ 284.356422][ T42] usb 5-1: Manufacturer: syz [ 284.381097][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 284.391582][ T42] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 284.623859][ T5946] usb 5-1: USB disconnect, device number 13 [ 285.125319][ T8028] loop0: detected capacity change from 0 to 4096 [ 285.132752][ T8028] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.142497][ T8028] EXT4-fs (loop0): Test dummy encryption mode enabled [ 286.640444][ T8028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.433130][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 287.433145][ T27] audit: type=1804 audit(1761659974.186:39): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.545" name=2F6E6577726F6F742F3132312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=18 res=1 errno=0 [ 287.532063][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 287.730574][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.765197][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 287.957278][ T42] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 287.984502][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.008058][ T42] usb 5-1: Product: syz [ 288.020346][ T42] usb 5-1: Manufacturer: syz [ 288.025318][ T42] usb 5-1: SerialNumber: syz [ 288.033223][ T42] usb 5-1: config 0 descriptor?? [ 289.187120][ T42] usb 5-1: Firmware version (0.0) predates our first public release. [ 289.215990][ T42] usb 5-1: Please update to version 0.2 or newer [ 290.460710][ T42] usb 5-1: USB disconnect, device number 14 [ 290.654004][ T5786] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 291.446730][ T5786] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 291.486460][ T5786] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 291.512356][ T5786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 291.528311][ T5786] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 291.549062][ T5786] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 291.566740][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 291.581341][ T5786] usb 1-1: Product: syz [ 291.586832][ T5786] usb 1-1: Manufacturer: syz [ 291.607721][ T5786] cdc_wdm 1-1:1.0: skipping garbage [ 291.626714][ T5786] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 291.695647][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 291.861295][ T5786] usb 1-1: USB disconnect, device number 8 [ 293.480240][ T8096] loop1: detected capacity change from 0 to 128 [ 293.545411][ T8096] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.525677][ T42] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 295.720169][ T42] usb 2-1: not running at top speed; connect to a high speed hub [ 295.733063][ T42] usb 2-1: config 1 has an invalid interface number: 78 but max is 0 [ 295.741585][ T42] usb 2-1: config 1 has no interface number 0 [ 295.753531][ T42] usb 2-1: config 1 interface 78 has no altsetting 0 [ 295.762198][ T5791] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 295.777958][ T42] usb 2-1: string descriptor 0 read error: -22 [ 295.792294][ T42] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 295.801935][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.823481][ T42] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 295.840766][ T42] usb 2-1: selecting invalid altsetting 0 [ 295.966973][ T5791] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 295.982034][ T5791] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 296.001693][ T5791] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 296.051063][ T5791] usb 1-1: config 220 has no interface number 2 [ 296.064610][ T5791] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 296.096628][ T5791] usb 1-1: config 220 interface 0 has no altsetting 0 [ 296.117525][ T5791] usb 1-1: config 220 interface 76 has no altsetting 0 [ 296.134514][ T5791] usb 1-1: config 220 interface 1 has no altsetting 0 [ 296.167008][ T5791] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 296.186408][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.194582][ T5791] usb 1-1: Product: syz [ 296.210189][ T5791] usb 1-1: Manufacturer: syz [ 296.225156][ T5791] usb 1-1: SerialNumber: syz [ 296.290722][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 296.549067][ T5791] usb 1-1: selecting invalid altsetting 0 [ 296.651040][ T5791] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 296.671614][ T5882] usb 2-1: USB disconnect, device number 11 [ 296.679075][ T2315] pvrusb2: control-write URB failure, status=-71 [ 296.692436][ T5791] usb 1-1: No valid video chain found. [ 296.713096][ T5791] usb 1-1: selecting invalid altsetting 0 [ 296.718752][ T2315] pvrusb2: Device being rendered inoperable [ 296.718890][ T5791] usbtest: probe of 1-1:220.1 failed with error -22 [ 296.745600][ T5791] usb 1-1: USB disconnect, device number 9 [ 296.751754][ T2315] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 296.785015][ T2315] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 297.185629][ T5786] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 297.429515][ T5786] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 297.522853][ T5786] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 297.657836][ T5786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 298.012776][ T5786] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 298.031365][ T5786] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 298.041292][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 298.050377][ T5786] usb 5-1: Product: syz [ 298.054559][ T5786] usb 