last executing test programs: 3m3.162913003s ago: executing program 4 (id=458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000340)={0x18}) 3m2.937780512s ago: executing program 4 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x3, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r1}, &(0x7f0000000500)=""/62, 0x3e, &(0x7f0000000480)={&(0x7f0000000440)={'crct10dif-arm64-ce\x00'}}) mount$tmpfs(0x0, 0x0, 0x0, 0x84, &(0x7f0000000580)=ANY=[]) listen(0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x987}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="300000000d0a0108e823cb96439c1a400a0000010900020073797a31000000000900010073797a310000000004b8927b938699ccc6f62908000300f404fcc3ff9cb3c9a60faf9243e251a5a97fd24671488fb998f11bbf3394862432f9ca5d17ef2d69c9d5d5426da1b1855c81e144dccc0238059fc591"], 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000240)=@alg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/96, 0x60}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/233, 0xe9}, {&(0x7f00000018c0)=""/150, 0x96}, {&(0x7f0000001980)=""/65, 0x41}], 0x6, &(0x7f0000001a80)=""/161, 0xa1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, 0x0, 0x0}, 0x20) 3m1.894537662s ago: executing program 4 (id=462): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) creat(&(0x7f00000004c0)='./bus\x00', 0x42) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m1.509203157s ago: executing program 4 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) 3m1.372974758s ago: executing program 4 (id=466): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x200000002) 3m0.83783745s ago: executing program 4 (id=468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x7f, 0x4, 0xfffff034}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3m0.015522055s ago: executing program 32 (id=468): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x7f, 0x4, 0xfffff034}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 15.356804311s ago: executing program 1 (id=1102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 14.897947868s ago: executing program 1 (id=1106): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 10.370652338s ago: executing program 1 (id=1113): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x88}}, 0xe040) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x20, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 9.42136415s ago: executing program 1 (id=1116): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e010000090581039c76755746", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$phonet(0x23, 0x2, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 9.268264332s ago: executing program 3 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) 8.24239793s ago: executing program 2 (id=1120): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) 7.872059796s ago: executing program 2 (id=1123): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000080)={'#! ', './file1'}, 0xb) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 7.869584321s ago: executing program 3 (id=1124): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000400000000000004400000000009500000000000000153cfd5f8b2e81f14585725747d32eeec4abc8e5ecfc90a03d27d85e6c7c115bfff53b2c3153b727426ad2e2912a35debe01de6a8cdea282ece05f3d6ccfc11d9b41de6603fb9916627ea082395f1e786f57f9558d96d5503c0d51e9d8322b14080b6a487d0c6c958fc652552417de402ad4cff0cd2eda00b8b71746a5c5430d6365fcb367fe9ae5b9ecac9fc6d032deea190f5ba44c9dd5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000480), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.891630497s ago: executing program 2 (id=1125): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 6.713955762s ago: executing program 5 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) syz_io_uring_submit(0x0, 0x0, 0x0) 6.147298868s ago: executing program 3 (id=1127): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x88}}, 0xe040) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x20, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 5.760103538s ago: executing program 3 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x24004800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.713343978s ago: executing program 2 (id=1130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x48805, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 4.59033453s ago: executing program 3 (id=1132): futex(&(0x7f0000000bc0)=0x2, 0x9, 0x2, &(0x7f0000000c00)={0x0, 0x3938700}, 0x0, 0x1) 4.544125422s ago: executing program 5 (id=1133): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 4.463905806s ago: executing program 0 (id=1134): close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x10}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x52af, 0xc000, 0x8, 0xc1}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)={0x2, [0x5, 0x2], 0x1ff}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 4.362786604s ago: executing program 0 (id=1135): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 4.074464977s ago: executing program 3 (id=1136): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) listen(0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x987}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="300000000d0a0108e823cb96439c1a400a0000010900020073797a31000000000900010073797a310000000004b8927b938699ccc6f62908000300f404fcc3ff9cb3c9a60faf9243e251a5a97fd24671488fb998f11bbf3394862432f9ca5d17ef2d69c9d5d5426da1b1855c81e144dccc0238059fc591"], 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.501604161s ago: executing program 5 (id=1137): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000400000000000004400000000009500000000000000153cfd5f8b2e81f14585725747d32eeec4abc8e5ecfc90a03d27d85e6c7c115bfff53b2c3153b727426ad2e2912a35debe01de6a8cdea282ece05f3d6ccfc11d9b41de6603fb9916627ea082395f1e786f57f9558d96d5503c0d51e9d8322b14080b6a487d0c6c958fc652552417de402ad4cff0cd2eda00b8b71746a5c5430d6365fcb367fe9ae5b9ecac9fc6d032deea190f5ba44c9dd5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000480), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.441505122s ago: executing program 2 (id=1138): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x88}}, 0xe040) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x20, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) 3.400943913s ago: executing program 0 (id=1139): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) pipe2$watch_queue(&(0x7f0000000140), 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 2.41629419s ago: executing program 0 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 2.250117983s ago: executing program 2 (id=1141): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) 2.10618531s ago: executing program 5 (id=1142): syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x3d) 1.969456864s ago: executing program 5 (id=1143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x24004800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.645793837s ago: executing program 1 (id=1144): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000e8ff060000004404730001000000"], 0x40}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001840)={0x2020}, 0x2020) 1.498296141s ago: executing program 5 (id=1145): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.37962482s ago: executing program 0 (id=1146): r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) 1.295486426s ago: executing program 1 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, 0x0, 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r1, 0x0, 0xffda) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002540)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578020000000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x9f) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000025c0)={0xc4, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {0x11}, [@generic="7f87c8cdb22059203a848ddaac1b061e96ec1902b975b749b5650ee02f9b836fe8bee2487bbf65ae66dfca2158d0157cb61765040eeda7ac1b2a7a2257029531cbf7fd55c68ac049a0ce646c6f77b2714d71a45ea9a330d0784b667130f2468dc705c3", @typed={0x4, 0x144, 0x0, 0x0, @binary}, @typed={0x4, 0x34}, @typed={0x8, 0x109, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ce2142f588cc61a71023fd2e85db28ce9f8a7f57d70c3e6962e4a6f7751a372a3cb184743d0cdfff87deb60de85641c59cc758463b59646a416975", @generic]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x6, [0x1b2b, 0x101, 0x8, 0x7, 0x3, 0x80000000000]}}) 0s ago: executing program 0 (id=1148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x48080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000d00)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) kernel console output (not intermixed with test programs): tick-stop error: local softirq work is pending, handler #200!!! [ 77.459507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.560681][ T1305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.584309][ T1305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.597618][ T5946] openvswitch: netlink: Unknown nsh attribute 0 [ 77.604836][ T5946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.682049][ T1305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.706610][ T1305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.761416][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.808589][ T1305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.826293][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.900250][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.049365][ T3471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.062782][ T3471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.135935][ T3471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.156885][ T3471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.215480][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.228231][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.297063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 78.305936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 78.315132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.325699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.515958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.536249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.544962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.563740][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.696149][ T5836] Bluetooth: hci3: command tx timeout [ 78.775863][ T5836] Bluetooth: hci1: command tx timeout [ 78.778214][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.792179][ T52] Bluetooth: hci0: command tx timeout [ 78.798696][ T5843] Bluetooth: hci2: command tx timeout [ 78.798902][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 78.804185][ T5836] Bluetooth: hci4: command tx timeout [ 78.914310][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.953012][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 79.108000][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 79.214069][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.225445][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.264353][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.278854][ T24] usb 3-1: Product: syz [ 79.295550][ T24] usb 3-1: Manufacturer: syz [ 79.321814][ T24] usb 3-1: SerialNumber: syz [ 79.517823][ T24] usb 3-1: config 0 descriptor?? [ 79.546490][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 79.569894][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.608063][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.695783][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.719590][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.874252][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.921664][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.481207][ T5975] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 80.956312][ T24] gspca_zc3xx: reg_w_i err -110 [ 81.568950][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 81.647038][ T24] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 81.803378][ T5994] erofs (device nbd0): cannot find valid erofs superblock [ 82.536457][ T5950] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.624140][ T6006] erofs (device nbd3): cannot find valid erofs superblock [ 83.094530][ T5895] usb 3-1: USB disconnect, device number 2 [ 83.118825][ T5950] usb 2-1: config 49 has an invalid descriptor of length 54, skipping remainder of the config [ 83.261881][ T5950] usb 2-1: config 49 has 0 interfaces, different from the descriptor's value: 1 [ 83.274634][ T5950] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 83.301513][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.322569][ T5950] usb 2-1: Product: syz [ 83.327412][ T5950] usb 2-1: Manufacturer: syz [ 83.332039][ T5950] usb 2-1: SerialNumber: syz [ 83.454814][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.476258][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 83.679791][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 84.451203][ T6030] binder: BINDER_SET_CONTEXT_MGR already set [ 84.474042][ T6030] binder: 6027:6030 ioctl 4018620d 200000004a80 returned -16 [ 84.911516][ T5953] IPVS: starting estimator thread 0... [ 84.924966][ T6035] vivid-007: disconnect [ 85.017177][ T6036] IPVS: using max 32 ests per chain, 76800 per kthread [ 85.079048][ T6029] ALSA: mixer_oss: invalid OSS volume '' [ 85.089442][ T6016] vivid-007: reconnect [ 85.922840][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 86.045000][ T6044] could not allocate digest TFM handle crct10dif-arm64-ce [ 86.782719][ T9] cfg80211: failed to load regulatory.db [ 88.609848][ T5903] usb 2-1: USB disconnect, device number 2 [ 89.264798][ T6073] xt_hashlimit: max too large, truncated to 1048576 [ 89.337373][ T6078] process 'syz.1.33' launched './file1' with NULL argv: empty string added [ 89.835628][ T6084] warning: `syz.2.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.902029][ T6087] faux_driver vgem: [drm] Unknown color mode 511; guessing buffer size. [ 89.910650][ T6080] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 90.641101][ T30] audit: type=1326 audit(1764014477.043:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6095 comm="syz.3.41" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85838f749 code=0x0 [ 90.866044][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.025739][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 91.039999][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 91.055742][ T9] usb 1-1: config 0 has no interface number 0 [ 91.071737][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 91.081229][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.089490][ T9] usb 1-1: Product: syz [ 91.106986][ T9] usb 1-1: Manufacturer: syz [ 91.113915][ T9] usb 1-1: SerialNumber: syz [ 91.124744][ T9] usb 1-1: config 0 descriptor?? [ 91.154753][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 91.455364][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 91.471854][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 91.638352][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 91.638803][ T6008] usb 1-1: USB disconnect, device number 2 [ 91.687128][ T6008] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 91.722155][ T6008] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 91.762640][ T6008] quatech2 1-1:0.51: device disconnected [ 94.269277][ T30] audit: type=1326 audit(1764014480.663:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6133 comm="syz.4.