last executing test programs: 18.856644309s ago: executing program 3 (id=2395): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0x0, @mcast2, 0x5}, {0xa, 0x3, 0x20000207, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800086}}}, 0x48) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x28080200, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380)="db011a0932") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 16.897491292s ago: executing program 1 (id=2399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0x51a9497) openat$nullb(0xffffffffffffff9c, 0x0, 0x3ec5c3, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e}) io_setup(0x7, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]}) io_pgetevents(r4, 0x94ed, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r5, r6+60000000}, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) r7 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, &(0x7f0000000240), &(0x7f0000000300)) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x700, 0x0) 14.067012861s ago: executing program 2 (id=2401): syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) sched_setscheduler(r1, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) 13.924044965s ago: executing program 1 (id=2402): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000880), 0x88001, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x408, 0x318, 0xd0, 0x200, 0x200, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xff], [0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x6, 0x0, 0x14}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1c, 0x1}}, @common=@hl={{0x28}, {0x1, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff], [0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) 13.507049626s ago: executing program 3 (id=2403): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 12.787369718s ago: executing program 0 (id=2404): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, 0x0, 0x0, 0xd36) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.755684851s ago: executing program 2 (id=2405): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c5"], 0x78, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video(0x0, 0x3ff, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) kexec_load(0x1000d0ffc2, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3e0000}], 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) 11.85570814s ago: executing program 2 (id=2406): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f00000001c0)=ANY=[], 0x0) 10.457418028s ago: executing program 0 (id=2407): pipe2$9p(0x0, 0x80000) dup(0xffffffffffffffff) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 8.749251676s ago: executing program 0 (id=2408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e71", 0x2d, r3) 8.726815698s ago: executing program 3 (id=2409): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @private=0xa010100, r3}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) r6 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x21, &(0x7f0000000bc0)=ANY=[], 0x0, 0xf61, 0x2a, &(0x7f00000006c0)=""/42, 0x40f00, 0xb1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x3, 0xb, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7]}, 0x94) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, r5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/zoneinfo\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x24, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x49}, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x36b8d822, 0x3}, &(0x7f0000000180)) sendmmsg$unix(r1, &(0x7f0000007900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x640100d0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x40) 8.635227868s ago: executing program 2 (id=2410): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$inet6(0xa, 0x802, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e) acct(&(0x7f0000000240)='./file0/file1\x00') write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50) 8.629815108s ago: executing program 1 (id=2411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) 7.574982072s ago: executing program 0 (id=2412): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0x0, @mcast2, 0x5}, {0xa, 0x3, 0x20000207, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800086}}}, 0x48) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x28080200, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380)="db011a0932") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.574282932s ago: executing program 1 (id=2413): syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{}, {}]}) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, 0x0) sched_setscheduler(0x0, 0x5, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) 6.133947584s ago: executing program 2 (id=2414): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c5"], 0x78, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video(0x0, 0x3ff, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) 5.06409921s ago: executing program 0 (id=2415): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, 0x0, 0x0, 0xd36) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.924534584s ago: executing program 1 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) 4.923896594s ago: executing program 2 (id=2417): pipe2$9p(0x0, 0x80000) dup(0xffffffffffffffff) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 3.689135676s ago: executing program 1 (id=2418): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.349817288s ago: executing program 3 (id=2420): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x80, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x2007, @fd=r1, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r2, 0x32dc, 0x0, 0xe, 0x0, 0x0) 1.265732985s ago: executing program 3 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syslog(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, r4, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) 3.1788ms ago: executing program 3 (id=2422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb643891162fb3fbf36e71", 0x2d, r3) 0s ago: executing program 0 (id=2429): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r6, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000. [ 777.942273][T10330] syz.1.1123: attempt to access beyond end of device [ 777.942273][T10330] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 777.956495][T10330] gfs2: error 10 reading superblock [ 779.645323][T10349] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1124'. [ 780.239400][T10351] Invalid ELF section header size [ 780.515498][ T5923] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 780.780704][T10354] program syz.3.1128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.908584][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.945103][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.973216][ T5923] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 780.993734][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.020703][ T5923] usb 2-1: config 0 descriptor?? [ 781.389130][T10359] syz.0.1130: attempt to access beyond end of device [ 781.389130][T10359] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 781.514552][T10359] gfs2: error 10 reading superblock [ 782.240135][ T5923] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 782.273165][ T5923] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 782.357877][ T5923] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 782.587529][T10367] Invalid ELF section header size [ 782.639117][ T5923] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 783.326852][ T5923] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 783.372703][ T5923] usb 2-1: USB disconnect, device number 16 [ 783.524646][T10364] fido_id[10364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 783.832074][T10372] loop2: detected capacity change from 0 to 4096 [ 784.043399][T10372] EXT4-fs (loop2): Test dummy encryption mode enabled [ 784.220204][T10372] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 784.340449][T10372] System zones: 0-5 [ 784.532475][T10372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.726506][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.329847][T10415] Invalid ELF section header size [ 789.308210][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 789.658453][T10401] loop3: detected capacity change from 0 to 40427 [ 789.717429][T10401] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 789.729588][T10401] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 789.746727][T10401] F2FS-fs (loop3): Found nat_bits in checkpoint [ 789.844356][T10401] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 789.853830][T10401] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 789.918298][T10424] kvm: pic: non byte write [ 790.722348][T10436] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1146'. [ 791.680970][T10444] Invalid ELF section header size [ 791.795163][ T27] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 791.965308][T10442] fuse: Bad value for 'fd' [ 792.021242][T10446] program syz.0.1150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 792.307553][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 792.330928][ T27] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 792.354949][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.373533][ T27] usb 2-1: Product: syz [ 792.383822][ T27] usb 2-1: Manufacturer: syz [ 792.393272][ T27] usb 2-1: SerialNumber: syz [ 792.426660][ T27] usb 2-1: config 0 descriptor?? [ 792.453560][ T27] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 794.035057][ T27] gspca_topro: reg_w err -71 [ 794.085454][ T27] gspca_topro: Sensor soi763a [ 794.158197][ T27] usb 2-1: USB disconnect, device number 17 [ 794.277260][T10454] syzkaller0: entered promiscuous mode [ 794.282909][T10454] syzkaller0: entered allmulticast mode [ 794.687291][ T5846] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 795.545466][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 795.601493][ T5846] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 795.631779][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.654657][ T5846] usb 1-1: Product: syz [ 795.669882][ T5846] usb 1-1: Manufacturer: syz [ 795.681874][T10471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1154'. [ 795.691333][ T5846] usb 1-1: SerialNumber: syz [ 795.697812][ T5846] usb 1-1: config 0 descriptor?? [ 795.711007][ T5846] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 795.981114][T10475] kvm: pic: non byte write [ 797.196968][ T5846] gspca_topro: reg_r err -71 [ 797.201781][ T5846] gspca_topro: Sensor soi763a [ 797.257870][ T5846] usb 1-1: USB disconnect, device number 9 [ 800.645232][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 800.884947][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 801.025883][ T8] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 801.041355][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.060511][ T8] usb 3-1: Product: syz [ 801.064750][ T8] usb 3-1: Manufacturer: syz [ 801.409490][ T8] usb 3-1: SerialNumber: syz [ 801.440067][ T8] usb 3-1: config 0 descriptor?? [ 801.480287][ T8] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 801.780036][T10518] loop1: detected capacity change from 0 to 512 [ 801.834536][T10518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.066943][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 803.368543][ T8] gspca_topro: reg_r err -71 [ 803.377957][ T8] gspca_topro: Sensor soi763a [ 803.403406][ T8] usb 3-1: USB disconnect, device number 14 [ 804.602025][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.722132][T10539] fuse: Bad value for 'fd' [ 806.918658][T10554] Invalid ELF section header size [ 807.124963][ T5876] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 807.345731][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 807.417713][T10555] program syz.1.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 807.540464][ T5876] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 807.550296][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.563526][ T5876] usb 1-1: Product: syz [ 807.571898][ T5876] usb 1-1: Manufacturer: syz [ 807.579377][ T5876] usb 1-1: SerialNumber: syz [ 807.623673][ T5876] usb 1-1: config 0 descriptor?? [ 807.641539][ T5876] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 807.931991][T10564] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1178'. [ 809.076189][ T5876] gspca_topro: reg_w err -110 [ 809.125014][ T5876] gspca_topro: Sensor soi763a [ 809.201756][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.209178][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.865018][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 809.942276][T10572] kvm: pic: non byte write [ 810.065148][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 810.079291][ T8] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 810.097422][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.115575][ T8] usb 2-1: Product: syz [ 810.122428][ T8] usb 2-1: Manufacturer: syz [ 810.128007][ T8] usb 2-1: SerialNumber: syz [ 810.138174][ T8] usb 2-1: config 0 descriptor?? [ 810.253600][ T8] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 810.774131][T10288] usb 1-1: USB disconnect, device number 10 [ 812.040621][ T8] gspca_topro: reg_w err -110 [ 812.105066][ T8] gspca_topro: Sensor soi763a [ 812.259716][T10586] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1184'. [ 814.113380][ T5839] usb 2-1: USB disconnect, device number 18 [ 816.492750][T10606] syz.2.1189: attempt to access beyond end of device [ 816.492750][T10606] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 816.508029][T10606] gfs2: error 10 reading superblock [ 817.520017][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 818.075841][T10611] syz.2.1193: attempt to access beyond end of device [ 818.075841][T10611] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 818.090419][T10611] gfs2: error 10 reading superblock [ 818.547288][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 819.423049][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 819.950036][ T5839] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 819.975018][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.149938][ T5839] usb 3-1: Product: syz [ 820.155161][ T5839] usb 3-1: Manufacturer: syz [ 820.160009][ T5839] usb 3-1: SerialNumber: syz [ 820.209950][ T5839] usb 3-1: config 0 descriptor?? [ 820.984570][ T5839] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 821.379202][ T5839] gspca_topro: reg_w err -71 [ 822.105211][ T5839] gspca_topro: Sensor soi763a [ 822.122262][ T5839] usb 3-1: USB disconnect, device number 15 [ 822.512329][T10649] kvm: pic: non byte write [ 829.072953][T10692] ======================================================= [ 829.072953][T10692] WARNING: The mand mount option has been deprecated and [ 829.072953][T10692] and is ignored by this kernel. Remove the mand [ 829.072953][T10692] option from the mount to silence this warning. [ 829.072953][T10692] ======================================================= [ 829.273233][T10692] tmpfs: Bad value for 'nr_blocks' [ 829.987893][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1212'. [ 830.005163][T10691] netlink: set zone limit has 8 unknown bytes [ 831.032914][T10692] binder: 10688:10692 ioctl 40189206 200000000340 returned -22 [ 831.979505][ T787] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 833.170855][ T787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 833.205987][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.214246][ T787] usb 3-1: Product: syz [ 833.250421][ T787] usb 3-1: Manufacturer: syz [ 833.285122][ T787] usb 3-1: SerialNumber: syz [ 833.356264][ T787] usb 3-1: config 0 descriptor?? [ 833.496358][T10710] Invalid ELF section header size [ 833.841326][ T787] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 834.567599][T10717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1218'. [ 834.577162][T10717] netlink: set zone limit has 8 unknown bytes [ 835.413558][T10723] syz.0.1218 (10723): drop_caches: 2 [ 835.671968][ T787] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 