5-1: Manufacturer: syz [ 298.077287][ T5786] cdc_wdm 5-1:1.0: skipping garbage [ 298.082544][ T5786] cdc_wdm 5-1:1.0: skipping garbage [ 298.094269][ T5786] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 298.295468][ T5882] usb 5-1: USB disconnect, device number 15 [ 299.633218][ T8156] loop1: detected capacity change from 0 to 256 [ 299.952935][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 300.065156][ T5882] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 300.320085][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 300.340106][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 300.355316][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.370293][ T5882] usb 5-1: config 0 descriptor?? [ 300.604449][ T5882] usb 5-1: USB disconnect, device number 16 [ 302.779256][ T27] audit: type=1800 audit(1761660245.433:40): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.591" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 303.355289][ T42] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 303.553623][ T42] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.643060][ T42] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 304.020967][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.053243][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.083709][ T42] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.096383][ T42] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.115380][ T42] usb 5-1: Product: syz [ 304.121863][ T42] usb 5-1: Manufacturer: syz [ 304.137622][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 304.155090][ T42] cdc_wdm 5-1:1.0: skipping garbage [ 304.165610][ T42] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 304.347956][ T42] usb 5-1: USB disconnect, device number 17 [ 306.160646][ T8203] loop0: detected capacity change from 0 to 256 [ 309.448316][ T8232] loop0: detected capacity change from 0 to 32768 [ 309.621284][ T8232] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 309.715184][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 309.734179][ T8232] XFS (loop0): Ending clean mount [ 309.749497][ T8232] XFS (loop0): Quotacheck needed: Please wait. [ 309.871962][ T8232] XFS (loop0): Quotacheck: Done. [ 309.911742][ T42] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 310.020883][ T5782] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.093075][ T42] usb 2-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 310.107789][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 310.118067][ T42] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.146619][ T42] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 310.175811][ T42] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 310.192206][ T42] usb 2-1: Product: syz [ 310.221349][ T42] usb 2-1: Manufacturer: syz [ 310.272064][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 310.286625][ T42] cdc_wdm 2-1:1.0: skipping garbage [ 310.306809][ T42] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 310.487284][ T5786] usb 2-1: USB disconnect, device number 12 [ 310.741648][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 314.312540][ T8296] xt_TCPMSS: Only works on TCP SYN packets [ 317.205849][ T8298] loop0: detected capacity change from 0 to 40427 [ 317.238076][ T8298] F2FS-fs (loop0): heap/no_heap options were deprecated [ 317.257423][ T8298] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff [ 317.333958][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.340404][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.843825][ T8332] mmap: syz.1.631 (8332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 318.580704][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 319.083560][ T8341] syz.0.637: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 319.102096][ T8341] CPU: 0 PID: 8341 Comm: syz.0.637 Not tainted syzkaller #0 [ 319.109389][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.119459][ T8341] Call Trace: [ 319.122737][ T8341] [ 319.125668][ T8341] dump_stack_lvl+0x16c/0x230 [ 319.130340][ T8341] ? show_regs_print_info+0x20/0x20 [ 319.135526][ T8341] ? load_image+0x3b0/0x3b0 [ 319.140031][ T8341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 319.146448][ T8341] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 319.152937][ T8341] warn_alloc+0x210/0x300 [ 319.157438][ T8341] ? zone_watermark_ok_safe+0x230/0x230 [ 319.162990][ T8341] ? _raw_spin_unlock+0x28/0x40 [ 319.167828][ T8341] ? __vb2_queue_alloc+0x794/0x1410 [ 319.173011][ T8341] __vmalloc_node_range+0x662/0x1320 [ 319.178311][ T8341] ? free_vm_area+0x50/0x50 [ 319.182845][ T8341] vmalloc_user+0x74/0x80 [ 319.187168][ T8341] ? vb2_vmalloc_alloc+0xef/0x330 [ 319.192185][ T8341] vb2_vmalloc_alloc+0xef/0x330 [ 319.197023][ T8341] ? __copy_timestamp+0x1f0/0x1f0 [ 319.202031][ T8341] __vb2_queue_alloc+0x794/0x1410 [ 319.207052][ T8341] vb2_core_reqbufs+0xa57/0x1140 [ 319.211988][ T8341] ? __mutex_lock+0x4e8/0xcc0 [ 319.216654][ T8341] ? vb2_verify_memory_type+0x570/0x570 [ 319.222198][ T8341] ? vb2_reqbufs+0x360/0x5a0 [ 319.226794][ T8341] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 319.232176][ T8341] __video_do_ioctl+0xcbd/0xdd0 [ 319.237038][ T8341] ? video_ioctl2+0x30/0x30 [ 319.241532][ T8341] ? __might_fault+0xc6/0x120 [ 319.246209][ T8341] ? __might_fault+0xaa/0x120 [ 319.250869][ T8341] video_usercopy+0x838/0x1330 [ 319.255648][ T8341] ? video_ioctl2+0x30/0x30 [ 319.260171][ T8341] ? v4l_printk_ioctl+0x160/0x160 [ 319.265236][ T8341] v4l2_ioctl+0x18a/0x1e0 [ 319.269575][ T8341] ? v4l2_poll+0x2b0/0x2b0 [ 319.273985][ T8341] __se_sys_ioctl+0xfd/0x170 [ 319.278571][ T8341] do_syscall_64+0x55/0xb0 [ 319.282984][ T8341] ? clear_bhb_loop+0x40/0x90 [ 319.287651][ T8341] ? clear_bhb_loop+0x40/0x90 [ 319.292315][ T8341] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.298197][ T8341] RIP: 0033:0x7feee098efc9 [ 319.302630][ T8341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.322227][ T8341] RSP: 002b:00007feee1894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.330639][ T8341] RAX: ffffffffffffffda RBX: 00007feee0be6180 RCX: 00007feee098efc9 [ 319.338600][ T8341] RDX: 0000200000000000 RSI: 00000000c0145608 RDI: 0000000000000006 [ 319.346565][ T8341] RBP: 00007feee0a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.354524][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.362484][ T8341] R13: 00007feee0be6218 R14: 00007feee0be6180 R15: 00007ffc04b67298 [ 319.370458][ T8341] [ 319.404288][ T8341] Mem-Info: [ 319.496608][ T8341] active_anon:9087 inactive_anon:0 isolated_anon:0 [ 319.496608][ T8341] active_file:1272 inactive_file:40006 isolated_file:0 [ 319.496608][ T8341] unevictable:768 dirty:58 writeback:0 [ 319.496608][ T8341] slab_reclaimable:10537 slab_unreclaimable:92108 [ 319.496608][ T8341] mapped:32724 shmem:4269 pagetables:679 [ 319.496608][ T8341] sec_pagetables:0 bounce:0 [ 319.496608][ T8341] kernel_misc_reclaimable:0 [ 319.496608][ T8341] free:1354677 free_pcp:5996 free_cma:0 [ 319.551559][ T8352] netlink: 'syz.1.639': attribute type 8 has an invalid length. [ 319.555151][ T8341] Node 0 active_anon:36348kB inactive_anon:0kB active_file:5088kB inactive_file:159820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130896kB dirty:228kB writeback:0kB shmem:15540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11592kB pagetables:2716kB sec_pagetables:0kB all_unreclaimable? no [ 319.645193][ T8341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 319.846384][ T8341] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 319.876419][ T8341] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 319.882173][ T8341] Node 0 DMA32 free:1493780kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:52968kB inactive_anon:0kB active_file:5088kB inactive_file:158508kB unevictable:1536kB writepending:228kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:2704kB local_pcp:1760kB free_cma:0kB [ 321.010944][ T8341] lowmem_reserve[]: 0 0 1 1 1 [ 321.039339][ T8341] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.320423][ T8347] loop4: detected capacity change from 0 to 40427 [ 321.346865][ T8347] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 321.376148][ T8347] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x724 [ 321.388029][ T8341] lowmem_reserve[]: 0 0 0 0 0 [ 321.401431][ T8341] Node 1 Normal free:3895044kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:8480kB free_cma:0kB [ 321.437486][ T8347] F2FS-fs (loop4): invalid crc value [ 321.442925][ T8347] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 321.476966][ T8341] lowmem_reserve[]: 0 0 0 0 0 [ 321.490286][ T8341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.521811][ T8341] Node 0 DMA32: 3*4kB (UME) 222*8kB (ME) 241*16kB (UME) 130*32kB (UME) 69*64kB (UME) 32*128kB (UME) 6*256kB (UM) 6*512kB (ME) 7*1024kB (UME) 7*2048kB (UM) 353*4096kB (UM) = 1490316kB [ 321.572828][ T8341] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 321.606186][ T8341] Node 1 Normal: 209*4kB (UME) 56*8kB (UME) 38*16kB (UME) 99*32kB (UME) 31*64kB (UME) 9*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3895044kB [ 321.628359][ T8341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.784525][ T8341] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 321.817195][ T8341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 322.555161][ T8341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 322.564486][ T8341] 46556 total pagecache pages [ 322.626842][ T8341] 31 pages in swap cache [ 322.631116][ T8341] Free swap = 124460kB [ 322.642153][ T8341] Total swap = 124996kB [ 322.649612][ T8341] 2097051 pages RAM [ 322.653426][ T8341] 0 pages HighMem/MovableOnly [ 322.670302][ T8341] 416137 pages reserved [ 322.674492][ T8341] 0 pages cma reserved [ 323.430235][ T5946] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 324.406810][ T5946] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 324.425096][ T5946] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 324.445869][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 324.475159][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.500738][ T5946] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 324.525080][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 324.539630][ T5946] usb 5-1: Product: syz [ 324.543820][ T5946] usb 5-1: Manufacturer: syz [ 324.576817][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 324.603109][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 324.630965][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 324.638856][ T5946] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 324.817251][ T5946] usb 5-1: USB disconnect, device number 18 [ 328.343574][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 328.478622][ T8401] syz.4.653 (8401) used greatest stack depth: 20232 bytes left [ 329.096307][ T8415] loop4: detected capacity change from 0 to 128 [ 343.017687][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 346.574780][ T8513] loop0: detected capacity change from 0 to 128 [ 346.600375][ T8513] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 