last executing test programs: 15.24744541s ago: executing program 2 (id=428): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="9d75550c0be98eb0f1234dece90b4469030ca93921f83baced6cad9f9110c04e399541e21e05f4c0fe5c3e1dda7baecc43bd0ef8f24a1a645630", @ANYRES8], 0x88, 0x2a9, &(0x7f0000000300)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x396) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x541, 0x1001, r3, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) 11.834349368s ago: executing program 3 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) read$char_usb(r5, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 11.463337749s ago: executing program 1 (id=439): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 11.208331237s ago: executing program 1 (id=440): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002cc0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x1, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ff8, 0x2, 0x3, 0x7, 0x40, 0x1000007, 0x1, 0xfffe, 0xffffffab, 0x7ffffff9, 0x1ef, 0x200009ea, 0x20000012, 0x55, 0x8, 0x8, 0x746f, 0x8, 0xc, 0x6, 0xee, 0x2, 0x7ffd, 0x1]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/4, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0xffff}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10.132838591s ago: executing program 2 (id=441): syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c000b80080009004caa"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 10.122464202s ago: executing program 1 (id=442): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x4) 8.771253504s ago: executing program 3 (id=444): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 8.707705586s ago: executing program 0 (id=445): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0xea60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000900)={0x18, r2, 0x1000, 0x1004000}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 8.512187092s ago: executing program 0 (id=446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 8.491384953s ago: executing program 3 (id=447): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0xea60) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) 7.468046895s ago: executing program 0 (id=448): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r0, 0x40047457, 0x0) 7.196213494s ago: executing program 0 (id=449): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000040)=ANY=[@ANYBLOB="9d75550c0be98eb0f1234dece90b4469030ca93921f83baced6cad9f9110c04e399541e21e05f4c0fe5c3e1dda7baecc43bd0ef8f24a1a645630", @ANYRES8], 0x88, 0x2a9, &(0x7f0000000300)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x396) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x541, 0x1001, r3, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) 6.740716568s ago: executing program 1 (id=450): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.658484341s ago: executing program 2 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xf, 0xbe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0|\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x14\xcd>i\xe4\xf5\x1dr\x16)Gj\xbf\x99[&u\xad\x93\x8fC\xb6q\xcf\x1f\xbc\xa3\xe5\xa5\xf0\x8b\xa3\xcd\xd5\xd5\xc0Hi\xf0Y\x93#h\x99\x83\xaf\xf6\xee\x91\xb6\xab2\xaa4/!ul\xe1\xa6\xd8\x93\xef9\xea\xb4p\xad\xfeT\x8b\xb7j\xe9\x92\x98#g$\xdee^E\xe1\x88l\x829T\xf9\x85\xb3jC\"\xc3ra\x002\xfe\x8e^\xdc\xc2\xdc\xc8\xf3\xa8@~\xac_\x8bL\xa1\xbde2k\x92\xc3\xc8\xfa\x85u\x9c\xe2\x8e\xa7\xdb\xb9Q=n\xe0]\xa8\x88\xf8\xc9\x8b\xb2\xd5\xfb\x99', 0x1) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000740)={0x1, @vbi={0x1000, 0x6, 0x1, 0x41495043, [0x9, 0x2dd], [0x7ff, 0x1], 0x1}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$eJzslb9uE0EQxn97t/HFYKTUVJGwSBqI7UiIMl1egAfAco5g5cwfnyWwZcmGJg00vEQkaioqCiToKRAC0SQFSDRBVEHI6G5nz3dgOzYK3X2SPd/OfjO7e7uzezu8H3rAr+N+gxViKEp8VAoNrCnjOykY+13sSPBFm3ZV/M/FHokNu713Twzt7dWDwG+H3WnEIyZKwVSNJTIs1ta3X6ZEesJgVnlq6rePsx7FRLEDzF7PWRIHZVc67uq4xvV31CDj8eh9GmuKhpjYItMH9WZ/sQvZrv6LOZdTlLR/djljjYOQ1XnOTWalhvwoZT5U8HVilNob/OumLPG/9x1iEm3uzxIztsmQD88mf9WYuBJelPMT7exi81HMJ36a9XQNkctgoa08mniwx4fE4/Q8oa2acPuRraD3x/1GxG4CWzKvHfOTcjKaqPFabrrId1HDEJTLSFmNhq2osQZsdFr3NsJu70qzVd/1d/07tdrmtcqb81KiowE0A7+ylBoiKeohCc6l+iPtZ510pVTEkXZqEqcKmLlpJQKJXb9krGsqHicVm85h8r5KlmcvAJcWN7jMMvBgqFahJtnKRNnccbCL5lYz8Ks6NU84wWE57rjauBvs7KNQoqwcoHFs2CFLSaOGaUTp/c3ryfL3xZbj/+Vk6gdiD8Xat8u+STrO8E1a60Mo8LDe6bTt40W7mvhqBY2wlWRkR0a1r6G9k8se80MtoM2RI0eOHDly5Dhz/A4AAP//Z98fTg==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) prlimit64(r7, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4040) 6.436050018s ago: executing program 3 (id=452): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 5.018939772s ago: executing program 3 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) read$char_usb(r5, &(0x7f00000002c0)=""/151, 0x97) close_range(r0, 0xffffffffffffffff, 0x0) 3.83634368s ago: executing program 1 (id=454): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0xfffffffc}}) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3.728318353s ago: executing program 0 (id=455): setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() creat(&(0x7f00000018c0)='./file0/file0\x00', 0x5) sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, &(0x7f0000000140)) keyctl$chown(0x4, r4, 0xee01, r5) keyctl$setperm(0x5, r4, 0x30925) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x160, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 3.414522963s ago: executing program 2 (id=456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) 1.688946127s ago: executing program 2 (id=457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047457, 0x0) 991.754289ms ago: executing program 3 (id=458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x9c, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4f19, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b939768da4eb769e30380c668b25a078ec5a344fd251258940519fd9f98c20a6", "fe1ecf99b7d24b9e0eda5a31dbb8363d72ee3d6a0300000000000000615df3bc219f61fb48b783a2219d3aec10d101af", "55439960afb00f365020855fc66ac49d3ed9f31cc19932931e5dcdbb", {"2a3bab959da83c381f80b89802e6b64a", "c8b36008601470edfa11ce4cae9252e4"}}}}}}}}}, 0xd6) 528.285684ms ago: executing program 2 (id=459): syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c000b80080009004caa"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 350.741519ms ago: executing program 1 (id=460): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x2) fallocate(r1, 0x0, 0x1, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x4000) writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000012380)='X\x00', 0x2}], 0x1) fallocate(r0, 0x10, 0x8800, 0x8000) 0s ago: executing program 0 (id=461): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0xea60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000500)={0x18, 0x0, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000900)={0x18, r3, 0x1000, 0x1004000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 71.391027][ T5765] cgroup: Unknown subsys name 'net' [ 