836.473962][ T787] usb 3-1: USB disconnect, device number 16 [ 836.660455][T10730] tmpfs: Bad value for 'nr_blocks' [ 836.711442][T10732] tmpfs: Bad value for 'nr_blocks' [ 836.819033][T10733] binder: 10729:10733 ioctl 40189206 200000000340 returned -22 [ 837.521445][T10734] binder: 10731:10734 ioctl 40189206 200000000340 returned -22 [ 838.196851][T10737] syz.3.1224: attempt to access beyond end of device [ 838.196851][T10737] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 838.225168][T10737] gfs2: error 10 reading superblock [ 838.649506][T10745] Invalid ELF section header size [ 839.956475][T10753] trusted_key: syz.2.1229 sent an empty control message without MSG_MORE. [ 843.672301][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 844.510674][T10786] Cannot find add_set index 0 as target [ 846.029637][T10796] syz.1.1238: attempt to access beyond end of device [ 846.029637][T10796] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 846.135545][T10796] gfs2: error 10 reading superblock [ 852.875104][T10842] Cannot find add_set index 0 as target [ 853.412952][T10825] loop1: detected capacity change from 0 to 40427 [ 853.678398][T10825] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 853.697499][T10825] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 853.726617][T10825] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 860.023558][T10895] Cannot find add_set index 0 as target [ 861.047681][ T5779] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 861.105633][T10883] loop3: detected capacity change from 0 to 40427 [ 861.115676][T10883] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 861.123577][T10883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 861.148586][T10883] F2FS-fs (loop3): Found nat_bits in checkpoint [ 861.250571][ T5779] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 861.279228][T10883] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 861.288192][T10883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 861.290304][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.323012][ T5779] usb 2-1: Product: syz [ 861.343651][ T5779] usb 2-1: Manufacturer: syz [ 861.357261][ T5779] usb 2-1: SerialNumber: syz [ 861.383342][ T5779] usb 2-1: config 0 descriptor?? [ 861.653422][ T5779] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 862.995058][ T5779] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 863.092759][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 863.120564][ T5923] usb 2-1: USB disconnect, device number 19 [ 863.134448][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 863.184780][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 863.205031][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 863.230542][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 863.374166][T10913] tmpfs: Bad value for 'nr_blocks' [ 863.381914][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 863.415268][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 865.076342][T10913] binder: 10912:10913 ioctl 40189206 200000000340 returned -22 [ 866.357776][T10929] tipc: Started in network mode [ 866.362787][T10929] tipc: Node identity 36657c3bc243, cluster identity 4711 [ 866.425101][T10929] tipc: Enabled bearer , priority 0 [ 866.455383][T10929] syzkaller0: entered promiscuous mode [ 866.495201][T10929] syzkaller0: entered allmulticast mode [ 866.548983][T10930] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 866.596841][T10929] tipc: Resetting bearer [ 866.618557][T10928] tipc: Resetting bearer [ 866.759088][T10928] tipc: Disabling bearer [ 867.235891][T10938] Cannot find add_set index 0 as target [ 870.638860][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.645991][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.688370][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1280'. [ 870.697910][T10953] netlink: set zone limit has 8 unknown bytes [ 870.950904][T10953] syz.3.1280 (10953): drop_caches: 2 [ 871.756493][T10958] loop2: detected capacity change from 0 to 4096 [ 871.827639][T10958] EXT4-fs (loop2): Test dummy encryption mode enabled [ 871.884550][T10958] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 871.890895][T10943] loop1: detected capacity change from 0 to 40427 [ 871.913156][T10943] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 871.975485][T10958] System zones: 0-5 [ 871.996260][T10958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 872.015871][T10943] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 872.437372][T10943] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 872.725532][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.065532][ T7734] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 874.043427][T10975] Invalid ELF section header size [ 874.832931][T10975] program syz.2.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.020066][T10989] syz.2.1290: attempt to access beyond end of device [ 877.020066][T10989] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 877.041767][T10989] gfs2: error 10 reading superblock [ 877.235321][ T27] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 878.293175][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 878.303069][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.312510][ T27] usb 4-1: Product: syz [ 878.328148][ T27] usb 4-1: Manufacturer: syz [ 878.334914][ T27] usb 4-1: SerialNumber: syz [ 878.366176][ T27] usb 4-1: config 0 descriptor?? [ 878.617939][ T27] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 879.687071][T11003] loop0: detected capacity change from 0 to 40427 [ 879.728784][T11003] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 879.770012][T11003] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 879.807340][T11003] F2FS-fs (loop0): Found nat_bits in checkpoint [ 879.999211][T11003] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 880.038813][T11003] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 880.137512][ T27] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 880.174647][ T27] usb 4-1: USB disconnect, device number 10 [ 882.313496][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 882.364762][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 882.527742][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 883.385076][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 883.429218][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 883.448296][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 883.459835][ T5790] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 884.141353][T11034] syz.2.1299: attempt to access beyond end of device [ 884.141353][T11034] nbd2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 884.154736][T11034] gfs2: error 10 reading superblock [ 886.475187][T11047] program syz.2.1302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.027485][T11054] program syz.2.1304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.270022][T11095] Cannot find add_set index 0 as target [ 899.075384][ T5859] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 899.359936][ T5859] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 899.378220][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.412085][ T5859] usb 3-1: Product: syz [ 899.432296][ T5859] usb 3-1: Manufacturer: syz [ 899.452093][ T5859] usb 3-1: SerialNumber: syz [ 899.544268][ T5859] usb 3-1: config 0 descriptor?? [ 899.781310][ T5859] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 899.845327][T10288] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 900.048929][T10288] usb 1-1: Using ep0 maxpacket: 32 [ 900.054560][ T787] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 900.077053][T10288] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 900.086660][T10288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.094873][T10288] usb 1-1: Product: syz [ 900.099295][T10288] usb 1-1: Manufacturer: syz [ 900.104374][T10288] usb 1-1: SerialNumber: syz [ 900.113197][T10288] usb 1-1: config 0 descriptor?? [ 900.126234][T10288] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 900.175936][ T5779] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 900.251941][ T787] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.261757][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.270866][ T787] usb 4-1: Product: syz [ 900.275799][ T787] usb 4-1: Manufacturer: syz [ 900.281658][ T787] usb 4-1: SerialNumber: syz [ 900.295766][ T787] usb 4-1: config 0 descriptor?? [ 900.381929][ T5779] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.391774][ T5779] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.404927][ T5779] usb 2-1: Product: syz [ 900.409412][ T5779] usb 2-1: Manufacturer: syz [ 900.414108][ T5779] usb 2-1: SerialNumber: syz [ 900.430138][ T5779] usb 2-1: config 0 descriptor?? [ 900.517554][ T787] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 900.658778][ T5779] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 901.220450][ T5859] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 901.234677][ T5859] usb 3-1: USB disconnect, device number 17 [ 901.548897][T10288] gspca_topro: reg_r err -71 [ 901.556462][T10288] gspca_topro: Sensor soi763a [ 901.572660][T10288] usb 1-1: USB disconnect, device number 11 [ 902.103739][ T787] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 902.419422][ T787] usb 4-1: USB disconnect, device number 11 [ 902.497496][ T5779] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 902.540527][ T5779] usb 2-1: USB disconnect, device number 20 [ 906.352589][T11175] loop1: detected capacity change from 0 to 40427 [ 906.391176][T11175] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 906.403506][T11175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 906.450412][T11175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 906.761734][T11175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 906.771968][T11175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 909.828582][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 909.846429][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 909.857497][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 909.871871][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 909.931574][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 909.962154][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 909.972455][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 910.695319][T11218] tmpfs: Bad value for 'nr_blocks' [ 911.057622][T11220] binder: 11217:11220 ioctl 40189206 200000000340 returned -22 [ 913.505940][T11235] tmpfs: Bad value for 'nr_blocks' [ 916.899970][ T5779] hid-generic 0101:0002:0002.000A: item fetching failed at offset 3/10 [ 916.926115][ T5779] hid-generic: probe of 0101:0002:0002.000A failed with error -22 [ 919.099002][T11266] Cannot find add_set index 0 as target [ 923.178150][T11287] Invalid ELF section header size [ 925.573775][T11309] Cannot find add_set index 0 as target [ 928.224210][T11321] tipc: Enabled bearer , priority 0 [ 928.255365][T11321] tipc: Resetting bearer [ 928.295885][T11320] tipc: Disabling bearer [ 928.643279][T11329] Invalid ELF section header size [ 932.068118][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.074482][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.440468][T11372] Cannot find add_set index 0 as target [ 935.725331][T11369] loop2: detected capacity change from 0 to 4096 [ 935.753295][T11369] EXT4-fs (loop2): Test dummy encryption mode enabled [ 935.809121][T11369] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 935.828416][T11369] System zones: 0-5 [ 935.908758][T11369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.975410][T11377] Invalid ELF section header size [ 937.646926][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.779074][ T5859] hid-generic 0101:0002:0002.000B: item fetching failed at offset 3/10 [ 939.866618][ T5859] hid-generic: probe of 0101:0002:0002.000B failed with error -22 [ 940.922103][T11410] tmpfs: Bad value for 'nr_blocks' [ 941.221966][T11419] Cannot find add_set index 0 as target [ 943.838089][T11425] Invalid ELF section header size [ 946.112072][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 947.127769][T11460] tmpfs: Bad value for 'nr_blocks' [ 948.836196][T11470] Cannot find add_set index 0 as target [ 951.903303][T11489] tmpfs: Bad value for 'nr_blocks' [ 952.268249][T11490] kvm: pic: non byte write [ 954.054991][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 955.757887][T11519] Cannot find add_set index 0 as target [ 956.715403][ T5779] hid-generic 0101:0002:0002.000C: item fetching failed at offset 3/10 [ 956.825520][ T5779] hid-generic: probe of 0101:0002:0002.000C failed with error -22 [ 957.742961][T11520] loop1: detected capacity change from 0 to 40427 [ 957.752809][T11520] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 957.761325][T11520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 957.788812][T11520] F2FS-fs (loop1): Found nat_bits in checkpoint [ 958.738451][T11520] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 958.750184][T11520] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 959.593006][T11548] kvm: pic: non byte write [ 961.795205][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 963.570559][T11572] Cannot find add_set index 0 as target [ 969.661538][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 972.055315][T11635] Invalid ELF section header size [ 972.128739][T11637] kvm: pic: non byte write [ 972.168353][T11638] Cannot find add_set index 0 as target [ 972.823806][ T5779] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 973.439083][ T5779] usb 3-1: device descriptor read/64, error -71 [ 973.779140][ T5779] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 974.221102][ T5779] usb 3-1: device descriptor read/64, error -71 [ 974.713028][ T5779] usb usb3-port1: attempt power cycle [ 976.263322][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 977.262749][T11675] binder: 11668:11675 ioctl c0306201 0 returned -14 [ 979.184934][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 980.141361][T11693] tmpfs: Bad value for 'nr_blocks' [ 980.154939][ T5779] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 980.745258][ T5779] usb 4-1: device descriptor read/64, error -71 [ 981.015094][ T5779] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 981.204967][ T5779] usb 4-1: device descriptor read/64, error -71 [ 981.325146][ T5779] usb usb4-port1: attempt power cycle [ 981.690893][T11696] loop1: detected capacity change from 0 to 40427 [ 981.707192][T11696] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 981.728836][T11696] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 981.755017][ T5779] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 981.795729][ T5779] usb 4-1: device descriptor read/8, error -71 [ 981.851803][T11696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 981.985589][T11696] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 982.005112][T11696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 982.096411][ T5779] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 982.175084][ T5779] usb 4-1: device descriptor read/8, error -71 [ 982.314952][ T5779] usb usb4-port1: unable to enumerate USB device [ 982.662998][ T5923] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 983.578238][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.597087][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.618670][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.633623][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.649419][ T5923] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 983.662607][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.671974][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.683061][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.693369][ T5923] usb 1-1: Product: syz [ 983.698297][ T5923] usb 1-1: Manufacturer: syz [ 983.703011][ T5923] usb 1-1: SerialNumber: syz [ 983.707848][ T5787] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 983.722091][ T5923] usb 1-1: config 0 descriptor?? [ 983.950180][ T5923] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 985.967534][ T5923] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 