346.626490][ T8514] loop1: detected capacity change from 0 to 1024 [ 346.644745][ T8514] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.694496][ T8513] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.734060][ T8514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.787289][ T8514] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 346.804946][ T8514] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 346.818801][ T8514] EXT4-fs (loop1): This should not happen!! Data will be lost [ 346.818801][ T8514] [ 346.838547][ T8514] EXT4-fs (loop1): Total free blocks count 0 [ 346.844710][ T8514] EXT4-fs (loop1): Free/Dirty block details [ 346.867544][ T8514] EXT4-fs (loop1): free_blocks=20480 [ 346.874247][ T8514] EXT4-fs (loop1): dirty_blocks=80 [ 346.895542][ T8514] EXT4-fs (loop1): Block reservation details [ 346.901936][ T8514] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 346.906844][ T8513] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 346.910557][ T8521] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 6 with error 28 [ 346.933589][ T8513] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 347.025589][ T5946] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 347.397083][ T5946] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.406114][ T5946] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 348.151639][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.170909][ T5946] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 348.196712][ T5946] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.215125][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.245123][ T5946] usb 5-1: Product: syz [ 348.249322][ T5946] usb 5-1: Manufacturer: syz [ 348.315792][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 348.335172][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 348.340442][ T5946] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 348.511097][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 348.594292][ T5946] usb 5-1: USB disconnect, device number 19 [ 349.624474][ T8554] (unnamed net_device) (uninitialized): down delay (8) is not a multiple of miimon (100), value rounded to 0 ms [ 349.771044][ T8556] loop1: detected capacity change from 0 to 128 [ 349.833536][ T8556] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 349.959956][ T8556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.063520][ T8556] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 350.095421][ T8556] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 353.190324][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 354.004811][ T8586] loop1: detected capacity change from 0 to 1024 [ 356.014621][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 356.526432][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 360.958611][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 362.308587][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'. [ 365.123809][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 368.511026][ T8724] loop0: detected capacity change from 0 to 1024 [ 369.408003][ T8735] loop1: detected capacity change from 0 to 1764 [ 369.557375][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 370.075360][ T5850] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 370.267127][ T5850] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.285078][ T5850] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 370.311303][ T5850] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 370.338357][ T5850] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 370.351808][ T5850] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 370.376918][ T5850] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.389944][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.398191][ T5850] usb 1-1: Product: syz [ 370.402532][ T5850] usb 1-1: Manufacturer: syz [ 370.417381][ T5850] cdc_wdm 1-1:1.0: skipping garbage [ 370.424449][ T5850] cdc_wdm 1-1:1.0: skipping garbage [ 370.432241][ T5850] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 370.445422][ T5850] cdc_wdm 1-1:1.0: Unknown control protocol [ 370.595158][ T786] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 370.958373][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 370.976205][ T786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.986952][ T5850] usb 1-1: USB disconnect, device number 10 [ 370.993971][ T786] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.144891][ T786] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.602195][ T786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 371.613604][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 371.661356][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.669525][ T786] usb 2-1: Product: syz [ 371.673712][ T786] usb 2-1: Manufacturer: syz [ 371.678436][ T786] usb 2-1: SerialNumber: syz [ 371.693095][ T786] hub 2-1:1.0: bad descriptor, ignoring hub [ 371.747315][ T786] hub: probe of 2-1:1.0 failed with error -5 [ 371.915605][ T786] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 372.024913][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 372.397859][ T786] usb 2-1: USB disconnect, device number 13 [ 372.412840][ T786] usblp0: removed [ 373.413079][ T8788] loop4: detected capacity change from 0 to 4096 [ 374.335277][ T27] audit: type=1800 audit(1761660317.093:41): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.771" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 375.038053][ T8805] warning: `syz.1.776' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 375.305861][ T5946] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 375.566393][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 375.633726][ T5946] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.662346][ T5946] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.739113][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.933348][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 376.300773][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 377.180900][ T5946] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 377.197832][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 377.205946][ T5946] usb 5-1: Product: syz [ 377.210132][ T5946] usb 5-1: Manufacturer: syz [ 377.219403][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 377.224640][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 377.265932][ T5946] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 377.271884][ T5946] cdc_wdm 5-1:1.0: Unknown control protocol [ 377.761767][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 377.838605][ T5946] usb 5-1: USB disconnect, device number 20 [ 378.587022][ T8848] loop1: detected capacity change from 0 to 512 [ 378.784330][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.790823][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.835585][ T8853] loop0: detected capacity change from 0 to 256 [ 378.848164][ T8848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 378.875953][ T8848] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.898048][ T27] audit: type=1804 audit(1761660321.663:42): pid=8848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.790" name="/newroot/198/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 378.930473][ T8853] FAT-fs (loop0): Directory bread(block 64) failed [ 378.951443][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 378.971681][ T8853] FAT-fs (loop0): Directory bread(block 65) failed [ 379.010119][ T8853] FAT-fs (loop0): Directory bread(block 66) failed [ 379.056624][ T8853] FAT-fs (loop0): Directory bread(block 67) failed [ 379.088726][ T8853] FAT-fs (loop0): Directory bread(block 68) failed [ 379.123061][ T8853] FAT-fs (loop0): Directory bread(block 69) failed [ 379.161617][ T8853] FAT-fs (loop0): Directory bread(block 70) failed [ 379.188635][ T8853] FAT-fs (loop0): Directory bread(block 71) failed [ 379.201971][ T8853] FAT-fs (loop0): Directory bread(block 72) failed [ 379.210079][ T8853] FAT-fs (loop0): Directory bread(block 73) failed [ 380.247241][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 380.323945][ T8866] loop0: detected capacity change from 0 to 1024 [ 380.343096][ T8866] EXT4-fs: Ignoring removed i_version option [ 380.352972][ T8866] EXT4-fs: inline encryption not supported [ 380.363659][ T8866] EXT4-fs (loop0): Test dummy encryption mode enabled [ 380.388548][ T8866] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 380.423473][ T8866] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal [ 381.404433][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'. [ 381.508663][ T5850] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 381.699927][ T5850] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 381.699977][ T5850] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 381.699994][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 381.700034][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 381.700057][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 381.702371][ T5850] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.702397][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.702415][ T5850] usb 5-1: Product: syz [ 381.702428][ T5850] usb 5-1: Manufacturer: syz [ 381.723241][ T5850] cdc_wdm 5-1:1.0: skipping garbage [ 381.723261][ T5850] cdc_wdm 5-1:1.0: skipping garbage [ 383.441230][ T5850] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 383.441253][ T5850] cdc_wdm 5-1:1.0: Unknown control protocol [ 383.545662][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 383.553594][ T5786] usb 5-1: USB disconnect, device number 21 [ 387.401297][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 387.752032][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 389.805552][ T5946] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 391.026800][ T5946] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.055144][ T5946] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 391.105084][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.145430][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 391.165427][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 391.194053][ T5946] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.213762][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.245274][ T5946] usb 5-1: Product: syz [ 391.249595][ T5946] usb 5-1: Manufacturer: syz [ 391.456388][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 391.623200][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 391.643514][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 391.669599][ T5946] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 391.689769][ T5946] cdc_wdm 5-1:1.0: Unknown control protocol [ 392.270788][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 392.352083][ T5946] usb 5-1: USB disconnect, device number 22 [ 394.284344][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 397.253485][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 397.585341][ T5882] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 397.956609][ T5882] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.973427][ T5882] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 397.995078][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.035495][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 398.286072][ T5882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 398.550654][ T5882] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.727211][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.735753][ T5882] usb 5-1: Product: syz [ 398.739944][ T5882] usb 5-1: Manufacturer: syz [ 398.768598][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 398.773892][ T5882] cdc_wdm 5-1:1.0: skipping garbage [ 398.795364][ T5882] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 398.805039][ T5882] cdc_wdm 5-1:1.0: Unknown control protocol [ 398.929157][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 399.434776][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes [ 399.485754][ T5882] usb 5-1: USB disconnect, device number 23 [ 401.134248][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 402.918445][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 405.480101][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.859'. [ 407.209928][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 408.354021][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 410.839104][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 413.312803][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 415.051986][ T5946] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 415.122123][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 415.287794][ T5946] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 415.392516][ T5946] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 415.526853][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 415.639095][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 415.749314][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 415.858065][ T5946] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 415.917573][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 415.930039][ T5946] usb 2-1: Product: syz [ 416.127519][ T5946] usb 2-1: Manufacturer: syz [ 416.154906][ T5946] cdc_wdm 2-1:1.0: skipping garbage [ 416.178880][ T5946] cdc_wdm 2-1:1.0: skipping garbage [ 417.365366][ T5946] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 417.371328][ T5946] cdc_wdm 2-1:1.0: Unknown control protocol [ 417.482947][ T5786] usb 2-1: USB disconnect, device number 14 [ 417.940876][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 419.908623][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 422.884273][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 424.047616][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 425.055178][ T5786] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 425.847848][ T5786] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 425.865906][ T5786] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 425.885428][ T5786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 425.894432][ T5786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 425.925071][ T5786] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 425.958831][ T5786] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.975059][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.983474][ T5786] usb 1-1: Product: syz [ 426.002988][ T5786] usb 1-1: Manufacturer: syz [ 426.026173][ T5786] cdc_wdm 1-1:1.0: skipping garbage [ 426.031418][ T5786] cdc_wdm 1-1:1.0: skipping garbage [ 426.065448][ T5786] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 426.071827][ T5786] cdc_wdm 1-1:1.0: Unknown control protocol [ 426.265884][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 426.433779][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 7 bytes [ 426.444833][ T5882] usb 1-1: USB disconnect, device number 11 [ 428.006733][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 430.578081][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 430.925186][ T5946] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 431.896816][ T5946] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.906197][ T5946] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 431.931086][ T5946] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.949403][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 431.979899][ T5946] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 432.197849][ T5946] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 432.208518][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.220455][ T5946] usb 5-1: Product: syz [ 432.258631][ T5946] usb 5-1: Manufacturer: syz [ 432.272266][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 432.281280][ T5946] cdc_wdm 5-1:1.0: skipping garbage [ 432.293853][ T5946] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 432.347248][ T5946] cdc_wdm 5-1:1.0: Unknown control protocol [ 433.089707][ T5946] usb 5-1: USB disconnect, device number 24 [ 434.137854][ T9360] veth0_vlan: left promiscuous mode [ 434.143207][ T9360] vlan0: entered promiscuous mode [ 434.149076][ T9360] veth0_vlan: entered promiscuous mode [ 435.446887][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 436.200004][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 440.295561][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.301901][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.283214][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 444.549918][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.962'. [ 