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a5178f749 code=0x0 [ 95.108585][ T6065] Bluetooth: (null): Invalid header checksum [ 95.176053][ T6008] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.337327][ T6008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 95.362887][ T6008] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 95.462461][ T6008] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 95.475704][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.496513][ T6008] usb 4-1: Product: syz [ 95.500685][ T6008] usb 4-1: Manufacturer: syz [ 95.505250][ T6008] usb 4-1: SerialNumber: syz [ 95.530389][ T6008] usb 4-1: config 0 descriptor?? [ 95.578556][ T6144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.620271][ T6008] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 95.675745][ T6008] uvcvideo 4-1:0.0: No valid video chain found. [ 95.695324][ T6151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.487494][ T5953] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.676196][ T5953] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 97.694034][ T30] audit: type=1326 audit(1764014484.093:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.2.67" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24ed38f749 code=0x0 [ 97.723233][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.751977][ T5953] usb 2-1: Product: syz [ 97.756943][ T5953] usb 2-1: Manufacturer: syz [ 97.812189][ T5953] usb 2-1: SerialNumber: syz [ 98.227321][ T5953] usb 2-1: config 0 descriptor?? [ 98.292885][ T5953] hub 2-1:0.0: bad descriptor, ignoring hub [ 98.304704][ T5953] hub 2-1:0.0: probe with driver hub failed with error -5 [ 98.839809][ T5953] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 98.861698][ T6008] usb 4-1: USB disconnect, device number 2 [ 98.917727][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.928496][ T5953] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 98.984587][ T5953] usb 2-1: media controller created [ 99.139959][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.518241][ T5953] DVB: Unable to find symbol dib7000p_attach() [ 99.530386][ T5953] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 99.867420][ T5953] rc_core: IR keymap rc-dib0700-rc5 not found [ 99.984752][ T5953] Registered IR keymap rc-empty [ 99.990569][ T5953] dvb-usb: could not initialize remote control. [ 99.997142][ T5953] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 100.025437][ T5953] usb 2-1: USB disconnect, device number 3 [ 100.155622][ T6205] xt_hashlimit: max too large, truncated to 1048576 [ 100.223039][ T5953] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 101.727336][ T6224] could not allocate digest TFM handle crct10dif-arm64-ce [ 103.188556][ T6254] xt_hashlimit: max too large, truncated to 1048576 [ 103.951302][ T6269] Zero length message leads to an empty skb [ 104.090432][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 104.757513][ T6283] Bluetooth: MGMT ver 1.23 [ 105.550714][ T6294] xt_hashlimit: max too large, truncated to 1048576 [ 108.230682][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.241103][ T6337] tipc: Started in network mode [ 108.246406][ T6337] tipc: Node identity 46, cluster identity 4711 [ 108.252851][ T6337] tipc: Node number set to 70 [ 108.629521][ T6340] loop4: detected capacity change from 0 to 256 [ 108.829921][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.883292][ T5896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.892021][ T6340] syz.4.119: attempt to access beyond end of device [ 108.892021][ T6340] loop4: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 108.911793][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.947498][ T5896] usb 4-1: config 0 descriptor?? [ 108.955031][ T6347] syz.4.119: attempt to access beyond end of device [ 108.955031][ T6347] loop4: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 108.972548][ T6347] Buffer I/O error on dev loop4, logical block 65, lost async page write [ 108.974067][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 108.982358][ T6347] syz.4.119: attempt to access beyond end of device [ 108.982358][ T6347] loop4: rw=2049, sector=264, nr_sectors = 60 limit=256 [ 109.210072][ T5989] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.436078][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 109.478181][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 109.485158][ T5989] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 109.488841][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 109.566522][ T6358] (syz.4.124,6358,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 109.747335][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.767254][ T5989] usb 2-1: config 0 has no interface number 0 [ 109.773922][ T5989] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.911455][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.939855][ T5896] pwc: recv_control_msg error -32 req 04 val 1000 [ 109.966512][ T5989] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 109.976153][ T5896] pwc: recv_control_msg error -32 req 04 val 1300 [ 109.983448][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.992440][ T5896] pwc: recv_control_msg error -32 req 04 val 1400 [ 109.999268][ T5989] usb 2-1: Product: syz [ 110.003729][ T5989] usb 2-1: Manufacturer: syz [ 110.008897][ T5896] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.015746][ T5989] usb 2-1: SerialNumber: syz [ 110.024537][ T5989] usb 2-1: config 0 descriptor?? [ 110.076761][ T6344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.224135][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 110.234953][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 110.257406][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 110.280447][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.299751][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.323195][ T6344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.333509][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.347592][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.405809][ T6251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.039512][ T5989] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 111.148427][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 111.158934][ T5989] asix 2-1:0.188: probe with driver asix failed with error -32 [ 111.170639][ T5896] pwc: Registered as video103. [ 111.185077][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 111.231434][ T5896] usb 4-1: USB disconnect, device number 3 [ 111.295717][ T6251] usb 3-1: Using ep0 maxpacket: 32 [ 111.316317][ T6251] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 111.842137][ T6251] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.885029][ T6251] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.950491][ T6251] usb 3-1: Product: syz [ 111.971232][ T6251] usb 3-1: Manufacturer: syz [ 111.981431][ T6251] usb 3-1: SerialNumber: syz [ 112.000293][ T6251] usb 3-1: config 0 descriptor?? [ 112.049900][ T6363] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 112.161575][ T5950] usb 2-1: USB disconnect, device number 4 [ 112.457487][ T6252] usb 3-1: USB disconnect, device number 3 [ 114.206856][ T5950] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.400343][ T5950] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.492052][ T5950] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.513205][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.528734][ T5950] usb 5-1: config 0 descriptor?? [ 114.546229][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 114.555753][ T6251] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.865740][ T6251] usb 3-1: Using ep0 maxpacket: 32 [ 114.873986][ T6251] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 114.882931][ T6251] usb 3-1: config 0 has no interface number 0 [ 115.013387][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.416725][ T6251] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.429452][ T6251] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 115.438731][ T6251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.446814][ T6251] usb 3-1: Product: syz [ 115.450998][ T6251] usb 3-1: Manufacturer: syz [ 115.455599][ T6251] usb 3-1: SerialNumber: syz [ 115.472631][ T5950] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.481839][ T6251] usb 3-1: config 0 descriptor?? [ 115.505039][ T5950] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.506615][ T6424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.601601][ T5950] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.623949][ T5950] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.638063][ T5950] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.645242][ T5950] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.652523][ T5950] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.663420][ T5950] pwc: recv_control_msg error -32 req 04 val 1500 [ 115.671300][ T5950] pwc: recv_control_msg error -32 req 02 val 2500 [ 115.689618][ T5950] pwc: recv_control_msg error -32 req 02 val 2400 [ 115.705471][ T5950] pwc: recv_control_msg error -32 req 02 val 2600 [ 115.737258][ T5950] pwc: recv_control_msg error -32 req 02 val 2900 [ 115.762020][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 115.790035][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 115.823719][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 115.915097][ T6424] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 115.941795][ T5950] pwc: Registered as video103. [ 116.093980][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 116.108706][ T5950] usb 5-1: USB disconnect, device number 2 [ 116.858319][ T6251] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 116.970859][ T6251] asix 3-1:0.188: probe with driver asix failed with error -32 [ 117.875077][ T6459] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 117.913163][ T5989] usb 3-1: USB disconnect, device number 4 [ 119.740127][ T6474] loop4: detected capacity change from 0 to 512 [ 120.327084][ T6474] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.163: inode has both inline data and extents flags [ 120.368579][ T6474] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.163: couldn't read orphan inode 15 (err -117) [ 120.447478][ T6474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.083552][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.201615][ T6487] tipc: Started in network mode [ 121.213898][ T6487] tipc: Node identity 46, cluster identity 4711 [ 121.250398][ T6487] tipc: Node number set to 70 [ 121.685938][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.005968][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 122.022480][ T5828] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 122.049177][ T5828] usb 4-1: config 0 has no interface number 0 [ 122.065587][ T5828] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 122.118257][ T5828] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 122.193096][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.221499][ T5828] usb 4-1: Product: syz [ 122.228943][ T6505] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 122.241614][ T5828] usb 4-1: Manufacturer: syz [ 122.255952][ T5828] usb 4-1: SerialNumber: syz [ 122.401738][ T5828] usb 4-1: config 0 descriptor?? [ 122.409796][ T6494] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.954630][ T6494] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.450213][ T5828] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 123.986053][ T5828] asix 4-1:0.188: probe with driver asix failed with error -61 [ 124.227138][ T6530] loop1: detected capacity change from 0 to 512 [ 124.299943][ T6530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.610727][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.073566][ T5828] usb 4-1: USB disconnect, device number 4 [ 125.392821][ T6553] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 125.683356][ T5828] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.276470][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.299500][ T5828] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.316200][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.486254][ T5828] usb 4-1: config 0 descriptor?? [ 126.545310][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 126.969075][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.976926][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.991309][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.006436][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.015571][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.023937][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.047776][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.057283][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 127.075157][ T5828] pwc: recv_control_msg error -32 req 04 val 1500 [ 127.099508][ T5828] pwc: recv_control_msg error -32 req 02 val 2500 [ 127.107376][ T5828] pwc: recv_control_msg error -32 req 02 val 2400 [ 127.121143][ T5828] pwc: recv_control_msg error -32 req 02 val 2600 [ 127.128864][ T5828] pwc: recv_control_msg error -32 req 02 val 2900 [ 127.142293][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.162964][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.172084][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.202832][ T5828] pwc: Registered as video103. [ 127.235760][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 127.235760][ T5910] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.299827][ T5828] usb 4-1: USB disconnect, device number 5 [ 127.456211][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 127.531186][ T5910] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 127.589958][ T5910] usb 2-1: config 0 has no interface number 0 [ 127.607899][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.193'. [ 127.641479][ T5910] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 127.781535][ T6574] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 127.851278][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.926499][ T5910] usb 2-1: Product: syz [ 127.960914][ T5910] usb 2-1: Manufacturer: syz [ 127.984776][ T5910] usb 2-1: SerialNumber: syz [ 128.055809][ T5910] usb 2-1: config 0 descriptor?? [ 128.106868][ T5910] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 128.155764][ T5953] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.169756][ T6580] loop4: detected capacity change from 0 to 512 [ 128.310421][ T5910] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 128.326172][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 128.346399][ T5953] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 128.360409][ T6580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.373054][ T5953] usb 4-1: config 0 has no interface number 0 [ 128.380222][ T5953] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 128.405173][ T6580] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.416659][ T5953] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 128.435040][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.454675][ T5953] usb 4-1: Product: syz [ 128.480826][ T5953] usb 4-1: Manufacturer: syz [ 128.485461][ T5953] usb 4-1: SerialNumber: syz [ 128.516348][ T5953] usb 4-1: config 0 descriptor?? [ 128.522220][ T6578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.549414][ T5822] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.629637][ T5910] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 128.710222][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 128.710585][ T5828] usb 2-1: USB disconnect, device number 5 [ 128.713286][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 128.715232][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 128.717011][ T5828] quatech2 2-1:0.51: device disconnected [ 128.789092][ T6578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.201983][ T5953] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 129.241133][ T5953] asix 4-1:0.188: probe with driver asix failed with error -61 [ 129.672636][ T6594] loop1: detected capacity change from 0 to 512 [ 129.687740][ T6592] loop4: detected capacity change from 0 to 1024 [ 129.743687][ T6594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.848914][ T6594] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.047329][ T5989] usb 4-1: USB disconnect, device number 6 [ 131.164468][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 131.233565][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.865523][ T6631] (syz.1.209,6631,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 132.101125][ T6616] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 132.795925][ T5910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 132.898720][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.914503][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.955803][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 132.971230][ T5910] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.979561][ T5910] usb 1-1: config 0 has no interface number 0 [ 132.989251][ T5910] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.998754][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.007029][ T5910] usb 1-1: Product: syz [ 133.011287][ T5910] usb 1-1: Manufacturer: syz [ 133.016338][ T5910] usb 1-1: SerialNumber: syz [ 133.023794][ T5910] usb 1-1: config 0 descriptor?? [ 133.043422][ T5910] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 133.131158][ T6648] xt_hashlimit: max too large, truncated to 1048576 [ 133.243325][ T5910] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 133.344734][ T5910] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 133.644417][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 133.653236][ T5828] usb 1-1: USB disconnect, device number 3 [ 133.659449][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.692230][ T6658] loop3: detected capacity change from 0 to 128 [ 133.703174][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 133.749561][ T6658] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.760074][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 133.814822][ T6658] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.821065][ T5828] quatech2 1-1:0.51: device disconnected [ 133.866070][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 133.936069][ T5953] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 133.962028][ T5953] usb 5-1: config 0 has no interface number 0 [ 133.968686][ T5953] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 134.114253][ T5953] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 134.590793][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.599956][ T5825] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.639394][ T5953] usb 5-1: Product: syz [ 134.661893][ T5953] usb 5-1: Manufacturer: syz [ 134.675914][ T5953] usb 5-1: SerialNumber: syz [ 134.755029][ T5953] usb 5-1: config 0 descriptor?? [ 134.786748][ T6653] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 134.939573][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 135.037027][ T6653] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.227020][ T6673] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 135.625872][ T6675] (syz.3.223,6675,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 135.965919][ T5953] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 135.998952][ T5953] asix 5-1:0.188: probe with driver asix failed with error -61 [ 137.018986][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 137.057461][ T6690] xt_hashlimit: max too large, truncated to 1048576 [ 137.331278][ T5953] usb 5-1: USB disconnect, device number 3 [ 138.994668][ T6710] (syz.4.236,6710,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 139.563732][ T6733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.689714][ T6733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.741502][ T6737] xt_hashlimit: max too large, truncated to 1048576 [ 139.920025][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 139.929691][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 140.110247][ T6739] ceph: No mds server is up or the cluster is laggy [ 140.575903][ T5895] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.847307][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 140.875791][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 140.915117][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 140.938230][ T5895] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 140.971018][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.986401][ T5895] usb 1-1: Product: syz [ 140.991281][ T5895] usb 1-1: Manufacturer: syz [ 140.996821][ T5895] usb 1-1: SerialNumber: syz [ 141.004849][ T5895] usb 1-1: config 0 descriptor?? [ 141.014380][ T6754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.023206][ T6754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 141.060554][ T5895] usb 1-1: ucan: probing device on interface #0 [ 141.407076][ T6766] (syz.2.254,6766,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 141.706143][ T5895] usb 1-1: ucan: device reported invalid device info [ 141.712881][ T5895] usb 1-1: ucan: probe failed; try to update the device firmware [ 141.867924][ T6773] xt_hashlimit: max too large, truncated to 1048576 [ 142.032946][ T6775] loop1: detected capacity change from 0 to 2048 [ 142.905754][ T5953] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 142.910352][ T6775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.005240][ T5950] usb 1-1: USB disconnect, device number 4 [ 143.837838][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.879754][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.946007][ T5953] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.955101][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.021225][ T5953] usb 4-1: config 0 descriptor?? [ 144.031921][ T5953] pwc: Askey VC010 type 2 USB webcam detected. [ 145.518433][ T5953] pwc: send_video_command error -71 [ 145.523700][ T5953] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 145.575996][ T5953] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 145.618869][ T5953] usb 4-1: USB disconnect, device number 7 [ 146.175953][ T6797] binder: 6794:6797 ioctl 4018620d 0 returned -22 [ 147.932979][ T6810] (syz.4.267,6810,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 148.163603][ T6814] xt_hashlimit: max too large, truncated to 1048576 [ 148.199146][ T6817] loop0: detected capacity change from 0 to 2048 [ 148.226746][ T6817] ======================================================= [ 148.226746][ T6817] WARNING: The mand mount option has been deprecated and [ 148.226746][ T6817] and is ignored by this kernel. Remove the mand [ 148.226746][ T6817] option from the mount to silence this warning. [ 148.226746][ T6817] ======================================================= [ 148.386127][ T6817] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 148.443220][ T6817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.656671][ T5882] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.978985][ T6818] loop1: detected capacity change from 0 to 4096 [ 149.010738][ T6818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.077207][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.098297][ T6818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.105760][ T5882] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.343251][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.419479][ T5882] usb 5-1: config 0 descriptor?? [ 149.461567][ T5882] pwc: Askey VC010 type 2 USB webcam detected. [ 150.041989][ T5882] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.076801][ T5882] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.095852][ T5882] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.116725][ T5882] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.126291][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.146199][ T5882] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.156433][ T5882] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.165489][ T5882] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.176279][ T5882] pwc: recv_control_msg error -32 req 02 val 2100 [ 150.192926][ T5882] pwc: recv_control_msg error -32 req 04 val 1500 [ 150.236440][ T5882] pwc: recv_control_msg error -32 req 02 val 2500 [ 150.238950][ T6845] binder: 6844:6845 ioctl 4018620d 0 returned -22 [ 150.245803][ T5882] pwc: recv_control_msg error -32 req 02 val 2400 [ 150.279104][ T6847] loop0: detected capacity change from 0 to 512 [ 150.288821][ T6847] EXT4-fs: Ignoring removed i_version option [ 150.296608][ T5882] pwc: recv_control_msg error -32 req 02 val 2600 [ 150.329193][ T6847] EXT4-fs: Ignoring removed bh option [ 150.379138][ T6847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.386645][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 150.460888][ T6847] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.504422][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 150.518313][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 150.535838][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 150.545927][ T5882] pwc: Registered as video103. [ 150.553400][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 150.575958][ T5882] usb 5-1: USB disconnect, device number 4 [ 150.681803][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.734149][ T6859] xt_hashlimit: max too large, truncated to 1048576 [ 153.558296][ T6892] xt_hashlimit: max too large, truncated to 1048576 [ 153.677358][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.733350][ T6898] binder: BINDER_SET_CONTEXT_MGR already set [ 153.739565][ T6898] binder: 6897:6898 ioctl 4018620d 200000004a80 returned -16 [ 153.747441][ T5937] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 153.785733][ T48] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.840795][ T5882] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 153.850446][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.858834][ T5882] usb 3-1: Product: syz [ 153.863160][ T5882] usb 3-1: Manufacturer: syz [ 153.880222][ T5882] usb 3-1: SerialNumber: syz [ 153.916282][ T5882] usb 3-1: config 0 descriptor?? [ 153.924636][ T5882] hub 3-1:0.0: bad descriptor, ignoring hub [ 153.936287][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 153.951825][ T5882] hub 3-1:0.0: probe with driver hub failed with error -5 [ 153.963436][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.973772][ T5937] usb 1-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 154.075775][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.075800][ T5937] usb 1-1: Product: syz [ 154.110076][ T5937] usb 1-1: Manufacturer: syz [ 154.114765][ T5937] usb 1-1: SerialNumber: syz [ 154.121271][ T48] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 154.246103][ T5882] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 154.259121][ T5937] r8152-cfgselector 1-1: Unknown version 0x0000 [ 154.265473][ T5937] r8152-cfgselector 1-1: config 0 descriptor?? [ 154.294294][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.309422][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.339895][ T48] usb 5-1: config 0 descriptor?? [ 154.356435][ T5882] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 154.369149][ T48] pwc: Askey VC010 type 2 USB webcam detected. [ 154.379657][ T5882] usb 3-1: media controller created [ 154.414486][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.509367][ T5937] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 154.616330][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 154.631560][ T5882] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 154.762388][ T48] pwc: recv_control_msg error -32 req 02 val 2b00 [ 154.769814][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found [ 154.778407][ T5882] Registered IR keymap rc-empty [ 154.783819][ T48] pwc: recv_control_msg error -32 req 02 val 2700 [ 154.793806][ T48] pwc: recv_control_msg error -32 req 02 val 2c00 [ 154.803851][ T48] pwc: recv_control_msg error -32 req 04 val 1000 [ 154.812362][ T48] pwc: recv_control_msg error -32 req 04 val 1300 [ 154.860929][ T48] pwc: recv_control_msg error -32 req 04 val 1400 [ 155.239972][ T48] pwc: recv_control_msg error -32 req 02 val 2000 [ 155.346059][ T48] pwc: recv_control_msg error -32 req 02 val 2100 [ 155.353729][ T48] pwc: recv_control_msg error -32 req 04 val 1500 [ 155.383986][ T48] pwc: recv_control_msg error -32 req 02 val 2500 [ 155.405457][ T48] pwc: recv_control_msg error -32 req 02 val 2400 [ 155.429192][ T48] pwc: recv_control_msg error -32 req 02 val 2600 [ 155.712826][ T48] pwc: recv_control_msg error -71 req 02 val 2800 [ 155.929628][ T48] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.089423][ T48] pwc: recv_control_msg error -71 req 04 val 1200 [ 156.109441][ T48] pwc: Registered as video103. [ 156.119741][ T48] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 156.150001][ T48] usb 5-1: USB disconnect, device number 5 [ 156.225789][ T5937] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.385901][ T5937] usb 1-1: Using ep0 maxpacket: 16 [ 156.411753][ T5937] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 156.452334][ T5937] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 156.477330][ T5937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 156.488988][ T6928] xt_hashlimit: max too large, truncated to 1048576 [ 156.512934][ T5937] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 156.545870][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.593684][ T5937] usb 1-1: Product: syz [ 156.613112][ T5937] usb 1-1: Manufacturer: syz [ 156.638408][ T5937] usb 1-1: SerialNumber: syz [ 156.671678][ T5937] usb 1-1: config 0 descriptor?? [ 156.816694][ T30] audit: type=1326 audit(1764014543.223:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff586b8f749 code=0x0 [ 157.116439][ T5910] usb 1-1: USB disconnect, device number 6 [ 159.235956][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 