986.005343][ T5923] usb 1-1: USB disconnect, device number 12 [ 986.194227][T11744] Invalid ELF section header size [ 986.376105][ T5846] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 986.780751][T11746] program syz.1.1480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.837873][ T5846] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 986.963940][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.972128][ T5846] usb 4-1: Product: syz [ 986.976698][ T5846] usb 4-1: Manufacturer: syz [ 986.981371][ T5846] usb 4-1: SerialNumber: syz [ 986.989087][ T5846] usb 4-1: config 0 descriptor?? [ 987.149060][T11750] tmpfs: Bad value for 'nr_blocks' [ 987.250593][T11751] binder: 11749:11751 ioctl 40189206 200000000340 returned -22 [ 987.641537][ T5846] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 988.469290][T11764] Cannot find add_set index 0 as target [ 988.555130][T10111] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 988.845123][T10111] usb 1-1: Using ep0 maxpacket: 16 [ 988.915020][T10111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.031168][T10111] usb 1-1: config 0 has no interfaces? [ 989.110428][T10111] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 989.121221][T10111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.130493][T10111] usb 1-1: Product: syz [ 989.135815][T10111] usb 1-1: Manufacturer: syz [ 989.140627][T10111] usb 1-1: SerialNumber: syz [ 989.149726][T10111] usb 1-1: config 0 descriptor?? [ 989.418987][T10288] usb 1-1: USB disconnect, device number 13 [ 990.358080][ T5846] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 990.383315][ T5846] usb 4-1: USB disconnect, device number 16 [ 990.431292][T11773] kvm: pic: non byte write [ 992.991785][T11804] tmpfs: Bad value for 'nr_blocks' [ 993.556667][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.565035][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.822285][T11812] tmpfs: Bad value for 'nr_blocks' [ 994.097080][T11815] Cannot find add_set index 0 as target [ 994.859874][T11813] binder: 11811:11813 ioctl 40189206 200000000340 returned -22 [ 996.269411][T11823] kvm: pic: non byte write [ 997.546424][T11821] loop3: detected capacity change from 0 to 40427 [ 997.579469][T11836] tmpfs: Bad value for 'nr_blocks' [ 997.713954][T11821] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 997.737187][T11821] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 998.522940][T11821] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1002.950298][T11876] tmpfs: Bad value for 'nr_blocks' [ 1003.819870][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1003.996130][T11882] loop2: detected capacity change from 0 to 4096 [ 1004.041888][T11882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1004.071208][T11882] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1004.127575][T11882] System zones: 0-5 [ 1004.144728][T11882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1005.158445][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.485661][T11907] tmpfs: Bad value for 'nr_blocks' [ 1009.627131][T11935] loop1: detected capacity change from 0 to 4096 [ 1009.644005][T11935] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1009.699141][T11935] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1009.715016][T11935] System zones: 0-5 [ 1009.722737][T11935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.002886][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.185916][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1011.516938][T11951] Cannot find add_set index 0 as target [ 1013.377316][T11957] tmpfs: Bad value for 'nr_blocks' [ 1016.386274][T11981] loop0: detected capacity change from 0 to 4096 [ 1016.401240][T11981] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1016.458378][T11981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1016.567830][T11981] System zones: 0-5 [ 1016.628769][T11981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.971243][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1017.887646][T10288] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1018.082022][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.185037][T10288] usb 4-1: Using ep0 maxpacket: 8 [ 1018.202923][T10288] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1018.216168][T10288] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1018.226955][T10288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.265905][T10288] usb 4-1: Product: syz [ 1018.270624][T10288] usb 4-1: Manufacturer: syz [ 1018.277250][T10288] usb 4-1: SerialNumber: syz [ 1019.498102][T12001] tmpfs: Bad value for 'nr_blocks' [ 1019.739099][T10288] usb 4-1: USB disconnect, device number 17 [ 1021.014980][T10288] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1021.203276][T10288] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1021.234977][T10288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.291326][T10288] usb 1-1: Product: syz [ 1021.341749][T10288] usb 1-1: Manufacturer: syz [ 1021.347201][T10288] usb 1-1: SerialNumber: syz [ 1021.360368][T10288] usb 1-1: config 0 descriptor?? [ 1022.101106][T10288] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1024.353388][T10288] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1024.356991][T12036] tipc: Enabled bearer , priority 0 [ 1024.364288][T10288] usb 1-1: USB disconnect, device number 14 [ 1024.447876][T12037] syzkaller0: entered promiscuous mode [ 1024.453698][T12037] syzkaller0: entered allmulticast mode [ 1024.519483][T12039] tmpfs: Bad value for 'nr_blocks' [ 1024.525653][T12036] tipc: Resetting bearer [ 1024.553554][T12035] tipc: Resetting bearer [ 1024.620849][T12035] tipc: Disabling bearer [ 1025.901995][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1027.613046][T12062] Can't find ip_set type hash:net, [ 1029.859722][T12082] tmpfs: Bad value for 'nr_blocks' [ 1032.458830][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1036.861681][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1037.226875][T12135] tmpfs: Bad value for 'nr_blocks' [ 1037.323886][T12136] binder: 12134:12136 ioctl 40189206 200000000340 returned -22 [ 1037.716442][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1039.341348][T12159] Cannot find add_set index 0 as target [ 1041.736997][T12168] tmpfs: Bad value for 'nr_blocks' [ 1041.807368][T12169] binder: 12167:12169 ioctl 40189206 200000000340 returned -22 [ 1042.342197][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1044.373828][T12194] loop1: detected capacity change from 0 to 4096 [ 1044.428237][T12194] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1044.463058][T12194] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1044.487786][T12194] System zones: 0-5 [ 1044.504338][T12194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.915179][ T5923] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 1045.220359][ T5923] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1045.271425][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.330121][ T5923] usb 3-1: Product: syz [ 1045.334384][ T5923] usb 3-1: Manufacturer: syz [ 1045.374844][ T5923] usb 3-1: SerialNumber: syz [ 1045.417249][ T5923] usb 3-1: config 0 descriptor?? [ 1045.482650][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.492664][T12206] tipc: Enabled bearer , priority 0 [ 1045.512064][T12206] syzkaller0: entered promiscuous mode [ 1045.518026][T12206] syzkaller0: entered allmulticast mode [ 1045.641607][T12206] tipc: Resetting bearer [ 1045.672143][T12205] tipc: Resetting bearer [ 1045.688759][ T5923] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1045.761822][T12205] tipc: Disabling bearer [ 1046.307421][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1046.897870][T12215] Cannot find add_set index 0 as target [ 1047.790613][ T5923] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 1047.814462][ T5923] usb 3-1: USB disconnect, device number 21 [ 1047.831104][T11961] udevd[11961]: setting owner of /dev/bus/usb/003/021 to uid=0, gid=0 failed: No such file or directory [ 1048.701980][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1053.039351][T12257] program syz.0.1614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.965938][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.973187][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.285962][T12284] Cannot find add_set index 0 as target [ 1057.616125][ T5779] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1058.005142][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 1058.060320][ T5779] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.072036][ T5779] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1058.162013][ T5779] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1058.172786][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.183962][ T5779] usb 3-1: Product: syz [ 1058.188707][ T5779] usb 3-1: Manufacturer: syz [ 1058.193498][ T5779] usb 3-1: SerialNumber: syz [ 1058.208213][ T5779] usb 3-1: config 0 descriptor?? [ 1059.480560][T12304] Invalid ELF section header size [ 1060.321925][ T8] usb 3-1: USB disconnect, device number 22 [ 1061.175204][T12320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1628'. [ 1061.226738][T12320] netlink: set zone limit has 8 unknown bytes [ 1061.362908][T12320] syz.1.1628 (12320): drop_caches: 2 [ 1064.190903][T12341] Cannot find add_set index 0 as target [ 1064.268588][T12342] Invalid ELF header magic: != ELF [ 1065.239846][T12343] program syz.3.1635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.895118][T12345] Invalid ELF section header size [ 1066.487748][ T28] audit: type=1800 audit(1760476615.582:37): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1639" name="bus" dev="overlay" ino=2338 res=0 errno=0 [ 1066.497676][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1067.045119][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 1067.102382][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.200985][ T5779] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1067.222062][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1067.420003][ T8] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1067.492833][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.510111][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.589276][ T8] usb 2-1: Product: syz [ 1067.602994][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.631609][ T8] usb 2-1: Manufacturer: syz [ 1067.656317][ T8] usb 2-1: SerialNumber: syz [ 1067.691706][ T5779] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1067.779396][ T8] usb 2-1: config 0 descriptor?? [ 1067.788428][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.907921][ T5779] usb 4-1: config 0 descriptor?? [ 1069.205881][ T5779] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1069.240847][ T5779] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1069.288614][ T5779] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1069.297386][T10111] usb 2-1: USB disconnect, device number 21 [ 1069.429331][ T5779] cp2112 0003:10C4:EA90.000D: error requesting version [ 1069.467629][ T5779] cp2112: probe of 0003:10C4:EA90.000D failed with error -32 [ 1070.742476][ T5876] usb 4-1: USB disconnect, device number 18 [ 1070.982165][T12384] Invalid ELF section header size [ 1071.818248][ T28] audit: type=1800 audit(1760476620.912:38): pid=12391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1645" name="bus" dev="overlay" ino=2358 res=0 errno=0 [ 1074.770374][T12399] Invalid ELF header magic: != ELF [ 1075.258655][T12400] program syz.2.1650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1075.561473][T12402] tmpfs: Bad value for 'nr_blocks' [ 1079.094019][T12428] Invalid ELF section header size [ 1079.298759][T12429] Invalid ELF header magic: != ELF [ 1079.704880][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1080.481814][T12429] program syz.0.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1081.324534][T12451] tmpfs: Bad value for 'nr_blocks' [ 1081.844935][ T5838] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1082.881813][ T5838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1082.986979][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.032970][ T5838] usb 4-1: Product: syz [ 1083.045030][ T5838] usb 4-1: Manufacturer: syz [ 1083.053276][ T5838] usb 4-1: SerialNumber: syz [ 1083.083442][ T5838] usb 4-1: config 0 descriptor?? [ 1083.411873][ T5838] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1084.524881][T10111] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1084.744493][T10111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.761202][T10111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.772659][T10111] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1084.785359][T10111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.975634][T10111] usb 2-1: config 0 descriptor?? [ 1085.661964][T10111] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1085.684227][T10111] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1085.725257][T10111] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1085.773264][ T5838] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 1085.803410][ T5838] usb 4-1: USB disconnect, device number 19 [ 1085.860936][T10111] cp2112 0003:10C4:EA90.000E: error requesting version [ 1085.887029][T10111] cp2112: probe of 0003:10C4:EA90.000E failed with error -32 [ 1086.092489][T12495] tmpfs: Bad value for 'nr_blocks' [ 1087.358256][ T5838] usb 2-1: USB disconnect, device number 22 [ 1087.440778][T12514] tmpfs: Bad value for 'nr_blocks' [ 1088.587668][T12516] binder: 12513:12516 ioctl 40189206 200000000340 returned -22 [ 1089.435518][ T28] audit: type=1800 audit(1760476638.472:39): pid=12527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1680" name="bus" dev="overlay" ino=2180 res=0 errno=0 [ 1096.305265][ T5923] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1096.738706][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 1096.782271][ T5923] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1096.830952][ T5923] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1097.054902][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.072525][ T5923] usb 1-1: Product: syz [ 1097.103006][ T5923] usb 1-1: Manufacturer: syz [ 1097.138416][ T5923] usb 1-1: SerialNumber: syz [ 1097.167095][ T5923] usb 1-1: config 0 descriptor?? [ 1097.329775][T12559] Invalid ELF section header size [ 1098.080902][T12559] program syz.1.1690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1099.605426][ T787] usb 1-1: USB disconnect, device number 15 [ 1100.856195][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1102.157081][T12599] kvm: pic: non byte write [ 1102.465510][ T5923] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1102.685530][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 1102.720938][ T5923] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1102.753264][ T5923] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1102.763799][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.772922][ T5923] usb 1-1: Product: syz [ 1102.777755][ T5923] usb 1-1: Manufacturer: syz [ 1102.782856][ T5923] usb 1-1: SerialNumber: syz [ 1103.292570][T12608] Invalid ELF section header size [ 1103.396680][T12609] program syz.1.1702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.064903][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1104.990160][ T5923] usb 1-1: USB disconnect, device number 16 [ 1105.195366][ T5838] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1105.405093][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 1105.427499][ T5838] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1105.448161][ T5838] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1105.477116][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.501831][ T5838] usb 2-1: Product: syz [ 1105.512165][ T5838] usb 2-1: Manufacturer: syz [ 1105.521757][ T5838] usb 2-1: SerialNumber: syz [ 1105.545814][ T5838] usb 2-1: config 0 descriptor?? [ 1106.175174][ T5876] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1106.604898][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 1106.620055][ T5876] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1106.633217][ T5876] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1107.001162][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.010212][ T5876] usb 1-1: Product: syz [ 1107.014445][ T5876] usb 1-1: Manufacturer: syz [ 1107.019340][ T5876] usb 1-1: SerialNumber: syz [ 1108.190940][ T787] usb 2-1: USB disconnect, device number 23 [ 1109.201939][T12651] Cannot find add_set index 0 as target [ 1110.128400][ T5876] usb 1-1: USB disconnect, device number 17 [ 1110.694916][ T5876] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1110.884868][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 1110.903792][ T5876] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1110.913399][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.922894][ T5876] usb 1-1: Product: syz [ 1110.928002][ T5876] usb 1-1: Manufacturer: syz [ 1110.932959][ T5876] usb 1-1: SerialNumber: syz [ 1110.953556][ T5876] usb 1-1: config 0 descriptor?? [ 1110.978988][ T5876] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1111.985916][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1112.031720][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1112.134276][T12666] Invalid ELF section header size [ 1112.809922][ T5876] gspca_topro: reg_r err -32 [ 1112.814590][ T5876] gspca_topro: Sensor soi763a [ 1113.100272][ T787] usb 1-1: USB disconnect, device number 18 [ 1115.165528][ T5876] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1115.827294][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 1115.885524][ T5876] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1115.994958][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.009919][ T5876] usb 3-1: Product: syz [ 1116.014646][ T5876] usb 3-1: Manufacturer: syz [ 1116.060195][ T5876] usb 3-1: SerialNumber: syz [ 1116.867089][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.873702][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.358617][ T5876] usb 3-1: config 0 descriptor?? [ 1117.387121][ T5876] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1118.206067][ T5876] gspca_topro: reg_w err -110 [ 1118.278175][ T5876] gspca_topro: Sensor soi763a [ 1118.722539][T12704] Invalid ELF section header size [ 1119.006996][T12710] Cannot find add_set index 0 as target [ 1120.279504][ T5838] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1120.350411][ T787] usb 3-1: USB disconnect, device number 23 [ 1120.710364][ T5838] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1120.720124][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.729518][ T5838] usb 2-1: Product: syz [ 1120.734334][ T5838] usb 2-1: Manufacturer: syz [ 1120.741453][ T5838] usb 2-1: SerialNumber: syz [ 1120.754426][ T5838] usb 2-1: config 0 descriptor?? [ 1121.008986][ T5838] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1123.033556][ T5838] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 1123.106634][ T5838] usb 2-1: USB disconnect, device number 24 [ 1123.244295][T12739] loop3: detected capacity change from 0 to 4096 [ 1124.108457][T12739] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1124.190461][T12739] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1124.199069][T12739] System zones: 0-5 [ 1124.219247][T12739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1125.581079][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.150353][T12740] loop2: detected capacity change from 0 to 40427 [ 1126.161552][T12740] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1126.177394][T12740] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1126.191138][T12740] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 1126.424499][ T28] audit: type=1800 audit(1760476675.512:40): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1737" name="bus" dev="overlay" ino=2271 res=0 errno=0 [ 1130.768026][T12781] tmpfs: Bad value for 'nr_blocks' [ 1131.806130][T12782] loop0: detected capacity change from 0 to 4096 [ 1131.820893][T12785] binder: 12779:12785 ioctl 40189206 200000000340 returned -22 [ 1131.919453][T12782] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1131.947218][T12782] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1132.025838][T12782] System zones: 0-5 [ 1132.074626][T12782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.095924][ T5876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1132.524960][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 1132.864301][ T5876] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1132.894551][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.132288][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.142041][ T5876] usb 2-1: Product: syz [ 1133.167979][ T5876] usb 2-1: Manufacturer: syz [ 1133.216758][ T5876] usb 2-1: SerialNumber: syz [ 1133.320973][ T5876] usb 2-1: config 0 descriptor?? [ 1133.413955][ T5876] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1134.975513][ T28] audit: type=1800 audit(1760476684.072:41): pid=12813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1749" name="bus" dev="overlay" ino=2300 res=0 errno=0 [ 1135.415020][ T5876] gspca_topro: reg_r err -110 [ 1136.568973][ T5876] gspca_topro: Sensor soi763a [ 1137.881850][ T28] audit: type=1800 audit(1760476686.962:42): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1750" name="bus" dev="overlay" ino=2335 res=0 errno=0 [ 1138.681120][ T5839] usb 2-1: USB disconnect, device number 25 [ 1139.536506][T12821] Invalid ELF section header size [ 1142.006824][T12821] program syz.1.1752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1142.884898][ T787] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1143.219307][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 1143.274620][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.357490][ T787] usb 2-1: config 0 has no interfaces? [ 1143.417141][ T787] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1143.429956][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.495075][ T787] usb 2-1: Product: syz [ 1143.510821][ T787] usb 2-1: Manufacturer: syz [ 1143.524884][ T787] usb 2-1: SerialNumber: syz [ 1143.546318][ T787] usb 2-1: config 0 descriptor?? [ 1143.569983][T12839] loop0: detected capacity change from 0 to 4096 [ 1143.906576][T12839] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1144.142845][T12839] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1144.228081][T12713] usb 2-1: USB disconnect, device number 26 [ 1144.254177][T12839] System zones: 0-5 [ 1144.311645][T12839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.629560][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.203138][T12853] loop2: detected capacity change from 0 to 40427 [ 1146.221540][T12853] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1146.245058][T12853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1146.272935][T12853] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1146.424148][T12853] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1146.435016][T12853] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1147.744988][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1147.896624][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1147.904365][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1147.945717][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1148.096851][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1148.104662][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1148.595656][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1148.950330][ T5796] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 1152.307423][T12713] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1152.545289][T12713] usb 2-1: Using ep0 maxpacket: 16 [ 1152.669631][T12713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.854267][T12713] usb 2-1: config 0 has no interfaces? [ 1152.880960][T12713] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1152.914312][T12713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.954755][T12713] usb 2-1: Product: syz [ 1152.959435][T12713] usb 2-1: Manufacturer: syz [ 1152.967944][T12713] usb 2-1: SerialNumber: syz [ 1152.984092][T12713] usb 2-1: config 0 descriptor?? [ 1153.297101][T12805] usb 2-1: USB disconnect, device number 27 [ 1153.505868][ T28] audit: type=1800 audit(1760476702.602:43): pid=12923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1773" name="bus" dev="overlay" ino=2541 res=0 errno=0 [ 1155.009368][ T5104] Bluetooth: hci0: command 0x0401 tx timeout [ 1162.415159][T12805] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1162.444913][ T5846] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1162.614873][T12805] usb 3-1: Using ep0 maxpacket: 16 [ 1162.632704][T12805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.648819][T12805] usb 3-1: config 0 has no interfaces? [ 1162.655033][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 1162.663018][ T5846] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1162.678925][T12805] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1162.691391][ T5846] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1162.701197][T12805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.711169][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.721391][T12805] usb 3-1: Product: syz [ 1162.743868][T12805] usb 3-1: Manufacturer: syz [ 1162.751943][ T5846] usb 2-1: Product: syz [ 1162.760467][ T5846] usb 2-1: Manufacturer: syz [ 1162.765695][T12805] usb 3-1: SerialNumber: syz [ 1162.771847][ T5846] usb 2-1: SerialNumber: syz [ 1162.778491][T12805] usb 3-1: config 0 descriptor?? [ 1164.180356][T12713] usb 3-1: USB disconnect, device number 24 [ 1166.573266][ T5846] usb 2-1: USB disconnect, device number 28 [ 1168.435456][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1169.769303][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 1170.806396][T13023] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1797'. [ 1171.615017][ T5839] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1172.015009][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 1172.059533][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.094963][ T5839] usb 4-1: config 0 has no interfaces? [ 1172.127976][ T5839] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1172.228490][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.314112][ T5839] usb 4-1: Product: syz [ 1172.340579][ T5839] usb 4-1: Manufacturer: syz [ 1172.365722][ T5839] usb 4-1: SerialNumber: syz [ 1172.436695][ T5839] usb 4-1: config 0 descriptor?? [ 1172.665726][T13037] Cannot find add_set index 0 as target [ 1173.511436][ T5839] usb 4-1: USB disconnect, device number 20 [ 1176.569791][T13060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1806'. [ 1177.828620][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.835612][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.842117][T10288] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1180.001233][T10288] usb 2-1: Using ep0 maxpacket: 16 [ 1180.162027][T10288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.173154][T10288] usb 2-1: config 0 has no interfaces? [ 1180.369422][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1181.092103][T10288] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1181.135432][T10288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.148285][T10288] usb 2-1: config 0 descriptor?? [ 1181.172100][T10288] usb 2-1: can't set config #0, error -71 [ 1181.710360][T10288] usb 2-1: USB disconnect, device number 29 [ 1182.804841][T10288] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1182.818665][ T28] audit: type=1800 audit(1760476731.912:44): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1815" name="bus" dev="overlay" ino=2394 res=0 errno=0 [ 1185.378665][T10288] usb 2-1: Using ep0 maxpacket: 8 [ 1186.165160][T10288] usb 2-1: device descriptor read/all, error -71 [ 1186.242305][T13097] tmpfs: Bad value for 'nr_blocks' [ 1186.401060][T13098] binder: 13095:13098 ioctl 40189206 200000000340 returned -22 [ 1188.388578][T13102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1819'. [ 1189.003216][ T5839] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1189.395089][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 1189.404846][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.564810][T10288] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1190.377764][ T5839] usb 1-1: config 0 has no interfaces? [ 1190.409960][ T5839] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1190.430352][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.447343][ T5839] usb 1-1: Product: syz [ 1190.459627][ T5839] usb 1-1: Manufacturer: syz [ 1190.464431][ T5839] usb 1-1: SerialNumber: syz [ 1190.472742][ T5839] usb 1-1: config 0 descriptor?? [ 1190.574790][T10288] usb 3-1: Using ep0 maxpacket: 8 [ 1190.584014][T10288] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1190.597651][T10288] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1190.607387][T10288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.624823][T10288] usb 3-1: Product: syz [ 1190.629390][T10288] usb 3-1: Manufacturer: syz [ 1190.634033][T10288] usb 3-1: SerialNumber: syz [ 1190.823914][T10111] usb 1-1: USB disconnect, device number 19 [ 1193.394889][T12805] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1193.607546][T12805] usb 1-1: Using ep0 maxpacket: 16 [ 1193.663130][T12805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.729937][T12805] usb 1-1: config 0 has no interfaces? [ 1193.743327][T12805] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1193.796875][T12805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.845177][T10288] usb 3-1: USB disconnect, device number 25 [ 1193.892488][T12805] usb 1-1: Product: syz [ 1193.918449][T12805] usb 1-1: Manufacturer: syz [ 1193.923325][T12805] usb 1-1: SerialNumber: syz [ 1194.141612][T12805] usb 1-1: config 0 descriptor?? [ 1195.229885][T12805] usb 1-1: USB disconnect, device number 20 [ 1197.334915][ T787] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1197.874841][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 1197.882280][ T787] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1197.907860][ T787] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1197.933437][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.968300][ T787] usb 3-1: Product: syz [ 1197.973000][ T787] usb 3-1: Manufacturer: syz [ 1198.019344][ T787] usb 3-1: SerialNumber: syz [ 1198.140881][T13169] tmpfs: Bad value for 'nr_blocks' [ 1198.434959][T12805] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1198.645124][T12805] usb 1-1: Using ep0 maxpacket: 32 [ 1198.709752][T13171] binder: 13168:13171 ioctl 40189206 200000000340 returned -22 [ 1198.870153][T12805] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1198.929609][T12805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.262388][T12805] usb 1-1: Product: syz [ 1199.649437][T12805] usb 1-1: Manufacturer: syz [ 1199.698854][T12805] usb 1-1: SerialNumber: syz [ 1201.992556][T12805] usb 1-1: config 0 descriptor?? [ 1202.106603][T12805] usb 1-1: can't set config #0, error -71 [ 1202.154423][T12805] usb 1-1: USB disconnect, device number 21 [ 1202.735065][T12805] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1203.244768][T10288] usb 3-1: USB disconnect, device number 26 [ 1203.248564][T12805] usb 1-1: Using ep0 maxpacket: 16 [ 1203.305188][T13075] udevd[13075]: setting owner of /dev/bus/usb/003/026 to uid=0, gid=0 failed: No such file or directory [ 1203.312152][T12805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.345536][T12805] usb 1-1: config 0 has no interfaces? [ 1203.358017][T12805] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1203.367769][T12805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.388036][T12805] usb 1-1: Product: syz [ 1203.392366][T12805] usb 1-1: Manufacturer: syz [ 1203.450246][T12805] usb 1-1: SerialNumber: syz [ 1203.469373][T12805] usb 1-1: config 0 descriptor?? [ 1203.743200][T13184] fuse: Unknown parameter 'grou00000000000000000000' [ 1204.226058][T10288] usb 1-1: USB disconnect, device number 22 [ 1206.258247][ T28] audit: type=1800 audit(1760476755.352:45): pid=13210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1847" name="bus" dev="overlay" ino=2450 