446.975189][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.967'. [ 449.428716][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 452.125165][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 453.656767][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.984'. [ 454.717495][ T9521] sctp: [Deprecated]: syz.3.987 (pid 9521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.717495][ T9521] Use struct sctp_sack_info instead [ 455.423575][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.990'. [ 456.379127][ T9533] use of bytesused == 0 is deprecated and will be removed in the future, [ 456.388181][ T9533] use the actual size instead. [ 459.076148][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 460.206300][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 463.073810][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 464.993859][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 467.173212][ T9615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1015'. [ 467.754929][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 469.539228][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 472.332008][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 473.142845][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 476.086072][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 479.223634][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 481.028120][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 482.619155][ T5946] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 483.454555][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 483.472200][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 483.550012][ T5946] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 483.638848][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.820238][ T5946] usb 5-1: config 0 descriptor?? [ 484.143412][ T5946] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 484.187557][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.243159][ T5946] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 484.254385][ T5946] usb 5-1: media controller created [ 484.294632][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.629291][ T5946] DVB: Unable to find symbol dib7000p_attach() [ 484.635600][ T5946] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 485.485037][ T5946] rc_core: IR keymap rc-dib0700-rc5 not found [ 485.491173][ T5946] Registered IR keymap rc-empty [ 485.523190][ T5946] dvb-usb: could not initialize remote control. [ 485.540144][ T5946] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 485.620184][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 486.407457][ T5946] usb 5-1: USB disconnect, device number 25 [ 486.442668][ T5946] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 488.048425][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 490.256505][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 493.098738][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 495.005161][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 498.365749][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 499.493473][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 501.995735][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.002074][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.456230][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 503.459150][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 506.832316][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 508.057005][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 509.005458][ T5103] Bluetooth: hci0: Invalid handle: 0xfd00 > 0x0eff [ 509.924215][ T9996] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1124'. [ 510.704177][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 512.203165][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 515.070044][T10038] loop4: detected capacity change from 0 to 131072 [ 515.097203][T10038] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 515.105403][T10038] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 515.119413][T10038] F2FS-fs (loop4): invalid crc value [ 515.148395][T10038] F2FS-fs (loop4): Found nat_bits in checkpoint [ 515.283511][T10038] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 515.290776][T10038] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 515.387527][T10046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1137'. [ 515.811205][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 518.690287][T10074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 518.880795][T10078] rtc_cmos 00:00: Alarms can be up to one day in the future [ 519.327132][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1138'. [ 520.891523][T10072] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.074996][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 521.157415][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.265370][ T9021] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 521.275624][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.387286][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.510905][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 521.620313][ T5850] rtc rtc0: __rtc_set_alarm: err=-22 [ 521.684871][ T9021] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 521.808107][ T9021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.905237][ T9021] usb 5-1: Product: syz [ 521.909449][ T9021] usb 5-1: Manufacturer: syz [ 521.914048][ T9021] usb 5-1: SerialNumber: syz [ 