71.533493][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.163563][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.547958][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.557247][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.563426][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.572221][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.575910][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.587723][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.588426][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.596630][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.602627][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.610817][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.616721][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.624335][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.630173][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.637874][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.646018][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.652059][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.659157][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.665796][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.671981][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.685526][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.687311][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.693335][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.712399][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.720199][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.132926][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.219798][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 76.328295][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.347496][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.355594][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.363033][ T5777] bridge_slave_0: entered allmulticast mode [ 76.370622][ T5777] bridge_slave_0: entered promiscuous mode [ 76.397646][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 76.410103][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.417752][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.425003][ T5777] bridge_slave_1: entered allmulticast mode [ 76.431853][ T5777] bridge_slave_1: entered promiscuous mode [ 76.503493][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.529167][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.536807][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.544007][ T5779] bridge_slave_0: entered allmulticast mode [ 76.551879][ T5779] bridge_slave_0: entered promiscuous mode [ 76.561351][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.606309][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.613508][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.621183][ T5779] bridge_slave_1: entered allmulticast mode [ 76.628184][ T5779] bridge_slave_1: entered promiscuous mode [ 76.696558][ T5777] team0: Port device team_slave_0 added [ 76.706558][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.719854][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.729622][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.737934][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.745372][ T5776] bridge_slave_0: entered allmulticast mode [ 76.752341][ T5776] bridge_slave_0: entered promiscuous mode [ 76.766845][ T5777] team0: Port device team_slave_1 added [ 76.791566][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.801510][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.809157][ T5776] bridge_slave_1: entered allmulticast mode [ 76.816920][ T5776] bridge_slave_1: entered promiscuous mode [ 76.881364][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.893945][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.901294][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.908751][ T5778] bridge_slave_0: entered allmulticast mode [ 76.915716][ T5778] bridge_slave_0: entered promiscuous mode [ 76.926045][ T5779] team0: Port device team_slave_0 added [ 76.932227][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.939529][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.946798][ T5778] bridge_slave_1: entered allmulticast mode [ 76.954554][ T5778] bridge_slave_1: entered promiscuous mode [ 76.961967][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.969085][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.995537][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.009664][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.016980][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.043159][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.056347][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.077279][ T5779] team0: Port device team_slave_1 added [ 77.133394][ T5776] team0: Port device team_slave_0 added [ 77.172880][ T5777] hsr_slave_0: entered promiscuous mode [ 77.179394][ T5777] hsr_slave_1: entered promiscuous mode [ 77.198560][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.206695][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.232775][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.246193][ T5776] team0: Port device team_slave_1 added [ 77.252568][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.259721][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.291552][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.305229][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.327878][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.354641][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.361830][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.388026][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.453988][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.461331][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.488229][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.519811][ T5778] team0: Port device team_slave_0 added [ 77.534767][ T5778] team0: Port device team_slave_1 added [ 77.561958][ T5779] hsr_slave_0: entered promiscuous mode [ 77.568729][ T5779] hsr_slave_1: entered promiscuous mode [ 77.579194][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.587489][ T5779] Cannot create hsr debugfs directory [ 77.645410][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.652401][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.679361][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.692336][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.699659][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.725976][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.745638][ T5793] Bluetooth: hci3: command tx timeout [ 77.745654][ T5783] Bluetooth: hci2: command tx timeout [ 77.819034][ T5776] hsr_slave_0: entered promiscuous mode [ 77.825129][ T5793] Bluetooth: hci0: command tx timeout [ 77.825207][ T5783] Bluetooth: hci1: command tx timeout [ 77.837582][ T5776] hsr_slave_1: entered promiscuous mode [ 77.844133][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.852211][ T5776] Cannot create hsr debugfs directory [ 77.924134][ T5778] hsr_slave_0: entered promiscuous mode [ 77.931356][ T5778] hsr_slave_1: entered promiscuous mode [ 77.938339][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.945996][ T5778] Cannot create hsr debugfs directory [ 