res=0 errno=0 [ 1209.166567][ T28] audit: type=1800 audit(1760476758.252:46): pid=13224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1851" name="bus" dev="overlay" ino=2465 res=0 errno=0 [ 1212.678778][T10288] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1212.907658][T10288] usb 3-1: Using ep0 maxpacket: 16 [ 1213.201983][T10288] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.239492][T10288] usb 3-1: config 0 has no interfaces? [ 1213.270735][T13248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1858'. [ 1213.280382][T10288] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1213.383908][T10288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.508191][T10288] usb 3-1: Product: syz [ 1213.675589][T10288] usb 3-1: Manufacturer: syz [ 1213.738493][T10288] usb 3-1: SerialNumber: syz [ 1213.803682][T10288] usb 3-1: config 0 descriptor?? [ 1214.123633][ T5876] usb 3-1: USB disconnect, device number 27 [ 1215.372332][T13265] loop2: detected capacity change from 0 to 4096 [ 1215.584183][T13265] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1215.961122][T13265] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1216.113291][T13265] System zones: 0-5 [ 1216.253245][T13265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1217.726646][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.225248][T10288] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1218.256833][T13286] Cannot find add_set index 0 as target [ 1219.044998][T10288] usb 3-1: Using ep0 maxpacket: 32 [ 1219.056596][T10288] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1219.074934][T10288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.083095][T10288] usb 3-1: Product: syz [ 1219.099612][T10288] usb 3-1: Manufacturer: syz [ 1219.105712][T10288] usb 3-1: SerialNumber: syz [ 1219.116480][T10288] usb 3-1: config 0 descriptor?? [ 1219.148012][T10288] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1220.829546][T10288] gspca_topro: Sensor cx0342 [ 1221.140690][T10288] usb 3-1: USB disconnect, device number 28 [ 1223.685084][T12805] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1223.910624][T12805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.937093][T12805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.960118][T12805] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1223.993788][T12805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.026660][T12805] usb 4-1: config 0 descriptor?? [ 1224.286492][ T5839] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1224.489167][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 1224.495420][T12805] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1224.497486][ T5839] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1224.502492][T12805] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1224.532545][ T5839] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1224.546812][T12805] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1224.552365][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.584854][ T5839] usb 3-1: Product: syz [ 1224.599995][ T5839] usb 3-1: Manufacturer: syz [ 1224.614763][ T5839] usb 3-1: SerialNumber: syz [ 1224.686046][T12805] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 1224.887908][T12805] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 1227.181933][T12805] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 1228.938619][ T5839] usb 3-1: USB disconnect, device number 29 [ 1229.148088][T12805] usb 4-1: USB disconnect, device number 21 [ 1233.109390][T13354] loop1: detected capacity change from 0 to 4096 [ 1234.114607][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1234.147683][T13354] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1234.202051][T13354] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1234.234910][T13354] System zones: 0-5 [ 1234.309989][T13354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.010987][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.283269][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.290155][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.297997][ T28] audit: type=1800 audit(1760476788.392:47): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1890" name="bus" dev="overlay" ino=2407 res=0 errno=0 [ 1240.342484][ T5846] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1240.561717][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1240.595856][ T28] audit: type=1800 audit(1760476789.642:48): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1894" name="bus" dev="overlay" ino=2421 res=0 errno=0 [ 1240.743929][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.866383][ T5846] usb 3-1: config 0 has no interfaces? [ 1243.418320][ T5846] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1243.470176][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.485963][ T5846] usb 3-1: Product: syz [ 1243.490714][ T5846] usb 3-1: Manufacturer: syz [ 1243.503540][ T5846] usb 3-1: SerialNumber: syz [ 1243.581198][ T5846] usb 3-1: config 0 descriptor?? [ 1244.064193][ T5846] usb 3-1: can't set config #0, error -71 [ 1244.085662][ T5846] usb 3-1: USB disconnect, device number 30 [ 1244.857680][T13410] loop0: detected capacity change from 0 to 4096 [ 1244.938796][T13410] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1244.972882][T13410] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1244.995901][T13410] System zones: 0-5 [ 1245.122433][T13410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.221382][ T28] audit: type=1800 audit(1760476794.312:49): pid=13418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1898" name="bus" dev="overlay" ino=2435 res=0 errno=0 [ 1247.165457][T10288] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1247.455075][T10288] usb 3-1: Using ep0 maxpacket: 8 [ 1247.580942][T10288] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1247.806358][T10288] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1247.903084][T10288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.013457][T10288] usb 3-1: Product: syz [ 1248.073029][T10288] usb 3-1: Manufacturer: syz [ 1248.142665][T10288] usb 3-1: SerialNumber: syz [ 1249.413642][T10288] usb 3-1: USB disconnect, device number 31 [ 1249.700313][T13429] Invalid ELF section header size [ 1251.194758][ T28] audit: type=1800 audit(1760476800.272:50): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1903" name="bus" dev="overlay" ino=2454 res=0 errno=0 [ 1251.360800][T13429] program syz.3.1902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1252.085255][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.384882][ T5846] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 1255.651094][ T5846] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1255.661794][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.672883][ T5846] usb 2-1: Product: syz [ 1255.679817][ T5846] usb 2-1: Manufacturer: syz [ 1255.716931][ T5846] usb 2-1: SerialNumber: syz [ 1255.760972][ T5846] usb 2-1: config 0 descriptor?? [ 1255.998519][ T5846] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1257.036601][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1257.116857][ T5846] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 1258.024178][T13490] Invalid ELF section header size [ 1259.196392][ T5838] usb 2-1: USB disconnect, device number 32 [ 1264.167703][T13521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'. [ 1266.999744][T13552] loop1: detected capacity change from 0 to 4096 [ 1267.045738][T13552] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1267.071881][T13552] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1267.096526][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1267.181552][T13552] System zones: 0-5 [ 1267.253129][T13552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.996306][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.550311][T13569] Invalid ELF section header size [ 1273.666924][T13597] loop1: detected capacity change from 0 to 4096 [ 1273.711949][T13597] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1273.744818][T13597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1273.785590][T13597] System zones: 0-5 [ 1273.802175][T13597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.098236][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.129617][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1275.583557][T13612] Invalid ELF section header size [ 1275.674905][T10111] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1275.884901][T10111] usb 2-1: Using ep0 maxpacket: 16 [ 1275.903865][T10111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.931176][T10111] usb 2-1: config 0 has no interfaces? [ 1275.951558][T10111] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1275.969148][T10111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.981674][T10111] usb 2-1: Product: syz [ 1275.991393][T10111] usb 2-1: Manufacturer: syz [ 1275.999188][T10111] usb 2-1: SerialNumber: syz [ 1276.050734][T10111] usb 2-1: config 0 descriptor?? [ 1276.438651][T10111] usb 2-1: USB disconnect, device number 33 [ 1278.160664][T13631] kvm: pic: non byte write [ 1278.183816][T13633] Cannot find add_set index 0 as target [ 1279.898848][T13646] loop1: detected capacity change from 0 to 4096 [ 1279.969020][T13646] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1280.002296][T13646] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1280.052972][T13646] System zones: 0-5 [ 1280.086345][T13646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.114034][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.873761][T13673] Invalid ELF section header size [ 1285.975811][T13688] kvm: pic: non byte write [ 1287.972868][T13700] Cannot find add_set index 0 as target [ 1290.068669][T13714] loop3: detected capacity change from 0 to 4096 [ 1290.126245][T13714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1290.160575][T13714] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1290.210756][T13714] System zones: 0-5 [ 1290.406513][T13714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.952662][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1292.255133][ T5876] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1292.484834][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 1292.519474][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.530594][ T5876] usb 2-1: config 0 has no interfaces? [ 1292.560969][ T5876] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1292.572521][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.587218][ T5876] usb 2-1: Product: syz [ 1292.592082][ T5876] usb 2-1: Manufacturer: syz [ 1292.602054][ T5876] usb 2-1: SerialNumber: syz [ 1292.673422][ T5876] usb 2-1: config 0 descriptor?? [ 1292.956914][T13736] Invalid ELF section header size [ 1292.997246][ T5846] usb 2-1: USB disconnect, device number 34 [ 1295.097934][T13758] Cannot find add_set index 0 as target [ 1297.900337][T13774] binder: BINDER_SET_CONTEXT_MGR already set [ 1297.909638][T13774] binder: 13773:13774 ioctl 4018620d 200000000040 returned -16 [ 1299.574780][ T5846] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1299.772823][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 1299.787127][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.814718][ T5846] usb 1-1: config 0 has no interfaces? [ 1299.827722][ T5846] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1299.848139][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.867574][ T5846] usb 1-1: Product: syz [ 1299.872889][ T5846] usb 1-1: Manufacturer: syz [ 1299.889312][ T5846] usb 1-1: SerialNumber: syz [ 1299.915328][ T5846] usb 1-1: config 0 descriptor?? [ 1300.336477][T10111] usb 1-1: USB disconnect, device number 23 [ 1300.729337][T13805] Cannot find add_set index 0 as target [ 1300.798826][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.807563][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.550394][T13810] Invalid ELF section header size [ 1303.234794][T13824] binder: BINDER_SET_CONTEXT_MGR already set [ 1303.241744][T13824] binder: 13823:13824 ioctl 4018620d 200000000040 returned -16 [ 1305.175012][ T5846] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1305.361355][T13829] loop2: detected capacity change from 0 to 40427 [ 1305.398334][T13829] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1305.407552][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1305.438218][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.450359][T13829] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1305.490367][ T5846] usb 2-1: config 0 has no interfaces? [ 1305.514212][ T5846] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1305.538538][T13829] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1305.556316][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.611624][ T5846] usb 2-1: Product: syz [ 1305.624945][ T5846] usb 2-1: Manufacturer: syz [ 1305.648123][ T5846] usb 2-1: SerialNumber: syz [ 1305.673794][ T5846] usb 2-1: config 0 descriptor?? [ 1305.726367][T13829] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1305.743879][T13829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1307.707014][T10288] usb 2-1: USB disconnect, device number 35 [ 1308.556208][T13872] Cannot find add_set index 0 as target [ 1309.376396][T13873] Invalid ELF section header size [ 1312.394824][T12713] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1312.894791][T12713] usb 4-1: Using ep0 maxpacket: 16 [ 1312.902703][T12713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.952990][T12713] usb 4-1: config 0 has no interfaces? [ 1312.964698][T12713] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1312.975924][T12713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.987115][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1312.987378][T12713] usb 4-1: Product: syz [ 1313.170355][T12713] usb 4-1: Manufacturer: syz [ 1313.232287][T12713] usb 4-1: SerialNumber: syz [ 1313.335546][T12713] usb 4-1: config 0 descriptor?? [ 1313.488822][T13913] Invalid ELF section header size [ 1313.734315][T13897] loop0: detected capacity change from 0 to 40427 [ 1313.749118][T13897] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1313.790866][T13897] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1313.815831][ T5846] usb 4-1: USB disconnect, device number 22 [ 1313.903186][T13897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1315.755339][T13938] Cannot find add_set index 0 as target [ 1318.818656][ T5104] Bluetooth: hci1: unexpected event for opcode 0x202d [ 1319.637246][T13970] tmpfs: Bad value for 'nr_blocks' [ 1322.796955][T13981] loop3: detected capacity change from 0 to 40427 [ 1322.835090][T13981] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1322.859511][T13981] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1322.934961][T13981] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1323.137461][T13981] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1323.206724][T13981] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1323.299758][T14002] Cannot find add_set index 0 as target [ 1325.381961][T14008] kvm: pic: non byte write [ 1325.676791][T14014] tmpfs: Bad value for 'nr_blocks' [ 1328.294172][T14040] loop2: detected capacity change from 0 to 4096 [ 1328.326228][T14040] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1328.340542][T14040] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1328.355414][T14040] System zones: 0-5 [ 1328.406783][T14040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.607018][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.551140][T14053] loop3: detected capacity change from 0 to 40427 [ 1330.607777][T14053] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1330.679120][T14053] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1330.769235][T14053] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1330.946285][T14053] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1330.966689][T14065] kvm: pic: non byte write [ 1330.983270][T14053] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1332.025791][T14073] Cannot find add_set index 0 as target [ 1335.087433][ T5846] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1335.165350][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1335.404859][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1335.427445][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.448423][ T5846] usb 2-1: config 0 has no interfaces? [ 1335.462109][ T5846] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1335.480457][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.489495][ T5846] usb 2-1: Product: syz [ 1335.494358][ T5846] usb 2-1: Manufacturer: syz [ 1335.499698][ T5846] usb 2-1: SerialNumber: syz [ 1335.512894][ T5846] usb 2-1: config 0 descriptor?? [ 1335.904107][ T5846] usb 2-1: USB disconnect, device number 36 [ 1338.873774][T14122] loop2: detected capacity change from 0 to 40427 [ 1338.949393][T14122] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1338.967009][T14122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1339.013836][T14122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1339.213564][T14122] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1339.243073][T14122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1339.414335][T14149] tmpfs: Bad value for 'nr_blocks' [ 1340.256534][T14155] overlayfs: missing 'lowerdir' [ 1341.285031][T10111] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1341.535026][T10111] usb 2-1: Using ep0 maxpacket: 16 [ 1341.602753][T10111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.739309][T10111] usb 2-1: config 0 has no interfaces? [ 1341.941171][T10111] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1342.081449][T10111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.168332][T10111] usb 2-1: Product: syz [ 1342.204977][T10111] usb 2-1: Manufacturer: syz [ 1342.228889][T10111] usb 2-1: SerialNumber: syz [ 1342.308399][T10111] usb 2-1: config 0 descriptor?? [ 1343.329946][ T5838] usb 2-1: USB disconnect, device number 37 [ 1345.851990][T14208] tmpfs: Bad value for 'nr_blocks' [ 1348.066877][ T5838] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1348.197370][T14236] loop3: detected capacity change from 0 to 4096 [ 1348.298071][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 1348.373053][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.438054][T14236] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1348.507034][T14236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1348.511508][ T5838] usb 2-1: config 0 has no interfaces? [ 1348.523849][T14236] System zones: 0-5 [ 1348.531149][ T5838] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1348.541453][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.555006][ T5838] usb 2-1: Product: syz [ 1348.559782][ T5838] usb 2-1: Manufacturer: syz [ 1348.567100][ T5838] usb 2-1: SerialNumber: syz [ 1348.588091][ T5838] usb 2-1: config 0 descriptor?? [ 1348.605664][T14236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.440574][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.479897][T10111] usb 2-1: USB disconnect, device number 38 [ 1356.428015][T14290] loop2: detected capacity change from 0 to 4096 [ 1356.438772][T14290] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1356.466573][T14290] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1356.488640][T14290] System zones: 0-5 [ 1356.510642][T14290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.688955][T14300] kvm: pic: non byte write [ 1358.341804][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.652323][T14325] loop2: detected capacity change from 0 to 40427 [ 1361.674706][T14325] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1361.682744][T14325] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1361.733036][T14325] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1362.161556][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.168101][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.181922][T14325] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1362.210742][T14325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1363.362502][T14325] overlayfs: missing 'lowerdir' [ 1367.320324][T14384] loop2: detected capacity change from 0 to 4096 [ 1367.489536][T14384] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1367.558360][T14384] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1367.604837][T14384] System zones: 0-5 [ 1367.624446][T14384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1369.037123][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1369.240205][T14382] loop0: detected capacity change from 0 to 40427 [ 1369.257045][T14382] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1369.273169][T14382] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1369.452241][T14382] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1369.726127][T14382] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1369.733453][T14382] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1370.336927][T14412] overlayfs: missing 'lowerdir' [ 1376.933175][T14463] kvm: pic: non byte write [ 1377.323192][T14450] loop2: detected capacity change from 0 to 40427 [ 1377.384910][T14450] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1377.427185][T14450] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1377.690148][T14450] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1379.290184][T14482] binder: 14481:14482 ioctl 4018620d 0 returned -22 [ 1384.201102][ T28] audit: type=1800 audit(1760476933.292:51): pid=14524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2158" name="bus" dev="overlay" ino=2861 res=0 errno=0 [ 1388.978725][T14538] tmpfs: Bad value for 'nr_blocks' [ 1389.842789][T14538] binder: 14537:14538 ioctl 4018620d 0 returned -22 [ 1389.986311][T14528] loop0: detected capacity change from 0 to 40427 [ 1390.016342][T14528] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1390.034787][T14528] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1390.080677][T14528] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1390.238984][T14528] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1390.336917][T14528] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1395.021346][T14599] tmpfs: Bad value for 'nr_blocks' [ 1395.175496][T14600] binder: 14598:14600 ioctl 4018620d 0 returned -22 [ 1397.085783][T14594] loop1: detected capacity change from 0 to 40427 [ 1397.126048][T14594] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1397.148823][T14594] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1397.317611][T14594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1400.907502][T14639] loop2: detected capacity change from 0 to 4096 [ 1400.933629][T14639] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1400.987293][T14639] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1401.032273][T14639] System zones: 0-5 [ 1401.079386][T14639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.950062][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.789160][T14669] loop2: detected capacity change from 0 to 40427 [ 1405.818481][T14669] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1405.854884][T14669] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1405.882386][T14679] kvm: pic: non byte write [ 1405.902624][T14669] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1406.068448][T14669] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1406.093443][T14669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1407.013466][T14669] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1407.023059][T14669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1411.996923][T14718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2204'. [ 1412.042422][T14718] netlink: set zone limit has 8 unknown bytes [ 1413.663052][T14734] loop2: detected capacity change from 0 to 4096 [ 1413.690984][T14734] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1413.896021][T14734] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1413.982181][T14734] System zones: 0-5 [ 1414.097516][T14734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1414.743067][T14748] binder: 14747:14748 ioctl c0306201 0 returned -14 [ 1415.549613][ T5796] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.372191][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1416.812143][T14763] tmpfs: Bad value for 'nr_blocks' [ 1418.172870][T14773] binder: 14772:14773 ioctl c0306201 0 returned -14 [ 1418.264817][ T5838] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1418.474914][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 1418.501133][ T5838] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1418.541119][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.606678][ T5838] usb 1-1: Product: syz [ 1418.611300][ T5838] usb 1-1: Manufacturer: syz [ 1418.618804][ T5838] usb 1-1: SerialNumber: syz [ 1418.701419][ T5838] usb 1-1: config 0 descriptor?? [ 1418.881612][ T5838] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1419.295231][T14784] loop3: detected capacity change from 0 to 4096 [ 1419.327860][T14784] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1419.361764][T14784] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1419.475068][T14784] System zones: 0-5 [ 1419.516987][T14784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.363550][ T5838] gspca_topro: reg_w err -110 [ 1421.464754][ T5838] gspca_topro: Sensor soi763a [ 1422.113561][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.122577][T10111] usb 1-1: USB disconnect, device number 24 [ 1423.306558][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1423.575099][T14816] binder: 14815:14816 ioctl c0306201 0 returned -14 [ 1423.599487][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.606787][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.139593][ T28] audit: type=1800 audit(1760476973.232:52): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2231" name="bus" dev="overlay" ino=2972 res=0 errno=0 [ 1428.378171][T14834] loop0: detected capacity change from 0 to 4096 [ 1428.444417][T14834] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1428.461681][T14834] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1428.485287][T14834] System zones: 0-5 [ 1428.497762][T14834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.959960][ T5923] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1430.093715][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.432475][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1431.258877][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.375213][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.404650][ T5923] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1431.449679][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.469084][ T5923] usb 4-1: config 0 descriptor?? [ 1431.514983][ T5923] usb 4-1: can't set config #0, error -71 [ 1431.533936][ T5923] usb 4-1: USB disconnect, device number 23 [ 1434.511050][T14866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'. [ 1435.658265][T14885] loop0: detected capacity change from 0 to 4096 [ 1435.684732][T14885] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1435.711071][T14885] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1435.761975][T14885] System zones: 0-5 [ 1435.992435][T14885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1439.114884][ T28] audit: type=1800 audit(1760476988.202:53): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2249" name="bus" dev="overlay" ino=2996 res=0 errno=0 [ 1441.930410][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.015438][ T5104] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1446.998178][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2258'. [ 1449.356330][ T5104] Bluetooth: hci3: unexpected event for opcode 0x202d [ 1453.012100][T14988] Invalid ELF section header size [ 1454.780050][T14987] program syz.3.2267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1459.116049][ T5923] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1459.255500][T15028] Invalid ELF section header size [ 1459.314688][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 1459.384725][ T5923] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1459.398426][ T5923] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1459.412159][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.544701][T15030] program syz.0.2278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1459.781039][ T5923] usb 4-1: Product: syz [ 1459.804736][ T5923] usb 4-1: Manufacturer: syz [ 1459.809599][ T5923] usb 4-1: SerialNumber: syz [ 1464.609343][ T5923] usb 4-1: USB disconnect, device number 24 [ 1467.720524][T15053] Invalid ELF section header size [ 1468.927993][T15060] program syz.3.2283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1471.240486][T15084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2289'. [ 1471.250220][T15084] netlink: set zone limit has 8 unknown bytes [ 1473.294380][T15094] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2291'. [ 1474.273762][ T5104] Bluetooth: hci2: unexpected event for opcode 0x202d [ 1475.114911][T14875] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1475.314791][T14875] usb 1-1: Using ep0 maxpacket: 8 [ 1475.335311][T14875] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1475.347205][T14875] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1475.364689][T14875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.387180][T14875] usb 1-1: Product: syz [ 1475.393882][T14875] usb 1-1: Manufacturer: syz [ 1475.404717][T14875] usb 1-1: SerialNumber: syz [ 1479.167205][T14875] usb 1-1: USB disconnect, device number 25 [ 1483.935716][T15117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2298'. [ 1484.287422][T15123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1484.301023][T15123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1484.310674][T15123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1484.323069][T15123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1484.331040][T15123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1484.340207][T15123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1485.265520][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.285336][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.396206][T15123] Bluetooth: hci4: command tx timeout [ 1486.802868][T15123] Bluetooth: hci0: unexpected event for opcode 0x202d [ 1487.414266][ T7008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.636949][ T7008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.712788][ T7008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.889790][ T7008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.131205][T15122] chnl_net:caif_netlink_parms(): no params data found [ 1488.369682][T15122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.394924][T15122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.402532][T15122] bridge_slave_0: entered allmulticast mode [ 1488.410654][T15122] bridge_slave_0: entered promiscuous mode [ 1488.421862][T15122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.429450][T15122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.441785][T15122] bridge_slave_1: entered allmulticast mode [ 1488.449314][T15122] bridge_slave_1: entered promiscuous mode [ 1488.626194][T15123] Bluetooth: hci4: command tx timeout [ 1488.722960][T15136] loop3: detected capacity change from 0 to 40427 [ 1488.725655][T15122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.750484][T15122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.854899][ T5846] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1489.055561][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1489.075829][ T5846] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1489.086555][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.104909][ T5846] usb 3-1: Product: syz [ 1489.122597][T15122] team0: Port device team_slave_0 added [ 1489.129810][ T5846] usb 3-1: Manufacturer: syz [ 1489.144400][ T5846] usb 3-1: SerialNumber: syz [ 1489.167807][ T5846] usb 3-1: config 0 descriptor?? [ 1489.173599][T15122] team0: Port device team_slave_1 added [ 1489.314991][ T5923] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1489.530906][ T28] audit: type=1800 audit(1760477038.542:54): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2307" name="bus" dev="overlay" ino=3051 