521.948953][ T9021] usb 5-1: config 0 descriptor?? [ 522.316431][ T9021] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 524.235746][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 525.601952][ T9021] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 525.752425][ T9021] usb 5-1: USB disconnect, device number 26 [ 526.100204][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 527.103383][T10118] loop0: detected capacity change from 0 to 32768 [ 527.582290][T10118] JBD2: Ignoring recovery information on journal [ 527.778340][T10118] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 528.066463][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 528.515703][T10144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 530.378534][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 531.732210][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 533.686268][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'. [ 536.375037][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 538.667435][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. Stopping sshd: [ 539.066846][T10247] loop4: detected capacity change from 0 to 32768 stopped /usr/sbin/sshd (pid 5551) OK [ 539.336237][T10247] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 539.504316][T10247] XFS (loop4): Ending clean mount [ 539.521217][T10247] XFS (loop4): Quotacheck needed: Please wait. [ 539.631271][T10247] XFS (loop4): Quotacheck: Done. [ 539.737918][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1200'. Stopping crond: stopped /usr/sbin/crond (pid 5527) [ 541.278111][ T5992] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5452) Stopping network: [ 543.911970][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 546.885152][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. OK [ 547.707166][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 548.636422][T10343] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1214'. Stopping iptables: [ 549.631421][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 549.664494][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. OK Stopping system message bus: [ 550.296197][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'. [ 550.635011][ T27] audit: type=1326 audit(1761660493.393:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 550.714986][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 551.236074][T10371] loop1: detected capacity change from 0 to 1024 [ 551.380389][T10371] EXT4-fs: inline encryption not supported [ 551.478639][ T27] audit: type=1326 audit(1761660493.393:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 551.504861][T10371] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 551.625015][T10379] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1226'. [ 551.656324][T10371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.749733][ T27] audit: type=1326 audit(1761660494.513:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 551.838177][ T27] audit: type=1326 audit(1761660494.563:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 done [ 551.937398][ T27] audit: type=1326 audit(1761660494.563:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 552.185510][ T27] audit: type=1326 audit(1761660494.583:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 552.330624][ T27] audit: type=1326 audit(1761660494.673:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 552.369576][ T27] audit: type=1326 audit(1761660494.673:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10365 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4158efc9 code=0x7ffc0000 [ 552.454650][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.126774][T10397] loop0: detected capacity change from 0 to 4096 [ 555.601239][ T27] audit: type=1800 audit(1761660498.013:51): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1229" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 556.536365][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1234'. [ 557.542199][T10423] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1235'. [ 557.780980][T10428] loop1: detected capacity change from 0 to 128 [ 557.917590][T10431] loop4: detected capacity change from 0 to 1024 [ 557.928960][T10431] EXT4-fs: Ignoring removed i_version option [ 557.941758][T10431] EXT4-fs: inline encryption not supported [ 557.951427][T10431] EXT4-fs (loop4): Test dummy encryption mode enabled [ 557.961591][T10431] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 557.978089][T10431] EXT4-fs (loop4): can't mount with commit=4, fs mounted w/o journal Stopping klogd: [ 558.344027][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'. OK [ 558.363889][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1240'. Stopping acpid: [ 560.106715][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. OK [ 560.978359][T10470] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1247'. Stopping syslogd: stopped /sbin/syslogd (pid 5140) OK [ 561.539263][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 561.583236][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. umount: can't remount debugfs read-only [ 561.922298][T10492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1254'. [ 562.118598][ T5850] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 562.368843][ T5850] usb 1-1: unable to get BOS descriptor or descriptor too short [ 562.427753][ T5850] usb 1-1: not running at top speed; connect to a high speed hub [ 562.515145][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'. serialport: VM disconnected.