159.289676][ T6966] xt_hashlimit: max too large, truncated to 1048576 [ 159.407999][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.461121][ T5896] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.475923][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.515978][ T5882] dvb-usb: could not initialize remote control. [ 159.575994][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 159.609520][ T5882] usb 3-1: USB disconnect, device number 5 [ 159.622881][ T5896] usb 5-1: config 0 descriptor?? [ 159.683344][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 159.736922][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 160.545157][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 160.637581][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 160.717566][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00 [ 160.737006][ T5896] pwc: recv_control_msg error -32 req 04 val 1000 [ 160.755580][ T5896] pwc: recv_control_msg error -32 req 04 val 1300 [ 160.786501][ T5896] pwc: recv_control_msg error -32 req 04 val 1400 [ 160.806589][ T5896] pwc: recv_control_msg error -32 req 02 val 2000 [ 160.813653][ T5896] pwc: recv_control_msg error -32 req 02 val 2100 [ 160.828406][ T5896] pwc: recv_control_msg error -32 req 04 val 1500 [ 160.853326][ T5896] pwc: recv_control_msg error -32 req 02 val 2500 [ 161.466818][ T5896] pwc: recv_control_msg error -32 req 02 val 2400 [ 161.474225][ T5896] pwc: recv_control_msg error -32 req 02 val 2600 [ 161.714301][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 161.722580][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 161.730165][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 161.771430][ T5896] pwc: Registered as video103. [ 161.778419][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 161.812765][ T5896] usb 5-1: USB disconnect, device number 6 [ 162.476465][ T794] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.636720][ T794] usb 3-1: Using ep0 maxpacket: 32 [ 162.728750][ T794] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.742846][ T794] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.753558][ T794] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.766661][ T794] usb 3-1: Product: syz [ 162.794284][ T794] usb 3-1: Manufacturer: syz [ 162.875203][ T794] usb 3-1: SerialNumber: syz [ 162.955061][ T794] usb 3-1: config 0 descriptor?? [ 162.961980][ T6990] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.006472][ T5896] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.311620][ T794] usb 3-1: USB disconnect, device number 6 [ 163.451224][ T5896] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 163.486223][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.494253][ T5896] usb 5-1: Product: syz [ 163.515513][ T5896] usb 5-1: Manufacturer: syz [ 163.520525][ T5896] usb 5-1: SerialNumber: syz [ 163.542168][ T5896] usb 5-1: config 0 descriptor?? [ 163.560906][ T5896] hub 5-1:0.0: bad descriptor, ignoring hub [ 163.577455][ T5896] hub 5-1:0.0: probe with driver hub failed with error -5 [ 164.348231][ T5896] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 164.662495][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.917091][ T5896] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 164.925607][ T5896] usb 5-1: media controller created [ 164.977484][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.295809][ T5896] DVB: Unable to find symbol dib7000p_attach() [ 166.305790][ T5896] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 166.455709][ T5896] rc_core: IR keymap rc-dib0700-rc5 not found [ 166.519286][ T5896] Registered IR keymap rc-empty [ 166.559629][ T5896] dvb-usb: could not initialize remote control. [ 166.585739][ T5896] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 166.650384][ T5896] usb 5-1: USB disconnect, device number 7 [ 166.809884][ T5896] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 168.016778][ T6252] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.024313][ T794] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.235764][ T6252] usb 1-1: Using ep0 maxpacket: 32 [ 168.245262][ T794] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 168.265208][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.274511][ T6252] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 168.315451][ T794] usb 3-1: Product: syz [ 168.331966][ T794] usb 3-1: Manufacturer: syz [ 168.344997][ T6252] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 168.413730][ T794] usb 3-1: SerialNumber: syz [ 168.420698][ T6252] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 168.521025][ T6252] usb 1-1: Product: syz [ 168.964512][ T794] usb 3-1: config 0 descriptor?? [ 168.989347][ T6252] usb 1-1: Manufacturer: syz [ 168.996885][ T6252] usb 1-1: SerialNumber: syz [ 169.003549][ T794] hub 3-1:0.0: bad descriptor, ignoring hub [ 169.023957][ T6252] usb 1-1: config 0 descriptor?? [ 169.043889][ T794] hub 3-1:0.0: probe with driver hub failed with error -5 [ 169.052859][ T7062] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 169.386016][ T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 169.402219][ T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.402725][ T5896] usb 1-1: USB disconnect, device number 7 [ 169.449689][ T794] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 169.471163][ T794] usb 3-1: media controller created [ 169.528281][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.232749][ T794] DVB: Unable to find symbol dib7000p_attach() [ 170.328625][ T794] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 170.429893][ T7089] (syz.1.359,7089,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 170.965743][ T794] rc_core: IR keymap rc-dib0700-rc5 not found [ 170.978278][ T794] Registered IR keymap rc-empty [ 173.097437][ T7121] xt_hashlimit: max too large, truncated to 1048576 [ 173.829045][ T7135] (syz.4.375,7135,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 174.780495][ T794] dvb-usb: could not initialize remote control. [ 174.811433][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 174.857950][ T794] usb 3-1: USB disconnect, device number 7 [ 175.502017][ T794] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 176.279716][ T7166] xt_hashlimit: max too large, truncated to 1048576 [ 176.706551][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 177.131446][ T7175] could not allocate digest TFM handle crct10dif-arm64-ce [ 177.535750][ T794] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 177.703729][ T794] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 177.731516][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.746786][ T794] usb 3-1: Product: syz [ 177.751082][ T794] usb 3-1: Manufacturer: syz [ 177.757821][ T794] usb 3-1: SerialNumber: syz [ 177.773878][ T794] usb 3-1: config 0 descriptor?? [ 177.791107][ T794] hub 3-1:0.0: bad descriptor, ignoring hub [ 177.803420][ T794] hub 3-1:0.0: probe with driver hub failed with error -5 [ 179.210753][ T794] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 179.302585][ T7200] xt_hashlimit: max too large, truncated to 1048576 [ 179.348683][ T794] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 179.366153][ T794] dib0700: firmware download failed at 7 with -22 [ 179.439053][ T794] usb 3-1: USB disconnect, device number 8 [ 180.388871][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 180.553693][ T7226] could not allocate digest TFM handle crct10dif-arm64-ce [ 181.025062][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 182.960344][ T7255] blktrace: Concurrent blktraces are not allowed on nullb0 [ 184.765177][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 185.314635][ T7272] could not allocate digest TFM handle crct10dif-arm64-ce [ 185.625114][ T7282] tipc: Started in network mode [ 185.630490][ T7282] tipc: Node identity 46, cluster identity 4711 [ 185.637182][ T7282] tipc: Node number set to 70 [ 186.111161][ T7286] tipc: Started in network mode [ 186.116366][ T7286] tipc: Node identity eaa3d7bb2462, cluster identity 4711 [ 186.156076][ T7286] tipc: Enabled bearer , priority 0 [ 186.188822][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 186.218421][ T7286] tipc: Resetting bearer [ 186.431335][ T7292] blktrace: Concurrent blktraces are not allowed on nullb0 [ 186.891926][ T7284] tipc: Disabling bearer [ 187.092473][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.420'. [ 187.307476][ T7299] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 189.706211][ T7324] tipc: Started in network mode [ 189.711201][ T7324] tipc: Node identity 46, cluster identity 4711 [ 189.721457][ T7324] tipc: Node number set to 70 [ 190.145103][ T7329] capability: warning: `syz.1.432' uses deprecated v2 capabilities in a way that may be insecure [ 190.428702][ T7334] blktrace: Concurrent blktraces are not allowed on nullb0 [ 193.442515][ T7370] could not allocate digest TFM handle crct10dif-arm64-ce [ 193.863969][ T7389] blktrace: Concurrent blktraces are not allowed on nullb0 [ 194.333479][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342858][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.376753][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 196.380868][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 196.383498][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 196.389681][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 196.471751][ T5145] Bluetooth: hci3: command 0x0406 tx timeout [ 197.322652][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 197.777054][ T7423] could not allocate digest TFM handle crct10dif-arm64-ce [ 199.065617][ T6561] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.078243][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 199.194438][ T6561] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.410225][ T6561] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.509062][ T6561] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.778819][ T6561] bridge_slave_1: left allmulticast mode [ 199.784855][ T6561] bridge_slave_1: left promiscuous mode [ 199.810483][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.836981][ T6561] bridge_slave_0: left allmulticast mode [ 199.855786][ T6561] bridge_slave_0: left promiscuous mode [ 199.861530][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.054077][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.070954][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.084189][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.113598][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.114500][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.473'. [ 200.317559][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.581564][ T7459] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 201.484165][ T6561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.500785][ T6561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.512305][ T6561] bond0 (unregistering): Released all slaves [ 201.682246][ T6561] tipc: Left network mode [ 202.676958][ T5832] Bluetooth: hci2: command tx timeout [ 202.982948][ T6561] hsr_slave_0: left promiscuous mode [ 203.001127][ T6561] hsr_slave_1: left promiscuous mode [ 203.014835][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.046837][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.178562][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.209658][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.432572][ T6561] veth1_macvtap: left promiscuous mode [ 203.462951][ T6561] veth0_macvtap: left promiscuous mode [ 203.482851][ T6561] veth1_vlan: left promiscuous mode [ 203.501989][ T6561] veth0_vlan: left promiscuous mode [ 203.728840][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.483'. [ 204.121495][ T7509] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 204.775956][ T5832] Bluetooth: hci2: command tx timeout [ 205.117190][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 205.604226][ T7522] binder: 7521:7522 ioctl c0306201 0 returned -14 [ 205.796709][ T5953] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.140668][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 206.168457][ T5953] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 206.184081][ T5953] usb 1-1: config 0 has no interface number 0 [ 206.195861][ T5953] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 206.209480][ T5953] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 206.730884][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.739036][ T5953] usb 1-1: Product: syz [ 206.743247][ T5953] usb 1-1: Manufacturer: syz [ 206.751736][ T5953] usb 1-1: SerialNumber: syz [ 206.768926][ T5953] usb 1-1: config 0 descriptor?? [ 206.774612][ T7520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.855840][ T5839] Bluetooth: hci2: command tx timeout [ 206.996396][ T7520] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.006510][ T6561] team0 (unregistering): Port device team_slave_1 removed [ 207.062633][ T6561] team0 (unregistering): Port device team_slave_0 removed [ 207.883840][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 208.031107][ T5953] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 208.054332][ T5953] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 208.080616][ T5953] asix 1-1:0.188: probe with driver asix failed with error -32 [ 208.198775][ T7535] could not allocate digest TFM handle crct10dif-arm64-ce [ 208.333309][ T7530] bridge_slave_0: left allmulticast mode [ 208.339337][ T7530] bridge_slave_0: left promiscuous mode [ 208.357591][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.420227][ T7530] bridge_slave_1: left allmulticast mode [ 208.427299][ T7530] bridge_slave_1: left promiscuous mode [ 208.433149][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.448986][ T7530] bond0: (slave bond_slave_0): Releasing backup interface [ 208.466607][ T7530] bond0: (slave bond_slave_1): Releasing backup interface [ 208.503774][ T7530] team0: Port device team_slave_0 removed [ 208.531277][ T7530] team0: Port device team_slave_1 removed [ 208.551105][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.560698][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.573095][ T7530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.583022][ T7530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.595169][ T7530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.898042][ T7457] chnl_net:caif_netlink_parms(): no params data found [ 208.936105][ T5839] Bluetooth: hci2: command tx timeout [ 208.954596][ T7551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'. [ 209.440859][ T7554] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 209.552305][ T9] usb 1-1: USB disconnect, device number 8 [ 210.005306][ T7571] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 210.370342][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.405932][ T7457] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.484103][ T7457] bridge_slave_0: entered allmulticast mode [ 210.493956][ T7457] bridge_slave_0: entered promiscuous mode [ 210.703798][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.736953][ T7457] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.769946][ T7457] bridge_slave_1: entered allmulticast mode [ 210.799712][ T7457] bridge_slave_1: entered promiscuous mode [ 211.027424][ T7588] binder: 7587:7588 ioctl c0306201 0 returned -14 [ 211.179779][ T7457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.207121][ T7457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.514625][ T7457] team0: Port device team_slave_0 added [ 212.551529][ T7457] team0: Port device team_slave_1 added [ 212.718161][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.747722][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.865781][ T7457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.079379][ T7457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.166452][ T7457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.185728][ T7608] loop1: detected capacity change from 0 to 512 [ 213.284447][ T7608] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 213.322724][ T7608] EXT4-fs (loop1): 1 truncate cleaned up [ 213.344337][ T7608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.376106][ T7457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.406606][ T7608] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 213.493362][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.629852][ T7619] loop0: detected capacity change from 0 to 1024 [ 213.641729][ T7619] EXT4-fs: Ignoring removed bh option [ 213.678004][ T7619] EXT4-fs: inline encryption not supported [ 213.743187][ T7619] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.784942][ T7619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 213.819443][ T7619] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.504: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.844450][ T7619] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 213.914914][ T7619] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.504: lblock 0 mapped to illegal pblock 48 (length 1) [ 213.962635][ T7457] hsr_slave_0: entered promiscuous mode [ 213.976059][ T7619] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 213.995119][ T7457] hsr_slave_1: entered promiscuous mode [ 214.023226][ T7457] debugfs: 'hsr0' already exists in 'hsr' [ 214.036278][ T7619] EXT4-fs error (device loop0): ext4_acquire_dquot:6948: comm syz.0.504: Failed to acquire dquot type 0 [ 214.065711][ T7457] Cannot create hsr debugfs directory [ 214.114659][ T7619] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6316: Corrupt filesystem [ 214.143145][ T7619] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.504: mark_inode_dirty error [ 214.263582][ T7619] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 214.324768][ T7619] EXT4-fs (loop0): 1 orphan inode deleted [ 214.336396][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 214.382949][ T7619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.469784][ T6045] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 214.502896][ T6045] EXT4-fs error (device loop0): ext4_release_dquot:6984: comm kworker/u8:15: Failed to release dquot type 0 [ 214.536147][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 214.668085][ T7619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.701730][ T7619] EXT4-fs error (device loop0): __ext4_get_inode_loc:4836: comm syz.0.504: Invalid inode table block 1 in block_group 0 [ 214.768634][ T7619] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6316: Corrupt filesystem [ 214.821278][ T7457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.830270][ T7619] EXT4-fs error (device loop0): ext4_quota_off:7232: inode #3: comm syz.0.504: mark_inode_dirty error [ 214.881542][ T7457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.123907][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 215.758515][ T7457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.805151][ T7457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 216.093871][ T7660] binder: 7659:7660 ioctl c0306201 0 returned -14 [ 216.112266][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.168511][ T7457] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.209307][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.216473][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.250852][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.258054][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.330932][ T30] audit: type=1326 audit(1764014602.673:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.0.507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7b98f749 code=0x0 [ 216.613488][ T7457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.253890][ T7677] loop2: detected capacity change from 0 to 1024 [ 217.532349][ T7677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.597310][ T7690] overlayfs: failed to resolve './file1/file0': -2 [ 217.683651][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.880522][ T7699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.516'. [ 218.079877][ T7702] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 218.602241][ T7457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.297673][ T7457] veth0_vlan: entered promiscuous mode [ 220.343905][ T7457] veth1_vlan: entered promiscuous mode [ 220.423742][ T30] audit: type=1326 audit(1764014606.823:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.2.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24ed38f749 code=0x0 [ 220.469160][ T7457] veth0_macvtap: entered promiscuous mode [ 220.656724][ T7457] veth1_macvtap: entered promiscuous mode [ 220.984610][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.039636][ T7739] loop0: detected capacity change from 0 to 512 [ 221.041671][ T7457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.130631][ T7739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.266190][ T7739] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.318077][ T7746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 221.327628][ T7746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 221.486470][ T5976] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.659362][ T7744] loop2: detected capacity change from 0 to 512 [ 221.671297][ T5976] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.718428][ T5976] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.742687][ T5976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.757150][ T7744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.774080][ T7744] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.887502][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.931934][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.529'. [ 221.955947][ T5983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.231207][ T5983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.462389][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.824882][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.921468][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.336089][ T7775] overlayfs: failed to resolve './file1/file0': -2 [ 225.327866][ T7799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.541'. [ 225.824571][ T7800] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 227.063576][ T7816] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 227.700266][ T7829] blktrace: Concurrent blktraces are not allowed on nullb0 [ 228.582038][ T7846] loop0: detected capacity change from 0 to 512 [ 228.645128][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 229.230012][ T7846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.262366][ T7848] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 229.286000][ T7846] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.366776][ T30] audit: type=1800 audit(1764014615.763:8): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.550" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 229.508529][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.986538][ T7874] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 230.745609][ T7901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 231.292347][ T7904] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 231.623771][ T30] audit: type=1326 audit(1764014618.023:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 231.670559][ T7915] loop0: detected capacity change from 0 to 512 [ 231.747287][ T7915] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.568: EA inode hash validation failed [ 231.770579][ T30] audit: type=1326 audit(1764014618.063:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 231.815778][ T30] audit: type=1326 audit(1764014618.063:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 231.824016][ T7915] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 231.865835][ T30] audit: type=1326 audit(1764014618.063:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 231.904975][ T7915] EXT4-fs error (device loop0): ext4_do_update_inode:5635: inode #15: comm syz.0.568: corrupted inode contents [ 231.975598][ T30] audit: type=1326 audit(1764014618.063:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 232.043474][ T30] audit: type=1326 audit(1764014618.063:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 232.101739][ T30] audit: type=1326 audit(1764014618.063:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 232.134582][ T7915] EXT4-fs error (device loop0): ext4_dirty_inode:6520: inode #15: comm syz.0.568: mark_inode_dirty error [ 232.177109][ T30] audit: type=1326 audit(1764014618.063:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 232.177626][ T7915] EXT4-fs error (device loop0): ext4_do_update_inode:5635: inode #15: comm syz.0.568: corrupted inode contents [ 232.213798][ T30] audit: type=1326 audit(1764014618.073:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7912 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b98f749 code=0x7ffc0000 [ 232.276222][ T7915] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.568: mark_inode_dirty error [ 232.345550][ T7915] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.568: mark inode dirty (error -117) [ 232.434889][ T7915] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 232.490535][ T7915] EXT4-fs (loop0): 1 orphan inode deleted [ 232.573348][ T7915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.363570][ T7933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.690135][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.807672][ T7954] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 235.345896][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.583'. [ 235.916440][ T7967] could not allocate digest TFM handle crct10dif-arm64-ce [ 237.345967][ T6251] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 237.568309][ T6251] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.604695][ T6251] usb 1-1: New USB device found, idVendor=0a5c, idProduct=0bdc, bcdDevice=f0.66 [ 237.619583][ T6251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.632094][ T6251] usb 1-1: Product: syz [ 237.773476][ T6251] usb 1-1: Manufacturer: syz [ 237.795206][ T6251] usb 1-1: SerialNumber: syz [ 238.356744][ T6251] usb 1-1: config 0 descriptor?? [ 238.560075][ T8009] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 238.707620][ T6251] usb 1-1: USB disconnect, device number 9 [ 239.425817][ T5953] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 239.610394][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 239.657046][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 240.586579][ T5953] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 240.596016][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.619968][ T5953] usb 4-1: Product: syz [ 240.626036][ T5953] usb 4-1: Manufacturer: syz [ 240.642016][ T5953] usb 4-1: SerialNumber: syz [ 240.663448][ T5953] usb 4-1: config 0 descriptor?? [ 240.676930][ T8021] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.690201][ T5953] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 240.701152][ T5953] uvcvideo 4-1:0.0: No valid video chain found. [ 241.065824][ T6251] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 241.219474][ T6251] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 241.231873][ T6251] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.271980][ T6251] usb 6-1: Product: syz [ 241.341240][ T6251] usb 6-1: Manufacturer: syz [ 241.396825][ T6251] usb 6-1: SerialNumber: syz [ 241.461086][ T6251] usb 6-1: config 0 descriptor?? [ 241.531475][ T6251] hub 6-1:0.0: bad descriptor, ignoring hub [ 241.594092][ T6251] hub 6-1:0.0: probe with driver hub failed with error -5 [ 241.842101][ T6251] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 241.872833][ T6251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.915140][ T6251] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 241.948655][ T8066] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 242.099485][ T6251] usb 6-1: media controller created [ 242.346843][ T6251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.356479][ T8071] loop1: detected capacity change from 0 to 4096 [ 242.393780][ T8071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.475881][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.609427][ T6251] DVB: Unable to find symbol dib7000p_attach() [ 242.639881][ T6251] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 242.865907][ T6251] rc_core: IR keymap rc-dib0700-rc5 not found [ 242.872033][ T6251] Registered IR keymap rc-empty [ 243.024741][ T6251] dvb-usb: could not initialize remote control. [ 243.063532][ T6251] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 243.177857][ T6251] usb 6-1: USB disconnect, device number 2 [ 243.389099][ T6251] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 243.945261][ T7201] usb 4-1: USB disconnect, device number 8 [ 245.166957][ T8105] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 245.792346][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 245.792384][ T30] audit: type=1326 audit(1764014632.163:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.148582][ T30] audit: type=1326 audit(1764014632.163:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.171450][ T30] audit: type=1326 audit(1764014632.173:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.256789][ T8116] syz.5.620 (8116) used greatest stack depth: 16560 bytes left [ 246.389647][ T30] audit: type=1326 audit(1764014632.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.412141][ T30] audit: type=1326 audit(1764014632.173:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.434826][ T30] audit: type=1326 audit(1764014632.183:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.458740][ T30] audit: type=1326 audit(1764014632.513:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.557441][ T8120] xt_hashlimit: max too large, truncated to 1048576 [ 246.636314][ T30] audit: type=1326 audit(1764014632.513:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8106 comm="syz.5.