78.225860][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.266712][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.276555][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.311229][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.359328][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.371468][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.390808][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.401748][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.471209][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.502957][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.513467][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.558206][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.625713][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.637734][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.649030][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.660875][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.759954][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.822172][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.848805][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.879667][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.886966][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.899525][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.906812][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.931844][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.971957][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.992670][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.011468][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.018659][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.044001][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.051231][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.084679][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.104582][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.137165][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.144331][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.164889][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.172017][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.201497][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.208806][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.232823][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.240014][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.678227][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.822161][ T5777] veth0_vlan: entered promiscuous mode [ 79.838067][ T5783] Bluetooth: hci2: command tx timeout [ 79.843729][ T5783] Bluetooth: hci3: command tx timeout [ 79.888135][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.906434][ T5783] Bluetooth: hci1: command tx timeout [ 79.907644][ T5793] Bluetooth: hci0: command tx timeout [ 79.921937][ T5777] veth1_vlan: entered promiscuous mode [ 79.966032][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.982090][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.048338][ T5777] veth0_macvtap: entered promiscuous mode [ 80.062311][ T5777] veth1_macvtap: entered promiscuous mode [ 80.093818][ T5779] veth0_vlan: entered promiscuous mode [ 80.111149][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.144596][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.163807][ T5778] veth0_vlan: entered promiscuous mode [ 80.183037][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.192415][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.201385][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.211905][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.230567][ T5779] veth1_vlan: entered promiscuous mode [ 80.252635][ T5776] veth0_vlan: entered promiscuous mode [ 80.265685][ T5778] veth1_vlan: entered promiscuous mode [ 80.302695][ T5776] veth1_vlan: entered promiscuous mode [ 80.427303][ T5779] veth0_macvtap: entered promiscuous mode [ 80.441971][ T5779] veth1_macvtap: entered promiscuous mode [ 80.450026][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.462940][ T5776] veth0_macvtap: entered promiscuous mode [ 80.471962][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.491810][ T5778] veth0_macvtap: entered promiscuous mode [ 80.514254][ T5778] veth1_macvtap: entered promiscuous mode [ 80.541682][ T5776] veth1_macvtap: entered promiscuous mode [ 80.556378][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.573039][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.578639][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.594146][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.607834][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.616741][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.628476][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.638450][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.649120][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.660883][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.679127][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.689950][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.700221][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.711539][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.721878][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.732523][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.744146][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.759691][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.771211][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.783765][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.801208][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.812280][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.822303][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.832818][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.846775][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.872136][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.883119][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.893526][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.904589][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.917355][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.928038][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.939617][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.953626][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.962802][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.980475][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.990791][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.017064][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.031509][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.041882][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.051551][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089861][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.101292][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.111072][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.120227][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.378302][ T5847] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 81.915823][ T5793] Bluetooth: hci2: command tx timeout [ 81.921313][ T5793] Bluetooth: hci3: command tx timeout [ 81.987500][ T5793] Bluetooth: hci1: command tx timeout [ 81.992982][ T5793] Bluetooth: hci0: command tx timeout [ 82.148499][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.178056][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.224827][ C1] sched: RT throttling activated [ 83.479778][ T5856] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 83.957789][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.965867][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.985519][ T5793] Bluetooth: hci3: command tx timeout [ 83.992233][ T5783] Bluetooth: hci2: command tx timeout [ 84.029066][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.064945][ T5793] Bluetooth: hci0: command tx timeout [ 84.069226][ T5783] Bluetooth: hci1: command tx timeout [ 84.094520][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.162557][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.186867][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.342199][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.370954][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.521956][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.551894][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.165545][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.330066][ T5888] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 86.400910][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 86.547973][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.845551][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.854666][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.148094][ T8] cfg80211: failed to load regulatory.db [ 88.208043][ T5840] IPVS: starting estimator thread 0... [ 88.326474][ T43] usb 2-1: Product: syz [ 88.331251][ T43] usb 2-1: Manufacturer: syz [ 88.336013][ T43] usb 2-1: SerialNumber: syz [ 88.347583][ T43] usb 2-1: config 0 descriptor?? [ 88.375038][ T5895] IPVS: using max 16 ests per chain, 38400 per kthread [ 88.379759][ T43] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 88.398478][ T43] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 88.516833][ T5899] syz.3.14[5899]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.537325][ T5899] loop3: detected capacity change from 0 to 256 [ 88.557647][ T5899] exfat: Deprecated parameter 'utf8' [ 88.657301][ T5899] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 89.001118][ T43] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 89.414310][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 89.546813][ T43] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 89.577586][ T43] em28xx 2-1:0.0: board has no eeprom [ 89.666378][ T5840] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.725129][ T43] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 89.741065][ T43] em28xx 2-1:0.0: dvb set to bulk mode. [ 89.769830][ T5848] em28xx 2-1:0.0: Binding DVB extension [ 89.798303][ T43] usb 2-1: USB disconnect, device number 2 [ 89.836383][ T43] em28xx 2-1:0.0: Disconnecting em28xx [ 89.868387][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 89.898841][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.937885][ T5848] em28xx 2-1:0.0: Registering input extension [ 89.953125][ T43] em28xx 2-1:0.0: Closing input extension [ 89.967190][ T5840] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 89.992161][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.999313][ T43] em28xx 2-1:0.0: Freeing device [ 90.004244][ T5840] usb 1-1: Product: syz [ 90.011711][ T5840] usb 1-1: Manufacturer: syz [ 90.021116][ T5840] usb 1-1: SerialNumber: syz [ 90.046547][ T5840] usb 1-1: config 0 descriptor?? [ 90.294084][ T5840] msi2500 1-1:0.0: Registered as swradio24 [ 90.314399][ T5840] msi2500 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 90.371984][ T5840] usb 1-1: USB disconnect, device number 2 [ 90.412613][ T5930] loop3: detected capacity change from 0 to 512 [ 90.475932][ T5848] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.503305][ T5930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.518243][ T5930] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.698694][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.736213][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.751245][ T5848] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 90.760032][ T5848] usb 3-1: config 114 has no interface number 0 [ 90.767003][ T5848] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 90.779159][ T5848] usb 3-1: config 114 interface 240 altsetting 232 has an invalid endpoint with address 0xCA, skipping [ 90.817032][ T5848] usb 3-1: config 114 interface 240 has no altsetting 0 [ 90.844154][ T5848] usb 3-1: string descriptor 0 read error: -22 [ 90.851207][ T5848] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 90.872080][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.921151][ T5935] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 90.922405][ T5922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.943437][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 91.049032][ T5922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.053369][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 91.078389][ T43] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 91.091000][ T5848] ir_usb 3-1:114.240: required endpoints missing [ 91.097575][ T43] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 91.148527][ T43] usb 2-1: Product: syz [ 91.153015][ T43] usb 2-1: Manufacturer: syz [ 91.160967][ T43] usb 2-1: SerialNumber: syz [ 91.220373][ T43] usb 2-1: config 0 descriptor?? [ 91.232695][ T5926] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.438290][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 91.450556][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.696141][ T43] usb 2-1: USB disconnect, device number 3 [ 92.245332][ T5848] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.537300][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 92.585485][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 92.614170][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 92.656884][ T5848] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 92.673529][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 92.683647][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.731392][ T5848] usb 1-1: config 0 descriptor?? [ 93.165131][ T5785] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.173936][ T5948] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 93.220001][ T5840] usb 3-1: USB disconnect, device number 2 [ 93.318073][ T5959] loop3: detected capacity change from 0 to 32768 [ 93.388517][ T5959] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.35 (5959) [ 93.543915][ T5959] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.630748][ T5963] loop0: detected capacity change from 0 to 8 [ 93.641469][ T5963] ======================================================= [ 93.641469][ T5963] WARNING: The mand mount option has been deprecated and [ 93.641469][ T5963] and is ignored by this kernel. Remove the mand [ 93.641469][ T5963] option from the mount to silence this warning. [ 93.641469][ T5963] ======================================================= [ 93.808043][ T5959] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 93.998295][ T5959] BTRFS info (device loop3): force clearing of disk cache [ 94.134706][ T5959] BTRFS info (device loop3): enabling auto defrag [ 94.252682][ T5959] BTRFS info (device loop3): max_inline at 0 [ 94.350617][ T5959] BTRFS info (device loop3): enabling disk space caching [ 94.448003][ T5959] BTRFS info (device loop3): disk space caching is enabled [ 94.691683][ T5959] BTRFS info (device loop3): enabling ssd optimizations [ 94.728024][ T5959] BTRFS info (device loop3): rebuilding free space tree [ 94.760470][ T5785] usb 2-1: Using ep0 maxpacket: 8 [ 94.777854][ T5785] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.812494][ T5785] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 94.822960][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.850616][ T5785] usb 2-1: Product: syz [ 95.177993][ T5959] BTRFS info (device loop3): disabling free space tree [ 95.216626][ T5785] usb 2-1: Manufacturer: syz [ 95.444878][ T5959] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.463516][ T5959] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 95.629894][ T5785] usb 2-1: SerialNumber: syz [ 95.635544][ T5848] usbhid 1-1:0.0: can't add hid device: -71 [ 95.649399][ T5785] usb 2-1: config 0 descriptor?? [ 95.678605][ T5848] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.733878][ T5848] usb 1-1: USB disconnect, device number 3 [ 95.854561][ T5785] msi2500 2-1:0.0: Registered as swradio24 [ 95.880775][ T5785] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 95.902365][ T5785] usb 2-1: USB disconnect, device number 4 [ 95.960969][ T11] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 96.042604][ T27] audit: type=1326 audit(1780982979.207:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ccb9ce59 code=0x7ffc0000 [ 96.077332][ T27] audit: type=1326 audit(1780982979.217:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ccb9ce59 code=0x7ffc0000 [ 96.103455][ T5779] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.150142][ T27] audit: type=1326 audit(1780982979.217:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ccb9ce59 code=0x7ffc0000 [ 96.175841][ T27] audit: type=1326 audit(1780982979.217:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ccb9ce59 code=0x7ffc0000 [ 96.216247][ T27] audit: type=1326 audit(1780982979.217:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f26ccb9ce59 code=0x7ffc0000 [ 96.241214][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.305814][ T27] audit: type=1326 audit(1780982979.287:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ccb5d68e code=0x7ffc0000 [ 96.348585][ T27] audit: type=1326 audit(1780982979.297:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ccb5d68e code=0x7ffc0000 [ 96.431649][ T27] audit: type=1326 audit(1780982979.297:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ccb5d68e code=0x7ffc0000 [ 96.456628][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 96.482982][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 96.530207][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 96.571828][ T27] audit: type=1326 audit(1780982979.307:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ccb5d68e code=0x7ffc0000 [ 96.607519][ T5848] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 96.645924][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.685690][ T5848] usb 1-1: config 0 descriptor?? [ 96.692392][ T27] audit: type=1326 audit(1780982979.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5986 comm="syz.2.39" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f26ccb5d68e code=0x7ffc0000 [ 97.288407][ T5989] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 97.664840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.784835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 97.944849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.294847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 98.324841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.355157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 99.688042][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 99.740661][ T6019] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 99.772177][ T5848] usbhid 1-1:0.0: can't add hid device: -71 [ 99.812570][ T5848] usbhid: probe of 1-1:0.0 failed with error -71 [ 99.834673][ T5848] usb 1-1: USB disconnect, device number 4 [ 99.940923][ T6025] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.018579][ T5785] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.085020][ T5785] usb 3-1: Using ep0 maxpacket: 8 [ 101.095638][ T6035] random: crng reseeded on system resumption [ 101.130411][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 101.161835][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.224346][ T5785] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 101.264637][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.297221][ T5785] usb 3-1: config 0 descriptor?? [ 101.761189][ T6017] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 103.144382][ T5785] usbhid 3-1:0.0: can't add hid device: -71 [ 103.166235][ T5785] usbhid: probe of 3-1:0.0 failed with error -71 [ 103.218955][ T5785] usb 3-1: USB disconnect, device number 3 [ 104.837789][ T27] kauditd_printk_skb: 78 callbacks suppressed [ 104.837810][ T27] audit: type=1326 audit(1780982987.947:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c9b9ce59 code=0x7ffc0000 [ 104.874915][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.895460][ T27] audit: type=1326 audit(1780982987.947:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c9b9ce59 code=0x7ffc0000 [ 104.920420][ T27] audit: type=1326 audit(1780982987.947:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c9b9ce59 code=0x7ffc0000 [ 104.944354][ T27] audit: type=1326 audit(1780982987.947:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c9b9ce59 code=0x7ffc0000 [ 104.970145][ T27] audit: type=1326 audit(1780982987.947:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f79c9b9ce59 code=0x7ffc0000 [ 104.994389][ T27] audit: type=1326 audit(1780982988.007:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79c9b5d68e code=0x7ffc0000 [ 105.035306][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.063430][ T27] audit: type=1326 audit(1780982988.007:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79c9b5d68e code=0x7ffc0000 [ 105.127476][ T27] audit: type=1326 audit(1780982988.007:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79c9b5d68e code=0x7ffc0000 [ 105.152773][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 105.170933][ T6074] loop2: detected capacity change from 0 to 4096 [ 105.180239][ T27] audit: type=1326 audit(1780982988.007:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79c9b5d68e code=0x7ffc0000 [ 105.204679][ T5840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.215104][ T27] audit: type=1326 audit(1780982988.007:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.0.63" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79c9b5d68e code=0x7ffc0000 [ 105.225189][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.254912][ T5840] usb 2-1: Product: syz [ 105.259162][ T5840] usb 2-1: Manufacturer: syz [ 105.263811][ T5840] usb 2-1: SerialNumber: syz [ 105.274910][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 105.291882][ T5840] usb 2-1: config 0 descriptor?? [ 105.306765][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.333914][ T5822] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 105.334842][ T6077] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.353301][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.374913][ T5822] usb 4-1: Product: syz [ 105.379267][ T5822] usb 4-1: Manufacturer: syz [ 105.395219][ T5822] usb 4-1: SerialNumber: syz [ 105.406974][ T5822] usb 4-1: config 0 descriptor?? [ 105.516227][ T5840] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.573500][ T5822] msi2500 4-1:0.0: Registered as swradio24 [ 105.585809][ T5822] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 105.635344][ T5822] usb 4-1: USB disconnect, device number 2 [ 106.006791][ T6076] loop0: detected capacity change from 0 to 32768 [ 106.031959][ T6076] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.66 (6076) [ 106.074147][ T6076] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.085337][ T6076] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 106.094332][ T6076] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 106.112306][ T6076] BTRFS info (device loop0): trying to use backup root at mount time [ 106.121145][ T6076] BTRFS info (device loop0): setting nodatasum [ 106.129044][ T6076] BTRFS info (device loop0): enabling ssd optimizations [ 106.136745][ T5840] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 106.154525][ T6076] BTRFS info (device loop0): using spread ssd allocation scheme [ 106.176277][ T6076] BTRFS info (device loop0): force zlib compression, level 3 [ 106.183740][ T6076] BTRFS info (device loop0): allowing degraded mounts [ 106.232501][ T6076] BTRFS info (device loop0): turning on flush-on-commit [ 106.259505][ T6076] BTRFS info (device loop0): setting nodatacow [ 106.284999][ T6076] BTRFS info (device loop0): using free space tree [ 106.379507][ T6076] BTRFS