res=0 errno=0 [ 1489.772082][ T5923] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1489.835988][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.907900][ T5923] usb 4-1: Product: syz [ 1489.945622][ T5923] usb 4-1: Manufacturer: syz [ 1489.987813][ T5923] usb 4-1: SerialNumber: syz [ 1490.158147][ T5846] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1490.181047][ T5923] usb 4-1: config 0 descriptor?? [ 1490.394717][T15122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.466468][T15150] Cannot find add_set index 0 as target [ 1490.493756][T15122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1490.563374][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1490.789246][ T5846] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1490.808796][ T5923] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1490.873969][T15123] Bluetooth: hci4: command tx timeout [ 1490.906042][ T5846] usb 3-1: media controller created [ 1490.927472][T15122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.137385][ T7008] tipc: Left network mode [ 1491.540590][T15122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.699880][T15122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1492.086817][T15122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.124110][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1492.210663][ T5923] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 1493.096531][ T5846] zl10353_read_register: readreg error (reg=127, ret==0) [ 1493.127589][T15123] Bluetooth: hci4: command tx timeout [ 1493.199625][ T5846] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1493.315140][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1493.347829][ T5846] usb 3-1: USB disconnect, device number 32 [ 1493.472664][ T5923] usb 4-1: USB disconnect, device number 25 [ 1493.672187][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1494.665047][ T5923] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1494.721820][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1494.931784][T15122] hsr_slave_0: entered promiscuous mode [ 1494.946869][T15122] hsr_slave_1: entered promiscuous mode [ 1494.969239][T15122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1494.979392][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.001576][T15122] Cannot create hsr debugfs directory [ 1495.014642][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.043101][ T5923] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1495.053491][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.104733][ T5923] usb 4-1: config 0 descriptor?? [ 1495.204679][ T5846] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1495.405300][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1495.429326][ T5846] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1495.466262][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.475573][ T5846] usb 3-1: Product: syz [ 1495.480574][ T5846] usb 3-1: Manufacturer: syz [ 1495.486664][ T5846] usb 3-1: SerialNumber: syz [ 1495.524699][ T5846] usb 3-1: config 0 descriptor?? [ 1495.573289][ T5923] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1495.595320][ T5923] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1495.638173][ T5923] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1495.760108][ T5923] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 1495.965662][ T5923] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 1495.997030][ T5923] cp2112: probe of 0003:10C4:EA90.0010 failed with error -5 [ 1496.016072][ T5846] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1496.068743][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1496.100271][ T5846] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1496.121695][ T5846] usb 3-1: media controller created [ 1496.207821][T15186] Cannot find add_set index 0 as target [ 1496.232104][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1496.796925][ T5846] zl10353_read_register: readreg error (reg=127, ret==0) [ 1496.805084][ T5846] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1496.813425][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1496.853939][ T5846] usb 3-1: USB disconnect, device number 33 [ 1497.249305][ T7008] hsr_slave_0: left promiscuous mode [ 1497.265555][ T7008] hsr_slave_1: left promiscuous mode [ 1497.284070][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.302994][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.313926][ T7008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.329028][ T7008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.338899][ T7008] bridge_slave_1: left allmulticast mode [ 1497.359873][ T7008] bridge_slave_1: left promiscuous mode [ 1497.385868][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.484662][ T7008] bridge_slave_0: left allmulticast mode [ 1497.507584][ T7008] bridge_slave_0: left promiscuous mode [ 1497.543817][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.354658][T12805] usb 4-1: USB disconnect, device number 26 [ 1498.364338][ T5846] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1498.470358][ T7008] veth1_macvtap: left promiscuous mode [ 1498.486918][ T7008] veth0_macvtap: left promiscuous mode [ 1498.492868][ T7008] veth1_vlan: left promiscuous mode [ 1498.552653][ T7008] veth0_vlan: left promiscuous mode [ 1498.769223][ T5838] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1498.805250][ T5846] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1499.005938][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 1499.020786][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 1499.033050][ T5846] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1499.067956][ T5846] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1499.090561][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.097852][ T5838] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1499.099818][ T5846] usb 3-1: Product: syz [ 1499.118080][ T5846] usb 3-1: Manufacturer: syz [ 1499.122964][ T5846] usb 3-1: SerialNumber: syz [ 1499.150090][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.223831][ T5838] usb 2-1: Product: syz [ 1499.273462][ T5838] usb 2-1: Manufacturer: syz [ 1499.293438][ T5838] usb 2-1: SerialNumber: syz [ 1499.336048][ T5838] usb 2-1: config 0 descriptor?? [ 1500.582187][ T5838] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1500.832799][T15201] Cannot find add_set index 0 as target [ 1503.469725][ T5838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1503.636019][ T5838] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1503.644286][ T5838] usb 2-1: media controller created [ 1503.655293][ T5846] usb 3-1: USB disconnect, device number 34 [ 1503.671085][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1503.735677][ T5838] zl10353_read_register: readreg error (reg=127, ret==0) [ 1503.743142][ T5838] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1503.751568][ T5838] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1503.797419][ T5838] usb 2-1: USB disconnect, device number 39 [ 1503.949421][ T5838] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1505.200247][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'. [ 1505.236385][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'. [ 1505.748328][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2321'. [ 1506.041965][ T28] audit: type=1800 audit(1760477055.132:55): pid=15232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2322" name="bus" dev="overlay" ino=3079 res=0 errno=0 [ 1510.642781][T15248] binder: 15246:15248 ioctl 40189206 200000000340 returned -22 [ 1511.116407][ T7008] team0 (unregistering): Port device team_slave_1 removed [ 1511.572657][ T7008] team0 (unregistering): Port device team_slave_0 removed [ 1512.039028][ T7008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.226932][ T7008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.294918][ T5923] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1512.504839][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 1513.415885][ T5923] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1513.463244][ T5923] usb 2-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1513.490141][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.499557][ T5923] usb 2-1: Product: syz [ 1513.504255][ T5923] usb 2-1: Manufacturer: syz [ 1513.510414][ T5923] usb 2-1: SerialNumber: syz [ 1518.272689][ T5923] usb 2-1: USB disconnect, device number 40 [ 1518.663212][ T7008] bond0 (unregistering): Released all slaves [ 1518.821242][ T5846] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1518.831364][T15122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1518.873805][T15122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1518.914780][T15122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1518.941335][T15122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1519.014900][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1519.022874][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.043504][ T5846] usb 3-1: config 0 has no interfaces? [ 1519.056777][ T5846] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1519.077357][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.114731][ T5846] usb 3-1: Product: syz [ 1519.126766][ T5846] usb 3-1: Manufacturer: syz [ 1519.151984][ T5846] usb 3-1: SerialNumber: syz [ 1519.171100][ T5846] usb 3-1: config 0 descriptor?? [ 1519.447576][T15122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.389231][T12713] usb 3-1: USB disconnect, device number 35 [ 1520.405613][T15122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.478137][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.485589][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.562113][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.570307][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.571473][T15122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1521.671991][T15122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1524.074126][T15122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.189517][T15337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2339'. [ 1525.263673][T15122] veth0_vlan: entered promiscuous mode [ 1525.347800][T15122] veth1_vlan: entered promiscuous mode [ 1525.503454][T15122] veth0_macvtap: entered promiscuous mode [ 1525.686192][T15122] veth1_macvtap: entered promiscuous mode [ 1526.080813][T15122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.281855][T15122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.361526][T15122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.384619][T15122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.398943][T15122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.712146][T15122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.732470][T15122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.770989][T15122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.830217][T15122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.848104][T15122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.865485][T15122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.876029][T15122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.904954][T15122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.929344][T15122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.168977][T15122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.227794][T15122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.874750][T15122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.884098][T15122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.127182][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.155796][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.283991][ T7352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.351467][ T7352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.194704][ T5859] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1532.434684][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 1532.444428][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.475426][ T5859] usb 2-1: config 0 has no interfaces? [ 1532.490271][ T5859] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1532.502464][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.521809][ T5859] usb 2-1: Product: syz [ 1532.542169][ T5859] usb 2-1: Manufacturer: syz [ 1532.552329][ T5859] usb 2-1: SerialNumber: syz [ 1532.573417][ T5859] usb 2-1: config 0 descriptor?? [ 1532.624774][ T5846] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1532.819047][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 1532.868797][ T5846] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1532.873267][T15399] binder: 15397:15399 ioctl 40189206 200000000340 returned -22 [ 1532.932733][ T5846] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1532.943023][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.951322][ T5846] usb 1-1: Product: syz [ 1532.956180][ T5846] usb 1-1: Manufacturer: syz [ 1532.961528][ T5846] usb 1-1: SerialNumber: syz [ 1535.050883][ T5859] usb 2-1: USB disconnect, device number 41 [ 1535.582256][ T5846] usb 1-1: USB disconnect, device number 26 [ 1537.898520][T15420] binder: 15417:15420 ioctl 40189206 200000000340 returned -22 [ 1541.334210][T15443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1541.557850][T12713] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1541.821332][T12713] usb 3-1: device descriptor read/64, error -71 [ 1542.105150][T12713] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1542.189188][T15448] Invalid ELF section header size [ 1542.317240][T12713] usb 3-1: device descriptor read/64, error -71 [ 1542.872322][T12713] usb usb3-port1: attempt power cycle [ 1543.704674][T12713] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1543.765559][T12713] usb 3-1: device descriptor read/8, error -71 [ 1544.150658][T12713] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1544.826979][T12713] usb 3-1: device descriptor read/8, error -71 [ 1544.985061][T12713] usb usb3-port1: unable to enumerate USB device [ 1546.470490][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.478360][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.496309][T12713] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1546.824660][T12713] usb 3-1: Using ep0 maxpacket: 8 [ 1547.923387][T12713] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1548.107061][T12713] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d [ 1548.116386][T12713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.136101][T12713] usb 3-1: Product: syz [ 1548.154668][T12713] usb 3-1: Manufacturer: syz [ 1548.165094][T12713] usb 3-1: SerialNumber: syz [ 1548.410081][T15483] fuse: Bad value for 'fd' [ 1552.344081][T12713] usb 3-1: USB disconnect, device number 40 [ 1553.303364][T15499] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2376'. [ 1553.472200][T12713] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1553.864638][T12713] usb 3-1: device descriptor read/64, error -71 [ 1554.847933][T12713] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1555.254247][T12713] usb 3-1: device descriptor read/64, error -71 [ 1555.497476][T12713] usb usb3-port1: attempt power cycle [ 1556.518658][T15525] binder: 15524:15525 ioctl c0306201 0 returned -14 [ 1559.505647][T15541] Invalid ELF section header size [ 1559.714055][T15544] program syz.3.2385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1561.938584][T12805] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1562.701364][T12805] usb 1-1: device descriptor read/64, error -71 [ 1563.085146][T12805] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1563.264839][T12805] usb 1-1: device descriptor read/64, error -71 [ 1563.265767][T15576] binder: 15575:15576 ioctl c0306201 0 returned -14 [ 1563.395915][T12805] usb usb1-port1: attempt power cycle [ 1563.825100][T12805] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1563.874219][T12805] usb 1-1: device descriptor read/8, error -71 [ 1564.257331][T12805] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1565.084352][T12805] usb 1-1: device descriptor read/8, error -71 [ 1565.340969][T12805] usb usb1-port1: unable to enumerate USB device [ 