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e6298f749 code=0x7ffc0000 [ 246.853703][ T5950] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 247.316825][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 247.344113][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 247.391157][ T5950] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 247.406135][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.420603][ T5950] usb 6-1: Product: syz [ 247.424951][ T5950] usb 6-1: Manufacturer: syz [ 247.450993][ T5950] usb 6-1: SerialNumber: syz [ 247.466859][ T5950] usb 6-1: config 0 descriptor?? [ 247.479940][ T8126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.508717][ T5950] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 247.540262][ T5950] uvcvideo 6-1:0.0: No valid video chain found. [ 248.171354][ T8152] loop6: detected capacity change from 0 to 524287487 [ 248.196549][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.208313][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.229701][ T8153] fuse: Bad value for 'fd' [ 248.234619][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.257668][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.278908][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.293406][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.332004][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.357973][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.382225][ T5837] ldm_validate_partition_table(): Disk read failed. [ 248.418951][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.438560][ T5837] Buffer I/O error on dev loop6, logical block 0, async page read [ 248.460704][ T5837] Dev loop6: unable to read RDB block 0 [ 248.481098][ T5837] loop6: unable to read partition table [ 248.497173][ T8152] ldm_validate_partition_table(): Disk read failed. [ 248.522243][ T8152] Dev loop6: unable to read RDB block 0 [ 248.531459][ T8146] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.537601][ T8146] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 248.547981][ T8146] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.553905][ T8146] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 248.562268][ T8146] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.568210][ T8146] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 248.576490][ T8146] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.582398][ T8146] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 248.590765][ T8146] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.597584][ T8146] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 248.645276][ T8152] loop6: unable to read partition table [ 248.682700][ T8152] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 248.778368][ T8155] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 249.297686][ T8162] xt_hashlimit: max too large, truncated to 1048576 [ 250.038789][ T8170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.643'. [ 250.432473][ T8181] loop6: detected capacity change from 0 to 524287487 [ 250.447340][ T8181] ldm_validate_partition_table(): Disk read failed. [ 250.487999][ T8181] Dev loop6: unable to read RDB block 0 [ 250.501325][ T8181] loop6: unable to read partition table [ 250.528685][ T8181] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 250.606640][ T8184] fuse: Bad value for 'fd' [ 250.612381][ T7201] usb 6-1: USB disconnect, device number 3 [ 251.399215][ T8199] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 252.799280][ T8224] loop0: detected capacity change from 0 to 512 [ 253.120378][ T8232] loop3: detected capacity change from 0 to 128 [ 253.478366][ T30] audit: type=1800 audit(1764014639.603:50): pid=8232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.666" name="bus" dev="loop3" ino=1048611 res=0 errno=0 [ 253.509781][ T8232] syz.3.666: attempt to access beyond end of device [ 253.509781][ T8232] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 253.806489][ T8224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.960804][ T8238] syzkaller0: entered promiscuous mode [ 253.966877][ T8238] syzkaller0: entered allmulticast mode [ 254.009809][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.022773][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 254.519180][ T8243] (syz.0.670,8243,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 254.776160][ T30] audit: type=1326 audit(1764014641.183:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8245 comm="syz.5.671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e6298f749 code=0x0 [ 255.756163][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774508][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.643361][ T8274] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 256.733181][ T8284] loop5: detected capacity change from 0 to 128 [ 257.641992][ T8284] syz.5.683: attempt to access beyond end of device [ 257.641992][ T8284] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 258.235396][ T30] audit: type=1800 audit(1764014644.023:52): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.683" name="bus" dev="loop5" ino=1048612 res=0 errno=0 [ 258.601435][ T8287] usb usb9: usbfs: process 8287 (syz.0.685) did not claim interface 0 before use [ 259.279412][ T30] audit: type=1326 audit(1764014645.683:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8296 comm="syz.1.689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff586b8f749 code=0x0 [ 259.929392][ T8310] blktrace: Concurrent blktraces are not allowed on nullb0 [ 260.498614][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'. [ 260.776832][ T8317] loop3: detected capacity change from 0 to 1024 [ 260.837656][ T8319] binder: 8313:8319 ioctl 4018620d 0 returned -22 [ 260.837905][ T8317] EXT4-fs: Ignoring removed oldalloc option [ 261.096108][ T8317] EXT4-fs: Ignoring removed bh option [ 261.323661][ T8317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.391935][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.167415][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 263.225871][ T30] audit: type=1326 audit(1764014649.523:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.0.703" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7b98f749 code=0x0 [ 263.261998][ T8353] xt_hashlimit: max too large, truncated to 1048576 [ 263.649108][ T8359] blktrace: Concurrent blktraces are not allowed on nullb0 [ 265.094156][ T8367] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 266.263736][ T8377] binder: 8371:8377 ioctl c0306201 0 returned -14 [ 267.473157][ T8398] xt_hashlimit: max too large, truncated to 1048576 [ 267.666313][ T8404] loop2: detected capacity change from 0 to 128 [ 267.896665][ T8406] blktrace: Concurrent blktraces are not allowed on nullb0 [ 269.051876][ T8404] syz.2.715: attempt to access beyond end of device [ 269.051876][ T8404] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 269.210960][ T30] audit: type=1800 audit(1764014655.173:55): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.715" name="bus" dev="loop2" ino=1048613 res=0 errno=0 [ 269.971552][ T30] audit: type=1326 audit(1764014656.373:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8410 comm="syz.5.720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e6298f749 code=0x0 [ 270.904301][ T8423] binder: 8421:8423 ioctl c0306201 0 returned -14 [ 271.647457][ T8434] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 273.588176][ T30] audit: type=1326 audit(1764014659.993:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8454 comm="syz.5.735" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e6298f749 code=0x0 [ 274.932503][ T8474] loop1: detected capacity change from 0 to 512 [ 275.021599][ T8474] EXT4-fs: Ignoring removed i_version option [ 275.047068][ T8474] EXT4-fs: Ignoring removed bh option [ 275.121503][ T8479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.741'. [ 275.154281][ T8474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.167446][ T8474] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.209983][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.218814][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.336669][ T8483] binder: 8481:8483 ioctl c0306201 0 returned -14 [ 275.370780][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.704267][ T8489] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 276.148091][ T8494] loop1: detected capacity change from 0 to 1024 [ 276.178638][ T8494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.238595][ T8494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 276.300579][ T8494] System zones: 0-1, 3-36 [ 276.320918][ T8494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.976495][ T30] audit: type=1326 audit(1764014663.383:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.2.750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24ed38f749 code=0x0 [ 277.004638][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.587139][ T8535] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 279.018169][ T8544] loop0: detected capacity change from 0 to 128 [ 279.224873][ T8544] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 279.349753][ T8544] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 279.896636][ T5983] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.543113][ T8579] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 283.243290][ T8587] (syz.2.777,8587,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 284.186249][ T5895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 284.885728][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 284.892706][ T5895] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 284.901300][ T5895] usb 6-1: config 0 has no interface number 0 [ 284.907468][ T5895] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 285.198583][ T5895] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 285.213921][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.224794][ T5895] usb 6-1: Product: syz [ 285.234502][ T5895] usb 6-1: Manufacturer: syz [ 285.239598][ T5895] usb 6-1: SerialNumber: syz [ 285.258974][ T5895] usb 6-1: config 0 descriptor?? [ 285.279209][ T8598] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.306702][ T5895] asix 6-1:0.188: probe with driver asix failed with error -22 [ 287.456444][ T5950] usb 6-1: USB disconnect, device number 4 [ 287.898866][ T8642] loop3: detected capacity change from 0 to 256 [ 288.796021][ T8642] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.807353][ T8642] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 290.577373][ T8642] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 290.591189][ T8642] exFAT-fs (loop3): failed to load alloc-bitmap [ 290.597782][ T8642] exFAT-fs (loop3): failed to recognize exfat type [ 290.854980][ T8640] (syz.1.793,8640,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 291.738029][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 292.865472][ T8675] loop3: detected capacity change from 0 to 512 [ 292.873600][ T8675] EXT4-fs: Ignoring removed bh option [ 293.000608][ T8675] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.805: Invalid inode bitmap blk 4 in block_group 0 [ 293.104784][ T8675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.847362][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.859840][ T8687] netlink: 44 bytes leftover after parsing attributes in process `syz.5.809'. [ 293.870103][ T8687] netlink: 43 bytes leftover after parsing attributes in process `syz.5.809'. [ 293.963696][ T8687] netlink: 'syz.5.809': attribute type 6 has an invalid length. [ 293.980414][ T8688] (syz.1.808,8688,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 294.001369][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 294.022387][ T8687] netlink: 'syz.5.809': attribute type 5 has an invalid length. [ 294.042924][ T8687] netlink: 43 bytes leftover after parsing attributes in process `syz.5.809'. [ 294.077183][ T8692] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 295.811359][ T10] IPVS: starting estimator thread 0... [ 295.828661][ T8723] vivid-007: disconnect [ 296.011644][ T8702] vivid-007: reconnect [ 296.076768][ T8724] IPVS: using max 32 ests per chain, 76800 per kthread [ 297.606321][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 297.702566][ T8742] loop1: detected capacity change from 0 to 256 [ 297.742327][ T8742] exfat: Bad value for 'uid' [ 297.751858][ T8742] exfat: Bad value for 'uid' [ 297.764572][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 297.838531][ T8735] could not allocate digest TFM handle crct10dif-arm64-ce [ 298.658514][ T8754] (syz.1.827,8754,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 300.121767][ T8771] loop3: detected capacity change from 0 to 128 [ 300.147608][ T30] audit: type=1800 audit(1764014686.553:59): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.833" name="bus" dev="loop3" ino=1048615 res=0 errno=0 [ 300.206480][ T8771] syz.3.833: attempt to access beyond end of device [ 300.206480][ T8771] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 300.275576][ T8775] loop1: detected capacity change from 0 to 512 [ 300.299005][ T8775] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 300.328676][ T8775] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 300.370585][ T8775] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.835: bad orphan inode 16 [ 300.392481][ T8775] ext4_test_bit(bit=15, block=4) = 0 [ 300.414980][ T8775] EXT4-fs (loop1): 1 orphan inode deleted [ 300.442874][ T8775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.546316][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.706762][ T8779] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 302.381798][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 303.344577][ T8804] binder: 8798:8804 ioctl c0306201 0 returned -14 [ 303.482509][ T8802] (syz.5.844,8802,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 303.640845][ T8808] syzkaller0: entered promiscuous mode [ 303.659071][ T8808] syzkaller0: entered allmulticast mode [ 303.708919][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.845'. [ 303.777294][ T8812] vivid-007: disconnect [ 303.923507][ T8794] vivid-007: reconnect [ 305.289353][ T8832] netlink: 'syz.5.852': attribute type 7 has an invalid length. [ 305.320657][ T8832] netlink: 'syz.5.852': attribute type 8 has an invalid length. [ 306.135329][ T8842] loop1: detected capacity change from 0 to 1024 [ 306.227654][ T8842] hfsplus: unable to change nls mapping [ 307.393008][ T8856] syzkaller0: entered promiscuous mode [ 307.398877][ T8856] syzkaller0: entered allmulticast mode [ 307.412350][ T8857] binder: 8849:8857 ioctl c0306201 0 returned -14 [ 307.514685][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 309.687814][ T8872] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 312.766588][ T8902] binder: 8897:8902 ioctl c0306201 0 returned -14 [ 312.802024][ T8901] tipc: Enabling of bearer rejected, failed to enable media [ 312.829511][ T8901] syzkaller0: entered promiscuous mode [ 312.855320][ T8901] syzkaller0: entered allmulticast mode [ 312.887941][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.873'. [ 313.770434][ T8912] vivid-007: disconnect [ 313.809596][ T794] IPVS: starting estimator thread 0... [ 314.163340][ T8894] vivid-007: reconnect [ 314.245916][ T8913] IPVS: using max 28 ests per chain, 67200 per kthread [ 315.356527][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 316.727641][ T8952] tipc: Enabling of bearer rejected, failed to enable media [ 316.829074][ T8954] syzkaller0: entered promiscuous mode [ 316.834584][ T8954] syzkaller0: entered allmulticast mode [ 316.876416][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'. [ 317.227028][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.975710][ T8974] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 318.995746][ T5963] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 319.828227][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 319.856427][ T5963] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 319.875797][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.893200][ T9001] vivid-007: disconnect [ 319.899114][ T5989] IPVS: starting estimator thread 0... [ 319.900657][ T5963] usb 3-1: config 0 descriptor?? [ 320.035924][ T9002] IPVS: using max 33 ests per chain, 79200 per kthread [ 320.109139][ T8981] vivid-007: reconnect [ 320.480591][ T9022] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 320.745694][ T5963] usbhid 3-1:0.0: can't add hid device: -71 [ 320.783855][ T5963] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 320.824468][ T5963] usb 3-1: USB disconnect, device number 9 [ 323.237127][ T9060] loop2: detected capacity change from 0 to 16 [ 323.275151][ T5837] udevd[5837]: incorrect erofs checksum on /dev/loop2 [ 324.066199][ T9067] Driver unsupported XDP return value 0 on prog (id 111) dev N/A, expect packet loss! [ 325.952508][ T9071] vivid-007: disconnect [ 325.997464][ T5963] IPVS: starting estimator thread 0... [ 326.106829][ T9091] IPVS: using max 27 ests per chain, 64800 per kthread [ 326.116904][ T9068] vivid-007: reconnect [ 326.144736][ T9095] loop3: detected capacity change from 0 to 256 [ 326.716499][ T9100] loop2: detected capacity change from 0 to 128 [ 326.724488][ T9100] vfat: Unknown parameter 'uni_xl%PB^cwiet' [ 327.044840][ T9103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.052336][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 327.059686][ T9103] IPv6: NLM_F_CREATE should be set when creating new route [ 330.689058][ T9136] loop1: detected capacity change from 0 to 128 [ 330.696230][ T9136] vfat: Unknown parameter 'uni_xl%PB^cwiet' [ 330.937586][ T9142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.944832][ T9142] IPv6: NLM_F_CREATE should be set when creating new route [ 330.952122][ T9142] IPv6: NLM_F_CREATE should be set when creating new route [ 333.696488][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 334.035745][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 334.047483][ T24] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 334.056144][ T24] usb 1-1: config 0 has no interface number 0 [ 334.062616][ T24] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 334.638603][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 334.695817][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.724303][ T24] usb 1-1: Product: syz [ 334.744590][ T24] usb 1-1: Manufacturer: syz [ 334.761509][ T24] usb 1-1: SerialNumber: syz [ 334.787475][ T24] usb 1-1: config 0 descriptor?? [ 334.791849][ T9160] vivid-007: disconnect [ 334.812344][ T9163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 334.834394][ T9182] loop2: detected capacity change from 0 to 1024 [ 334.834402][ T9186] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 334.920909][ T9157] vivid-007: reconnect [ 335.036501][ T9163] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.318847][ T24] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 335.628948][ T24] asix 1-1:0.188: probe with driver asix failed with error -61 [ 336.192964][ T6561] hfsplus: b-tree write err: -5, ino 8 [ 336.492277][ T9203] xt_socket: unknown flags 0x48 [ 337.286652][ T6251] usb 1-1: USB disconnect, device number 10 [ 339.465436][ T9238] loop3: detected capacity change from 0 to 128 [ 339.511416][ T9238] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 339.578879][ T9238] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.944115][ T794] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 340.256071][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 340.397115][ T9256] vivid-007: disconnect [ 340.495763][ T794] usb 6-1: Using ep0 maxpacket: 16 [ 340.496269][ T5825] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.511816][ T794] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 340.520256][ T9240] vivid-007: reconnect [ 340.523295][ T794] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 340.702562][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.735802][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 340.742835][ T794] usb 6-1: config 0 descriptor?? [ 340.764698][ T24] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 340.790302][ T24] usb 2-1: config 179 has no interface number 0 [ 340.807160][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 340.821637][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 340.842980][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 340.864039][ T24] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 340.878507][ T24] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.907640][ T24] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.918010][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.931693][ T9249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 340.974602][ T794] usb 6-1: string descriptor 0 read error: -71 [ 341.000693][ T794] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 341.041657][ T5180] bcm5974 6-1:0.0: could not read from device [ 341.055860][ T5989] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 341.076110][ T5180] bcm5974 6-1:0.0: could not read from device [ 341.101390][ T794] usb 6-1: USB disconnect, device number 5 [ 341.108493][ T5180] bcm5974 6-1:0.0: could not read from device [ 341.136435][ T5180] bcm5974 6-1:0.0: could not read from device [ 341.179321][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.205069][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.237854][ T5989] usb 4-1: not running at top speed; connect to a high speed hub [ 341.264195][ T5989] usb 4-1: config 0 has no interfaces? [ 341.294280][ T5989] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 341.322435][ T5989] usb 4-1: New USB device strings: Mfr=237, Product=1, SerialNumber=3 [ 341.341756][ T5989] usb 4-1: Manufacturer: syz [ 341.348048][ T5989] usb 4-1: SerialNumber: 䯜磊㭵㠜䥅Ⱨᅼ栍뢫苙ｅ⟊믂哽闲翂 [ 341.362435][ T5989] usb 4-1: config 0 descriptor?? [ 341.457303][ T5989] usb 2-1: USB disconnect, device number 6 [ 341.457378][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 341.457429][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 341.516653][ T5950] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 341.581448][ T5980] usb 4-1: USB disconnect, device number 9 [ 341.676509][ T5950] usb 3-1: Using ep0 maxpacket: 8 [ 341.683374][ T5950] usb 3-1: descriptor type invalid, skip [ 341.689280][ T5950] usb 3-1: descriptor type invalid, skip [ 341.695003][ T5950] usb 3-1: descriptor type invalid, skip [ 341.701854][ T5950] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 341.711737][ T5950] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 341.721768][ T5950] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 341.818260][ T5950] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.827602][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.835832][ T5950] usb 3-1: Product: syz [ 341.840078][ T5950] usb 3-1: Manufacturer: syz [ 341.844706][ T5950] usb 3-1: SerialNumber: syz [ 342.064736][ T5950] cdc_ncm 3-1:1.0: bind() failure [ 342.084168][ T5950] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 342.093832][ T5950] cdc_ncm 3-1:1.1: bind() failure [ 342.109104][ T5950] usb 3-1: USB disconnect, device number 10 [ 342.366621][ T9278] loop3: detected capacity change from 0 to 512 [ 342.423781][ T9278] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 344.206598][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 345.552513][ T9321] loop3: detected capacity change from 0 to 128 [ 345.560352][ T9321] vfat: Unknown parameter 'uni_xl%PB^cwiet' [ 346.040482][ T9327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.047770][ T9327] IPv6: NLM_F_CREATE should be set when creating new route [ 346.055005][ T9327] IPv6: NLM_F_CREATE should be set when creating new route [ 347.204564][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 347.274820][ T9348] (syz.3.1018,9348,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 347.325993][ T8407] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 347.358922][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 347.505968][ T8407] usb 6-1: Using ep0 maxpacket: 8 [ 347.940092][ T8407] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 347.954202][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 347.979890][ T8407] usb 6-1: config 179 has no interface number 0 [ 347.994538][ T8407] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 348.007350][ T8407] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 348.019277][ T8407] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.032503][ T8407] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 348.102335][ T8407] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 348.259063][ T8407] usb 6-1: config 179 interface 65 has no altsetting 0 [ 348.274455][ T8407] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 348.881161][ T8407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.937674][ T8407] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input17 [ 349.167957][ T8407] usb 6-1: USB disconnect, device number 6 [ 349.218659][ T9363] loop2: detected capacity change from 0 to 128 [ 349.225917][ T9363] vfat: Unknown parameter 'uni_xl%PB^cwiet' [ 349.459830][ T9365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.247549][ T30] audit: type=1326 audit(1764014736.633:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ed38f749 code=0x7ffc0000 [ 350.330797][ T30] audit: type=1326 audit(1764014736.633:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ed38f749 code=0x7ffc0000 [ 350.565831][ T30] audit: type=1326 audit(1764014736.643:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f24ed38f749 code=0x7ffc0000 [ 350.625345][ T30] audit: type=1326 audit(1764014736.643:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ed38f749 code=0x7ffc0000 [ 350.649057][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 350.671307][ T30] audit: type=1326 audit(1764014736.643:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24ed38f749 code=0x7ffc0000 [ 351.026168][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 351.255748][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 351.267923][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.288877][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.309069][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 351.323847][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 351.338126][ T10] usb 6-1: Product: syz [ 351.348152][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 351.359663][ T10] usb 6-1: Manufacturer: syz [ 351.383222][ T10] hub 6-1:4.0: USB hub found [ 351.584486][ T10] hub 6-1:4.0: 2 ports detected [ 351.784609][ T10] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 351.823419][ T10] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 351.833958][ T9416] xt_hashlimit: max too large, truncated to 1048576 [ 351.857638][ T10] usb 6-1: USB disconnect, device number 7 [ 351.868463][ T9418] netlink: 'syz.3.1049': attribute type 5 has an invalid length. [ 352.224911][ T9425] loop3: detected capacity change from 0 to 128 [ 352.307493][ T30] audit: type=1800 audit(1764014738.683:65): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1052" name="bus" dev="loop3" ino=1048630 res=0 errno=0 [ 352.315990][ T9425] syz.3.1052: attempt to access beyond end of device [ 352.315990][ T9425] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 354.110738][ T9435] loop3: detected capacity change from 0 to 512 [ 354.218017][ T9435] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 354.269271][ T9435] EXT4-fs (loop3): mount failed [ 354.585496][ T9445] loop2: detected capacity change from 0 to 512 [ 354.596891][ T9445] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.627750][ T9445] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1059: inode has both inline data and extents flags [ 354.659594][ T9445] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1059: couldn't read orphan inode 15 (err -117) [ 354.677965][ T9445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.819724][ T9445] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1059: inode has both inline data and extents flags [ 354.927643][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.013900][ T9451] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 355.667047][ T9453] xt_hashlimit: max too large, truncated to 1048576 [ 355.979817][ T9461] loop2: detected capacity change from 0 to 256 [ 356.001937][ T9461] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.034229][ T9461] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 356.050664][ T9461] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 356.075841][ T9461] exFAT-fs (loop2): failed to load alloc-bitmap [ 356.085876][ T9461] exFAT-fs (loop2): failed to recognize exfat type [ 356.375868][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 356.501473][ T9467] loop2: detected capacity change from 0 to 128 [ 356.515468][ T9467] ext4: Unknown parameter 'seclabel' [ 356.546803][ T9467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 356.570999][ T9467] No such timeout policy "syz1" [ 357.043237][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.075762][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.095497][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.135811][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.149545][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.167728][ T10] usb 4-1: config 0 descriptor?? [ 357.773108][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 358.238289][ T9485] xt_hashlimit: max too large, truncated to 1048576 [ 358.259592][ T9489] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 358.462492][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 358.524143][ T9498] syzkaller0: entered promiscuous mode [ 358.530497][ T9498] syzkaller0: entered allmulticast mode [ 358.568750][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 358.623605][ T9500] loop5: detected capacity change from 0 to 512 [ 358.643725][ T9500] EXT4-fs (loop5): Test dummy encryption mode enabled [ 358.653739][ T9500] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 358.665919][ T9500] EXT4-fs (loop5): SIPHASH is not a valid default hash value [ 359.335767][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 359.477320][ T8407] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 359.663065][ T9503] could not allocate digest TFM handle crct10dif-arm64-ce [ 360.007701][ T9521] xt_hashlimit: max too large, truncated to 1048576 [ 360.643900][ T10] usb 4-1: USB disconnect, device number 10 [ 360.793194][ T9528] loop2: detected capacity change from 0 to 128 [ 360.933434][ T9528] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.055932][ T9528] ext4 filesystem being mounted at /211/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 361.400675][ T9540] loop3: detected capacity change from 0 to 1024 [ 362.063853][ T5980] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 362.202665][ T5980] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.267142][ T9547] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 362.364591][ T6230] hfsplus: b-tree write err: -5, ino 4 [ 362.384805][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.397317][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.699204][ T9550] fido_id[9550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 364.163841][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 364.297079][ T9570] xt_hashlimit: max too large, truncated to 1048576 [ 364.317573][ T9560] could not allocate digest TFM handle crct10dif-arm64-ce [ 365.246620][ T9580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.287643][ T9582] netlink: 'syz.2.1104': attribute type 1 has an invalid length. [ 365.415965][ T9586] loop1: detected capacity change from 0 to 128 [ 365.505152][ T9586] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.529799][ T9588] syzkaller0: entered promiscuous mode [ 365.549107][ T9586] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 365.582583][ T9592] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 365.617464][ T9588] syzkaller0: entered allmulticast mode [ 365.639719][ T9597] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 365.886046][ T9588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 369.468424][ T9611] loop5: detected capacity change from 0 to 2048 [ 369.521882][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.596417][ T9611] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 369.604142][ T9611] UDF-fs: Scanning with blocksize 512 failed [ 369.679455][ T9611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.141673][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 370.276990][ T30] audit: type=1800 audit(1764014756.553:66): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1111" name="file2" dev="loop5" ino=819 res=0 errno=0 [ 370.387358][ T9626] xt_hashlimit: max too large, truncated to 1048576 [ 370.555351][ T9621] could not allocate digest TFM handle crct10dif-arm64-ce [ 370.686304][ T5989] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.909447][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 370.934825][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 370.968339][ T5989] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 371.016599][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.024678][ T5989] usb 2-1: Product: syz [ 371.035790][ T5989] usb 2-1: Manufacturer: syz [ 371.040432][ T5989] usb 2-1: SerialNumber: syz [ 371.059131][ T5989] usb 2-1: config 0 descriptor?? [ 371.072001][ T9628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.088988][ T5989] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 371.106166][ T5989] uvcvideo 2-1:0.0: No valid video chain found. [ 371.640894][ T9636] erofs (device nbd3): cannot find valid erofs superblock [ 372.023380][ T9656] loop2: detected capacity change from 0 to 128 [ 372.071041][ T9656] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.103324][ T9656] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 372.172283][ T9661] loop6: detected capacity change from 0 to 524287487 [ 372.223862][ T9661] buffer_io_error: 40 callbacks suppressed [ 372.223881][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 372.519453][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 372.959610][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.976083][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.011584][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.066265][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.086572][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.124425][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.179662][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.201837][ T9661] ldm_validate_partition_table(): Disk read failed. [ 373.223069][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.257948][ T9661] Buffer I/O error on dev loop6, logical block 0, async page read [ 373.284921][ T9661] Dev loop6: unable to read RDB block 0 [ 373.314682][ T9661] loop6: unable to read partition table [ 373.335488][ T9661] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 374.013930][ T9672] loop2: detected capacity change from 0 to 512 [ 374.050581][ T9674] xt_hashlimit: max too large, truncated to 1048576 [ 374.181055][ T9677] syzkaller0: entered promiscuous mode [ 374.205946][ T9677] syzkaller0: entered allmulticast mode [ 374.227471][ T9672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.275550][ T9672] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.291662][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 375.143620][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.455004][ T9691] loop2: detected capacity change from 0 to 512 [ 375.476664][ T9691] EXT4-fs: Ignoring removed i_version option [ 375.482677][ T9691] EXT4-fs: Ignoring removed bh option [ 375.643450][ T9691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.784631][ T9691] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 376.369123][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.460122][ T9703] loop6: detected capacity change from 0 to 524287487 [ 376.494955][ T9703] ldm_validate_partition_table(): Disk read failed. [ 376.526320][ T9703] Dev loop6: unable to read RDB block 0 [ 377.290213][ T9703] buffer_io_error: 19 callbacks suppressed [ 377.290231][ T9703] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.305723][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 377.337017][ T9708] xt_hashlimit: max too large, truncated to 1048576 [ 377.437673][ T9703] Buffer I/O error on dev loop6, logical block 3, async page read [ 377.593495][ T9703] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.606215][ T9703] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.628973][ T9703] loop6: unable to read partition table [ 377.651124][ T9703] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 377.674462][ T5841] Buffer I/O error on dev loop6, logical block 0, async page read [ 377.881045][ T9721] syzkaller0: entered promiscuous mode [ 377.895590][ T9721] syzkaller0: entered allmulticast mode [ 378.013443][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1143'. [ 378.175836][ T5895] usb 2-1: USB disconnect, device number 7 [ 378.202097][ T9724] erofs (device nbd2): cannot find valid erofs superblock [ 378.631265][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.637938][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.846379][ T9743] netlink: 'syz.0.1148': attribute type 4 has an invalid length. [ 487.875694][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 487.882939][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6212/1:b..l [ 487.891493][ C0] rcu: (detected by 0, t=10502 jiffies, g=34761, q=328 ncpus=2) [ 487.899495][ C0] task:udevd state:R running task stack:22728 pid:6212 tgid:6212 ppid:5195 task_flags:0x40014c flags:0x00080000 [ 487.914228][ C0] Call Trace: [ 487.917531][ C0] [ 487.920568][ C0] __schedule+0x14bc/0x5030 [ 487.925203][ C0] ? __pfx___schedule+0x10/0x10 [ 487.930060][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 487.935347][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 487.940561][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 487.945870][ C0] preempt_schedule_irq+0xb5/0x150 [ 487.950988][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 487.956721][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 487.962624][ C0] irqentry_exit+0x5d8/0x660 [ 487.967238][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.973239][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x83/0x90 [ 487.980110][ C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c8 0d 9d 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 487.999729][ C0] RSP: 0018:ffffc9000c027450 EFLAGS: 00000293 [ 488.005903][ C0] RAX: ffffffff82340592 RBX: ffff88801bb80000 RCX: 0000000000000000 [ 488.013902][ C0] RDX: ffff88803435bd00 RSI: 0000000000000001 RDI: 0000000000000000 [ 488.021877][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8232572e [ 488.029856][ C0] R10: 000000000000000e R11: ffffffff81adcc30 R12: 000000000006b06d [ 488.037841][ C0] R13: dffffc0000000000 R14: ffff88813fffa5b0 R15: 0000000000001000 [ 488.045840][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 488.052013][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 488.058265][ C0] ? page_ext_lookup+0xf2/0x180 [ 488.063130][ C0] page_ext_lookup+0xf2/0x180 [ 488.067818][ C0] ? __update_page_owner_free_handle+0x2e/0x470 [ 488.074067][ C0] __update_page_owner_free_handle+0x103/0x470 [ 488.080232][ C0] ? page_ext_put+0x97/0xc0 [ 488.084751][ C0] __reset_page_owner+0x85/0x1f0 [ 488.089700][ C0] free_unref_folios+0xd22/0x1470 [ 488.094739][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 488.101219][ C0] ? __page_cache_release+0x8a6/0xbb0 [ 488.106647][ C0] folios_put_refs+0x584/0x670 [ 488.112140][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 488.118297][ C0] ? free_swap_cache+0x109/0x300 [ 488.123269][ C0] free_pages_and_swap_cache+0x277/0x520 [ 488.129005][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 488.135175][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 488.140422][ C0] ? tlb_table_flush+0x36d/0x410 [ 488.145379][ C0] tlb_flush_mmu+0x3a0/0x680 [ 488.149993][ C0] ? __pfx_down_write+0x10/0x10 [ 488.154872][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 488.159481][ C0] exit_mmap+0x439/0xb40 [ 488.163735][ C0] ? uprobe_clear_state+0x20f/0x290 [ 488.168943][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 488.173797][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 488.179446][ C0] ? __pfx_exit_aio+0x10/0x10 [ 488.184147][ C0] ? uprobe_clear_state+0x27c/0x290 [ 488.189361][ C0] __mmput+0x118/0x430 [ 488.193441][ C0] exit_mm+0x1da/0x2c0 [ 488.197516][ C0] ? __pfx_exit_mm+0x10/0x10 [ 488.202114][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 488.207615][ C0] do_exit+0x658/0x2310 [ 488.211975][ C0] ? __pfx_do_exit+0x10/0x10 [ 488.216673][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.221885][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.227152][ C0] do_group_exit+0x21c/0x2d0 [ 488.231752][ C0] __x64_sys_exit_group+0x3f/0x40 [ 488.236783][ C0] x64_sys_call+0x2210/0x2210 [ 488.241465][ C0] do_syscall_64+0xfa/0xfa0 [ 488.246068][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.252153][ C0] ? clear_bhb_loop+0x60/0xb0 [ 488.256842][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.262824][ C0] RIP: 0033:0x7f75f1cf16c5 [ 488.267429][ C0] RSP: 002b:00007fff84218258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 488.275935][ C0] RAX: ffffffffffffffda RBX: 0000560252c5ec60 RCX: 00007f75f1cf16c5 [ 488.283914][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 488.291888][ C0] RBP: 0000560252c57910 R08: 0000000000000000 R09: 0000000000000000 [ 488.300298][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.308281][ C0] R13: 00007fff842182a0 R14: 0000000000000000 R15: 0000000000000000 [ 488.316278][ C0] [ 488.319305][ C0] rcu: rcu_preempt kthread starved for 10543 jiffies! g34761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 488.330497][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 488.340552][ C0] rcu: RCU grace-period kthread stack dump: [ 488.346449][ C0] task:rcu_preempt state:R running task stack:27208 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 488.360033][ C0] Call Trace: [ 488.363314][ C0] [ 488.366257][ C0] __schedule+0x14bc/0x5030 [ 488.370796][ C0] ? __pfx___schedule+0x10/0x10 [ 488.375675][ C0] ? schedule+0x91/0x360 [ 488.379922][ C0] schedule+0x165/0x360 [ 488.384087][ C0] schedule_timeout+0x12b/0x270 [ 488.388948][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 488.394417][ C0] ? __pfx_process_timeout+0x10/0x10 [ 488.399715][ C0] ? prepare_to_swait_event+0x341/0x380 [ 488.405276][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 488.410143][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 488.415092][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.420298][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 488.425592][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 488.430804][ C0] ? finish_swait+0xcd/0x1f0 [ 488.435397][ C0] rcu_gp_kthread+0x99/0x390 [ 488.440001][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 488.445299][ C0] ? __kthread_parkme+0x7b/0x200 [ 488.450334][ C0] ? __kthread_parkme+0x1a1/0x200 [ 488.455368][ C0] kthread+0x711/0x8a0 [ 488.459442][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 488.464647][ C0] ? __pfx_kthread+0x10/0x10 [ 488.469329][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.474714][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.479935][ C0] ? __pfx_kthread+0x10/0x10 [ 488.484558][ C0] ret_from_fork+0x599/0xb30 [ 488.489177][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 488.494310][ C0] ? __switch_to_asm+0x39/0x70 [ 488.499078][ C0] ? __switch_to_asm+0x33/0x70 [ 488.504122][ C0] ? __pfx_kthread+0x10/0x10 [ 488.508718][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.513534][ C0] [ 488.516568][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 488.522916][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 488.531857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.542012][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 488.547750][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 40 0c 00 f3 0f 1e fa fb f4 c8 f2 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 488.567449][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 488.573520][ C0] RAX: 1d4492d8b64a4700 RBX: ffffffff8197a977 RCX: 1d4492d8b64a4700 [ 488.581495][ C0] RDX: 0000000000000001 RSI: ffffffff8d790e8f RDI: ffffffff8bbf7760 [ 488.589487][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 488.597459][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f7df370 [ 488.605439][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a60 [ 488.613416][ C0] FS: 0000000000000000(0000) GS:ffff888125eb8000(0000) knlGS:0000000000000000 [ 488.622530][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.629297][ C0] CR2: 0000560252c60a38 CR3: 00000000519da000 CR4: 00000000003526f0 [ 488.637366][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 488.645433][ C0] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 488.653407][ C0] Call Trace: [ 488.656691][ C0] [ 488.659625][ C0] default_idle+0x13/0x20 [ 488.663963][ C0] default_idle_call+0x73/0xb0 [ 488.668754][ C0] do_idle+0x1e7/0x510 [ 488.672850][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.678105][ C0] ? __pfx_do_idle+0x10/0x10 [ 488.682723][ C0] ? do_idle+0x4e7/0x510 [ 488.687113][ C0] cpu_startup_entry+0x44/0x60 [ 488.691894][ C0] rest_init+0x2de/0x300 [ 488.696148][ C0] start_kernel+0x3a7/0x410 [ 488.700657][ C0] x86_64_start_reservations+0x24/0x30 [ 488.706230][ C0] x86_64_start_kernel+0x143/0x1c0 [ 488.711350][ C0] common_startup_64+0x13e/0x147 [ 488.716309][ C0]