info (device loop0): auto enabling async discard [ 106.475463][ T6084] loop2: detected capacity change from 0 to 32768 [ 106.503105][ T6084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.68 (6084) [ 106.575344][ T6084] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.595110][ T6084] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 106.603851][ T6084] BTRFS info (device loop2): using free space tree [ 106.645023][ T5840] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.660484][ T6103] BTRFS info (device loop0): scrub: started on devid 1 [ 106.786136][ T6084] BTRFS info (device loop2): enabling ssd optimizations [ 106.793167][ T6084] BTRFS info (device loop2): auto enabling async discard [ 106.854939][ T5840] usb 4-1: Using ep0 maxpacket: 8 [ 106.872147][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 106.887732][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 106.887921][ T6103] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 106.901317][ T5840] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 106.935381][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.986735][ T5840] usb 4-1: config 0 descriptor?? [ 107.169280][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.255023][ T5848] usb 2-1: USB disconnect, device number 5 [ 107.290512][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.405829][ T6097] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 108.024699][ T6131] loop3: detected capacity change from 0 to 8 [ 109.416712][ T6140] loop2: detected capacity change from 0 to 4096 [ 109.503160][ T6142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.698532][ T5840] usbhid 4-1:0.0: can't add hid device: -71 [ 109.720429][ T5840] usbhid: probe of 4-1:0.0 failed with error -71 [ 109.818485][ T5840] usb 4-1: USB disconnect, device number 3 [ 112.195104][ T5840] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.461786][ T6171] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 114.852604][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 114.882076][ T6186] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 116.655255][ T5840] usb 1-1: device descriptor read/all, error -71 [ 122.474907][ T5840] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.444046][ T6226] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.655066][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.719885][ T6232] autofs4:pid:6232:autofs_fill_super: called with bogus options [ 125.855001][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 125.865813][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.885022][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.902776][ T23] usb 3-1: Product: syz [ 125.915687][ T23] usb 3-1: Manufacturer: syz [ 125.940962][ T23] usb 3-1: SerialNumber: syz [ 126.004241][ T23] usb 3-1: config 0 descriptor?? [ 126.235073][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.404864][ T5840] usb 1-1: device not accepting address 7, error -71 [ 127.332800][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 127.416813][ T6243] overlayfs: missing 'lowerdir' [ 129.401226][ T5103] usb 3-1: USB disconnect, device number 4 [ 129.566377][ T6260] autofs4:pid:6260:autofs_fill_super: called with bogus options [ 129.875114][ T5103] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.342974][ T6279] netlink: 436 bytes leftover after parsing attributes in process `syz.0.116'. [ 132.353556][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 132.413458][ T5103] usb 3-1: Using ep0 maxpacket: 8 [ 132.420865][ T5103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 132.432325][ T5103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.764911][ T5103] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 132.774591][ T5103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.797561][ T6283] overlayfs: missing 'lowerdir' [ 132.820712][ T5103] usb 3-1: config 0 descriptor?? [ 132.826932][ T5103] usb 3-1: can't set config #0, error -71 [ 132.848951][ T5103] usb 3-1: USB disconnect, device number 5 [ 133.112533][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.119885][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.145049][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.571703][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 134.009215][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.018731][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.026879][ T23] usb 1-1: Product: syz [ 134.031176][ T23] usb 1-1: Manufacturer: syz [ 134.035878][ T23] usb 1-1: SerialNumber: syz [ 134.043205][ T23] usb 1-1: config 0 descriptor?? [ 134.259322][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.822162][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.326424][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 135.568679][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 135.603175][ T5892] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 135.629233][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 135.658271][ T5892] usb 4-1: Product: syz [ 135.662679][ T5892] usb 4-1: Manufacturer: syz [ 135.688643][ T5892] usb 4-1: SerialNumber: syz [ 135.699519][ T23] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 135.725853][ T5892] usb 4-1: config 0 descriptor?? [ 135.751480][ T6303] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.021668][ T5892] usb 4-1: USB disconnect, device number 4 [ 136.088115][ T6317] overlayfs: missing 'lowerdir' [ 136.317956][ T5103] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.505028][ T5103] usb 2-1: Using ep0 maxpacket: 8 [ 136.511980][ T5103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 136.523269][ T5103] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 136.538495][ T5103] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 136.548017][ T5103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.576877][ T5103] usb 2-1: config 0 descriptor?? [ 136.985003][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.990448][ T6315] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 137.107417][ T23] usb 1-1: USB disconnect, device number 9 [ 137.175000][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 137.197991][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 137.262048][ T5892] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 137.280988][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 137.307155][ T5892] usb 4-1: Product: syz [ 137.311432][ T5892] usb 4-1: Manufacturer: syz [ 137.340050][ T5892] usb 4-1: SerialNumber: syz [ 137.367843][ T6333] loop1: detected capacity change from 0 to 8 [ 137.432567][ T5892] usb 4-1: config 0 descriptor?? [ 137.481466][ T6328] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 138.322174][ T5892] usb 4-1: USB disconnect, device number 5 [ 139.168412][ T6319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.776201][ T5103] usbhid 2-1:0.0: can't add hid device: -71 [ 139.782371][ T5103] usbhid: probe of 2-1:0.0 failed with error -71 [ 139.797219][ T5103] usb 2-1: USB disconnect, device number 6 [ 140.503186][ T6350] loop1: detected capacity change from 0 to 2048 [ 140.645543][ T6350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.043008][ T6346] loop2: detected capacity change from 0 to 4096 [ 141.598836][ T6346] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 141.640775][ T6346] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 141.897697][ T1089] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 141.919157][ T5776] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 141.940245][ T5776] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 141.964906][ T5776] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 