1569.574770][T12713] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1569.593528][T15618] Invalid ELF section header size [ 1569.824614][T12713] usb 2-1: Using ep0 maxpacket: 16 [ 1569.943213][T12713] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1570.010005][T12713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.121835][T12713] usb 2-1: Product: syz [ 1570.171448][T12713] usb 2-1: Manufacturer: syz [ 1570.244859][T12713] usb 2-1: SerialNumber: syz [ 1570.246493][T15620] loop0: detected capacity change from 0 to 4096 [ 1570.256967][T12713] usb 2-1: config 0 descriptor?? [ 1570.344828][T15620] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1570.383526][T15620] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1570.424875][T15620] System zones: 0-5 [ 1570.460157][T15620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.736041][T12713] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1570.757084][ T5839] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1570.784140][T12713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1570.836839][T12713] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1570.854176][T12713] usb 2-1: media controller created [ 1571.230305][T15611] Cannot find add_set index 0 as target [ 1571.604727][ T5839] usb 3-1: device descriptor read/64, error -71 [ 1571.687763][T12713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1571.747435][T15616] loop3: detected capacity change from 0 to 40427 [ 1571.765206][T15122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.767444][T15616] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1571.783576][T15616] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1571.812896][T15616] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1571.874969][ T5839] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1571.964411][T15616] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1571.984909][T15616] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1572.054931][ T5839] usb 3-1: device descriptor read/64, error -71 [ 1572.076548][T12713] zl10353_read_register: readreg error (reg=127, ret==0) [ 1572.103953][T12713] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1572.118283][T12713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1572.147565][T12713] usb 2-1: USB disconnect, device number 42 [ 1572.196158][ T5839] usb usb3-port1: attempt power cycle [ 1572.310155][T12713] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1573.390454][ T5839] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1573.518006][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1573.559450][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1573.574245][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1573.583016][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1573.597388][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1573.609006][ T5839] usb 3-1: device descriptor read/8, error -71 [ 1573.620790][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1573.631876][ T5800] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1576.647516][T15664] Invalid ELF section header size [ 1577.493119][T15667] loop0: detected capacity change from 0 to 4096 [ 1577.502744][T15667] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1577.522879][T15667] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1577.531444][T15667] System zones: 0-5 [ 1577.724764][T15667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.067173][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1581.077727][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1581.088584][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.100729][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.114754][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1581.136359][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1581.349759][T15122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.381118][T14993] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.501006][T15683] loop1: detected capacity change from 0 to 40427 [ 1581.861449][T15683] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1582.097738][T14993] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.123682][T15683] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1582.192919][T15683] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 1582.314621][ C1] ------------[ cut here ]------------ [ 1582.320747][ C1] ODEBUG: free active (active state 0) object: ffff88805d282c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1582.334699][ C1] WARNING: CPU: 1 PID: 14993 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1582.344950][ C1] Modules linked in: [ 1582.348947][ C1] CPU: 1 PID: 14993 Comm: kworker/u4:2 Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1582.356833][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1582.366986][ C1] Workqueue: netns cleanup_net [ 1582.371958][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1582.378694][ C1] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24 [ 1582.399169][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1582.405350][ C1] RAX: 716eb361cd088400 RBX: ffffffff970db498 RCX: ffff88802b228000 [ 1582.413550][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1582.421692][ C1] RBP: ffffffff8aac9f00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1582.430028][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805d282e00 [ 1582.438097][ C1] R13: ffffffff89673230 R14: ffff88805d282000 R15: ffff88805d282c90 [ 1582.446176][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1582.455218][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1582.461860][ C1] CR2: 00005555690d4808 CR3: 000000001ae90000 CR4: 00000000003506e0 [ 1582.470075][ C1] Call Trace: [ 1582.473419][ C1] [ 1582.476413][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 1582.482105][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1582.487578][ C1] __kmem_cache_free+0xba/0x1f0 [ 1582.492554][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1582.497647][ C1] call_timer_fn+0x16e/0x530 [ 1582.502412][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1582.507557][ C1] ? call_timer_fn+0xbf/0x530 [ 1582.512308][ C1] ? __run_timers+0x7d0/0x7d0 [ 1582.517315][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1582.523396][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1582.528913][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1582.534451][ C1] __run_timers+0x52d/0x7d0 [ 1582.539329][ C1] ? detach_timer+0x2b0/0x2b0 [ 1582.544102][ C1] ? lock_chain_count+0x20/0x20 [ 1582.549269][ C1] run_timer_softirq+0x67/0xf0 [ 1582.554228][ C1] handle_softirqs+0x280/0x820 [ 1582.559337][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1582.564272][ C1] ? do_softirq+0x180/0x180 [ 1582.569075][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1582.574350][ C1] __irq_exit_rcu+0xc7/0x190 [ 1582.579068][ C1] ? irq_exit_rcu+0x20/0x20 [ 1582.583904][ C1] irq_exit_rcu+0x9/0x20 [ 1582.588271][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1582.594083][ C1] [ 1582.597114][ C1] [ 1582.600285][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1582.606470][ C1] RIP: 0010:kasan_check_range+0x6a/0x290 [ 1582.612423][ C1] Code: 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 <4d> 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 [ 1582.632528][ C1] RSP: 0018:ffffc9000b63f5b0 EFLAGS: 00000a03 [ 1582.638717][ C1] RAX: 1ffff11005645001 RBX: dffffc0000000001 RCX: ffffffff8166543e [ 1582.646794][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dfbb520 [ 1582.654863][ C1] RBP: 1ffffffff1bf76a4 R08: ffffffff8dfbb527 R09: 1ffffffff1bf76a4 [ 1582.662992][ C1] R10: dffffc0000000000 R11: fffffbfff1bf76a4 R12: fffffbfff1bf76a5 [ 1582.671248][ C1] R13: ffffffff8dfbb570 R14: fffffbfff1bf76a5 R15: 1ffffffff1bf76a4 [ 1582.679440][ C1] ? mutex_spin_on_owner+0x27e/0x340 [ 1582.684853][ C1] mutex_spin_on_owner+0x27e/0x340 [ 1582.690095][ C1] __mutex_lock+0x786/0xcc0 [ 1582.694826][ C1] ? __mutex_lock+0x4e8/0xcc0 [ 1582.699420][T15698] loop0: detected capacity change from 0 to 4096 [ 1582.699606][ C1] ? nsim_destroy+0x3f/0x180 [ 1582.711176][ C1] ? mutex_lock_nested+0x20/0x20 [ 1582.716325][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 1582.721798][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1582.727232][ C1] nsim_destroy+0x3f/0x180 [ 1582.731808][ C1] __nsim_dev_port_del+0x14d/0x1b0 [ 1582.737142][ C1] nsim_dev_reload_destroy+0x283/0x480 [ 1582.742712][ C1] nsim_dev_reload_down+0x8a/0xc0 [ 1582.747860][ C1] devlink_reload+0x137/0x600 [ 1582.752827][ C1] ? devlink_remote_reload_actions_performed+0x150/0x150 [ 1582.760008][ C1] ? xa_get_mark+0x3ef/0x420 [ 1582.764764][ C1] ? xa_get_mark+0x66/0x420 [ 1582.769340][ C1] devlink_pernet_pre_exit+0x18a/0x340 [ 1582.775122][ C1] ? trace_raw_output_devlink_trap_report+0x230/0x230 [ 1582.781983][ C1] ? cttimeout_net_pre_exit+0x218/0x230 [ 1582.783051][T15698] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1582.787824][ C1] cleanup_net+0x57f/0xb90 [ 1582.787865][ C1] ? ops_free_list+0x3b0/0x3b0 [ 1582.787902][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1582.787927][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1582.787956][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1582.787984][ C1] process_scheduled_works+0xa45/0x15b0 [ 1582.788039][ C1] ? assign_work+0x400/0x400 [ 1582.817205][T15698] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1582.821465][ C1] ? assign_work+0x39e/0x400 [ 1582.846615][ C1] worker_thread+0xa55/0xfc0 [ 1582.847373][T15698] EXT4-fs: failed to create workqueue [ 1582.851300][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1582.863211][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1582.868568][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1582.875283][ C1] kthread+0x2fa/0x390 [ 1582.879503][ C1] ? pr_cont_work+0x560/0x560 [ 1582.883141][T15698] EXT4-fs (loop0): mount failed [ 1582.884468][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1582.894405][ C1] ret_from_fork+0x48/0x80 [ 1582.899001][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1582.903835][ C1] ret_from_fork_asm+0x11/0x20 [ 1582.908932][ C1] [ 1582.912007][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1582.919321][ C1] CPU: 1 PID: 14993 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1582.926994][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1582.937086][ C1] Workqueue: netns cleanup_net [ 1582.941888][ C1] Call Trace: [ 1582.945187][ C1] [ 1582.948062][ C1] dump_stack_lvl+0x16c/0x230 [ 1582.952886][ C1] ? show_regs_print_info+0x20/0x20 [ 1582.958224][ C1] ? load_image+0x3b0/0x3b0 [ 1582.962809][ C1] panic+0x2c0/0x710 [ 1582.966822][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1582.971485][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1582.976700][ C1] __warn+0x2e0/0x470 [ 1582.980888][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1582.986821][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1582.992683][ C1] report_bug+0x2be/0x4f0 [ 1582.997174][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1583.002914][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1583.008751][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 1583.014626][ C1] handle_bug+0xcf/0x120 [ 1583.019402][ C1] exc_invalid_op+0x1a/0x50 [ 1583.024198][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1583.029263][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1583.036066][ C1] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24 [ 1583.057798][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1583.064182][ C1] RAX: 716eb361cd088400 RBX: ffffffff970db498 RCX: ffff88802b228000 [ 1583.072388][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1583.080583][ C1] RBP: ffffffff8aac9f00 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1583.088696][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88805d282e00 [ 1583.096864][ C1] R13: ffffffff89673230 R14: ffff88805d282000 R15: ffff88805d282c90 [ 1583.105050][ C1] ? rose_transmit_link+0x740/0x740 [ 1583.110389][ C1] slab_free_freelist_hook+0xd2/0x1b0 [ 1583.116090][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1583.121768][ C1] __kmem_cache_free+0xba/0x1f0 [ 1583.127025][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1583.132103][ C1] call_timer_fn+0x16e/0x530 [ 1583.136988][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1583.142244][ C1] ? call_timer_fn+0xbf/0x530 [ 1583.146969][ C1] ? __run_timers+0x7d0/0x7d0 [ 1583.151674][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1583.156889][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1583.162106][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1583.167264][ C1] __run_timers+0x52d/0x7d0 [ 1583.171922][ C1] ? detach_timer+0x2b0/0x2b0 [ 1583.177005][ C1] ? lock_chain_count+0x20/0x20 [ 1583.182063][ C1] run_timer_softirq+0x67/0xf0 [ 1583.187057][ C1] handle_softirqs+0x280/0x820 [ 1583.192355][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1583.197543][ C1] ? do_softirq+0x180/0x180 [ 1583.202256][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1583.207617][ C1] __irq_exit_rcu+0xc7/0x190 [ 1583.212450][ C1] ? irq_exit_rcu+0x20/0x20 [ 1583.217175][ C1] irq_exit_rcu+0x9/0x20 [ 1583.221888][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1583.227683][ C1] [ 1583.230913][ C1] [ 1583.234136][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1583.240207][ C1] RIP: 0010:kasan_check_range+0x6a/0x290 [ 1583.246132][ C1] Code: 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 <4d> 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 [ 1583.265763][ C1] RSP: 0018:ffffc9000b63f5b0 EFLAGS: 00000a03 [ 1583.271854][ C1] RAX: 1ffff11005645001 RBX: dffffc0000000001 RCX: ffffffff8166543e [ 1583.280048][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dfbb520 [ 1583.288348][ C1] RBP: 1ffffffff1bf76a4 R08: ffffffff8dfbb527 R09: 1ffffffff1bf76a4 [ 1583.297173][ C1] R10: dffffc0000000000 R11: fffffbfff1bf76a4 R12: fffffbfff1bf76a5 [ 1583.305272][ C1] R13: ffffffff8dfbb570 R14: fffffbfff1bf76a5 R15: 1ffffffff1bf76a4 [ 1583.313387][ C1] ? mutex_spin_on_owner+0x27e/0x340 [ 1583.318743][ C1] mutex_spin_on_owner+0x27e/0x340 [ 1583.324005][ C1] __mutex_lock+0x786/0xcc0 [ 1583.329100][ C1] ? __mutex_lock+0x4e8/0xcc0 [ 1583.334014][ C1] ? nsim_destroy+0x3f/0x180 [ 1583.338767][ C1] ? mutex_lock_nested+0x20/0x20 [ 1583.343913][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 1583.349612][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1583.354936][ C1] nsim_destroy+0x3f/0x180 [ 1583.359391][ C1] __nsim_dev_port_del+0x14d/0x1b0 [ 1583.364713][ C1] nsim_dev_reload_destroy+0x283/0x480 [ 1583.370408][ C1] nsim_dev_reload_down+0x8a/0xc0 [ 1583.375596][ C1] devlink_reload+0x137/0x600 [ 1583.380504][ C1] ? devlink_remote_reload_actions_performed+0x150/0x150 [ 1583.387669][ C1] ? xa_get_mark+0x3ef/0x420 [ 1583.392406][ C1] ? xa_get_mark+0x66/0x420 [ 1583.397220][ C1] devlink_pernet_pre_exit+0x18a/0x340 [ 1583.402900][ C1] ? trace_raw_output_devlink_trap_report+0x230/0x230 [ 1583.409981][ C1] ? cttimeout_net_pre_exit+0x218/0x230 [ 1583.415792][ C1] cleanup_net+0x57f/0xb90 [ 1583.420358][ C1] ? ops_free_list+0x3b0/0x3b0 [ 1583.425255][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1583.430477][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1583.436222][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1583.441999][ C1] process_scheduled_works+0xa45/0x15b0 [ 1583.447804][ C1] ? assign_work+0x400/0x400 [ 1583.452616][ C1] ? assign_work+0x39e/0x400 [ 1583.457231][ C1] worker_thread+0xa55/0xfc0 [ 1583.461941][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1583.468154][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1583.473144][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1583.479611][ C1] kthread+0x2fa/0x390 [ 1583.483915][ C1] ? pr_cont_work+0x560/0x560 [ 1583.488812][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1583.493464][ C1] ret_from_fork+0x48/0x80 [ 1583.498183][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1583.502804][ C1] ret_from_fork_asm+0x11/0x20 [ 1583.507638][ C1] [ 1583.510956][ C1] Kernel Offset: disabled [ 1583.515945][ C1] Rebooting in 86400 seconds..