141.988969][ T1089] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 143.957418][ T6359] loop2: detected capacity change from 0 to 32768 [ 144.090487][ T6359] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.147589][ T6353] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 144.480591][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 144.480607][ T27] audit: type=1800 audit(1780983027.647:125): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.141" name="file1" dev="loop2" ino=17059 res=0 errno=0 [ 144.954108][ T6359] syz.2.141 (6359) used greatest stack depth: 17712 bytes left [ 145.195986][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 145.468840][ T6365] loop2: detected capacity change from 0 to 128 [ 145.499772][ T6365] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.513281][ T6365] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.588860][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.873058][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.025055][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.144895][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 147.159772][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.179529][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.220365][ T5840] usb 3-1: Product: syz [ 147.224617][ T5840] usb 3-1: Manufacturer: syz [ 147.264849][ T5840] usb 3-1: SerialNumber: syz [ 147.291835][ T5840] usb 3-1: config 0 descriptor?? [ 148.120596][ T6403] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 149.385152][ T5785] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.573449][ T5840] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.574971][ T5785] usb 4-1: Using ep0 maxpacket: 8 [ 149.614690][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 149.632409][ T5785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.650434][ T5785] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 149.663466][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.701248][ T5785] usb 4-1: config 0 descriptor?? [ 150.048519][ T5840] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 150.616133][ T6423] loop3: detected capacity change from 0 to 8 [ 151.016249][ T5840] usb 3-1: USB disconnect, device number 6 [ 154.169053][ T6412] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 154.308253][ T5785] usbhid 4-1:0.0: can't add hid device: -71 [ 154.317146][ T5785] usbhid: probe of 4-1:0.0 failed with error -71 [ 154.326701][ T5785] usb 4-1: USB disconnect, device number 6 [ 155.534416][ T6454] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 157.433534][ T6469] loop2: detected capacity change from 0 to 512 [ 157.512343][ T6469] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.626241][ T6469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.844382][ T6469] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.165: corrupted xattr entries [ 157.921970][ T6469] EXT4-fs (loop2): Remounting filesystem read-only [ 157.954211][ T6469] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 158.005622][ T6469] EXT4-fs (loop2): 1 truncate cleaned up [ 158.023010][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.530321][ T6484] loop3: detected capacity change from 0 to 2048 [ 160.063076][ T6484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.321847][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.966224][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.361390][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.487258][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.176'. [ 166.497639][ T6524] (unnamed net_device) (uninitialized): up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 166.511390][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 166.601730][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 166.621250][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 166.630618][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.640476][ T43] usb 1-1: Product: syz [ 166.644690][ T43] usb 1-1: Manufacturer: syz [ 166.649506][ T43] usb 1-1: SerialNumber: syz [ 166.657885][ T43] usb 1-1: config 0 descriptor?? [ 166.666886][ T43] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 166.676667][ T43] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 168.130001][ T43] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 169.260022][ T43] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 169.279696][ T43] em28xx 1-1:0.0: board has no eeprom [ 169.434964][ T43] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 169.484040][ T43] em28xx 1-1:0.0: dvb set to bulk mode. [ 169.518627][ T5892] em28xx 1-1:0.0: Binding DVB extension [ 169.585579][ T43] usb 1-1: USB disconnect, device number 10 [ 169.602314][ T43] em28xx 1-1:0.0: Disconnecting em28xx [ 170.569641][ T5892] em28xx 1-1:0.0: Registering input extension [ 172.004389][ T6553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 172.156672][ T43] em28xx 1-1:0.0: Closing input extension [ 172.244469][ T43] em28xx 1-1:0.0: Freeing device [ 172.818547][ T6561] loop3: detected capacity change from 0 to 256 [ 172.908335][ T6561] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6b7, utbl_chksum : 0xe619d30d) [ 172.936417][ T27] audit: type=1800 audit(1780983056.107:126): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.185" name="file1" dev="loop3" ino=1048596 res=0 errno=0 [ 172.968334][ T6561] syz.3.185: attempt to access beyond end of device [ 172.968334][ T6561] loop3: rw=0, sector=184, nr_sectors = 5151 limit=256 [ 172.985834][ T6561] syz.3.185: attempt to access beyond end of device [ 172.985834][ T6561] loop3: rw=0, sector=5335, nr_sectors = 3560 limit=256 [ 173.001161][ T6561] syz.3.185: attempt to access beyond end of device [ 173.001161][ T6561] loop3: rw=0, sector=8895, nr_sectors = 2184 limit=256 [ 173.018064][ T6561] syz.3.185: attempt to access beyond end of device [ 173.018064][ T6561] loop3: rw=0, sector=11079, nr_sectors = 3824 limit=256 [ 173.034334][ T6561] syz.3.185: attempt to access beyond end of device [ 173.034334][ T6561] loop3: rw=0, sector=14903, nr_sectors = 3952 limit=256 [ 173.089532][ T6561] syz.3.185: attempt to access beyond end of device [ 173.089532][ T6561] loop3: rw=0, sector=18855, nr_sectors = 8832 limit=256 [ 173.135788][ T6561] syz.3.185: attempt to access beyond end of device [ 173.135788][ T6561] loop3: rw=0, sector=27687, nr_sectors = 5256 limit=256 [ 174.137173][ T5857] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.346657][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 174.354983][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 174.368958][ T5857] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 174.378564][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.387027][ T5857] usb 3-1: Product: syz [ 174.391243][ T5857] usb 3-1: Manufacturer: syz [ 174.396418][ T5857] usb 3-1: SerialNumber: syz [ 174.410676][ T5857] usb 3-1: config 0 descriptor?? [ 174.420465][ T5857] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 174.443880][ T5857] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 175.042532][ T5857] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 175.611917][ T5857] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 175.651396][ T5857] em28xx 3-1:0.0: board has no eeprom [ 177.274913][ T5857] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 177.344923][ T5857] em28xx 3-1:0.0: dvb set to bulk mode. [ 177.381710][ T8] em28xx 3-1:0.0: Binding DVB extension [ 177.437301][ T5857] usb 3-1: USB disconnect, device number 7 [ 177.465997][ T5857] em28xx 3-1:0.0: Disconnecting em28xx [ 178.322423][ T6597] loop3: detected capacity change from 0 to 256 [ 178.488869][ T6597] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6b7, utbl_chksum : 0xe619d30d) [ 178.511005][ T6597] syz.3.194: attempt to access beyond end of device [ 178.511005][ T6597] loop3: rw=0, sector=184, nr_sectors = 6743 limit=256 [ 178.527445][ T6597] syz.3.194: attempt to access beyond end of device [ 178.527445][ T6597] loop3: rw=0, sector=6927, nr_sectors = 4608 limit=256 [ 178.544532][ T6597] syz.3.194: attempt to access beyond end of device [ 178.544532][ T6597] loop3: rw=0, sector=11535, nr_sectors = 3840 limit=256 [ 178.561071][ T6597] syz.3.194: attempt to access beyond end of device [ 178.561071][ T6597] loop3: rw=0, sector=15375, nr_sectors = 3152 limit=256 [ 178.576240][ T6597] syz.3.194: attempt to access beyond end of device [ 178.576240][ T6597] loop3: rw=0, sector=18527, nr_sectors = 2056 limit=256 [ 178.596219][ T6597] syz.3.194: attempt to access beyond end of device [ 178.596219][ T6597] loop3: rw=0, sector=20583, nr_sectors = 2640 limit=256 [ 178.672421][ T6597] syz.3.194: attempt to access beyond end of device [ 178.672421][ T6597] loop3: rw=0, sector=23223, nr_sectors = 9720 limit=256 [ 178.843553][ T27] audit: type=1800 audit(1780983061.677:127): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.194" name="file1" dev="loop3" ino=1048597 res=0 errno=0 [ 179.619177][ T8] em28xx 3-1:0.0: Registering input extension [ 179.646809][ T5857] em28xx 3-1:0.0: Closing input extension [ 179.659581][ T5857] em28xx 3-1:0.0: Freeing device [ 181.116691][ T5857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.133632][ T6633] loop2: detected capacity change from 0 to 256 [ 181.142915][ T6633] FAT-fs (loop2): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 181.304865][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 181.316725][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 181.337749][ T5857] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.354903][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.364867][ T5103] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.374809][ T5857] usb 2-1: Product: syz [ 181.379017][ T5857] usb 2-1: Manufacturer: syz [ 181.394506][ T5857] usb 2-1: SerialNumber: syz [ 181.411147][ T5857] usb 2-1: config 0 descriptor?? [ 181.429088][ T5857] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.439329][ T5857] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 181.511203][ T6609] loop0: detected capacity change from 0 to 32768 [ 181.561145][ T6609] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 181.575050][ T5103] usb 4-1: Using ep0 maxpacket: 16 [ 181.581273][ T5103] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 181.596811][ T5103] usb 4-1: config 0 has no interfaces? [ 181.604323][ T5103] usb 4-1: config 0 has no interfaces? [ 181.614498][ T5103] usb 4-1: config 0 has no interfaces? [ 181.624502][ T5103] usb 4-1: config 0 has no interfaces? [ 181.634836][ T5103] usb 4-1: config 0 has no interfaces? [ 181.646487][ T5103] usb 4-1: config 0 has no interfaces? [ 181.653963][ T5103] usb 4-1: config 0 has no interfaces? [ 181.662771][ T5103] usb 4-1: config 0 has no interfaces? [ 181.672027][ T5103] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 181.684586][ T5103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 181.694838][ T5103] usb 4-1: SerialNumber: syz [ 181.698399][ T6609] XFS (loop0): Ending clean mount [ 181.703656][ T5103] usb 4-1: config 0 descriptor?? [ 181.990336][ T5777] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 182.063672][ T5857] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 182.498315][ T5857] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 182.515562][ T5857] em28xx 2-1:0.0: board has no eeprom [ 182.588876][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 182.615031][ T5857] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 182.645004][ T5857] em28xx 2-1:0.0: dvb set to bulk mode. [ 182.650756][ T5103] em28xx 2-1:0.0: Binding DVB extension [ 182.675228][ T5857] usb 2-1: USB disconnect, device number 7 [ 182.702628][ T5857] em28xx 2-1:0.0: Disconnecting em28xx [ 182.795338][ T5103] em28xx 2-1:0.0: Registering input extension [ 182.802165][ T5857] em28xx 2-1:0.0: Closing input extension [ 182.845235][ T5857] em28xx 2-1:0.0: Freeing device [ 183.034875][ T6654] loop0: detected capacity change from 0 to 256 [ 183.094204][ T6654] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6b7, utbl_chksum : 0xe619d30d) [ 183.114094][ T6654] syz.0.207: attempt to access beyond end of device [ 183.114094][ T6654] loop0: rw=0, sector=184, nr_sectors = 2295 limit=256 [ 183.129321][ T6654] syz.0.207: attempt to access beyond end of device [ 183.129321][ T6654] loop0: rw=0, sector=2479, nr_sectors = 2048 limit=256 [ 183.136321][ T27] audit: type=1800 audit(1780983066.277:128): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.207" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 183.145845][ T6654] syz.0.207: attempt to access beyond end of device [ 183.145845][ T6654] loop0: rw=0, sector=4527, nr_sectors = 3576 limit=256 [ 185.795491][ T5848] usb 4-1: USB disconnect, device number 7 [ 186.902982][ T6698] loop2: detected capacity change from 0 to 256 [ 186.913874][ T6698] FAT-fs (loop2): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 186.959583][ T6215] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.285056][ T5892] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.495010][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 187.509054][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 187.545924][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.585961][ T5892] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 187.596795][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.624611][ T5892] usb 4-1: config 0 descriptor?? [ 187.900879][ T6705] (null): rxe_set_mtu: Set mtu to 1024 [ 188.038082][ T6705] infiniband syz2: set down [ 188.042935][ T6705] infiniband syz2: added ipvlan0 [ 188.080899][ T6705] RDS/IB: syz2: added [ 188.085508][ T6705] smc: adding ib device syz2 with port count 1 [ 188.091782][ T6705] smc: ib device syz2 port 1 has pnetid [ 188.251162][ T6700] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 188.674815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.694809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.714813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.869468][ T6709] loop3: detected capacity change from 0 to 8 [ 190.198811][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 191.127067][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 191.134449][ T5892] usbhid: probe of 4-1:0.0 failed with error -71 [ 191.182563][ T5892] usb 4-1: USB disconnect, device number 8 [ 193.904309][ T6735] syzkaller0: entered promiscuous mode [ 193.917299][ T6735] syzkaller0: entered allmulticast mode [ 194.624555][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.746483][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.085234][ T6746] netlink: 436 bytes leftover after parsing attributes in process `syz.2.233'. [ 195.094457][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.233'. [ 195.478515][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 198.909237][ T6768] loop2: detected capacity change from 0 to 256 [ 198.922352][ T6768] FAT-fs (loop2): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 199.044154][ T6770] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 200.164238][ T6775] netlink: 436 bytes leftover after parsing attributes in process `syz.3.243'. [ 200.173624][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 201.378853][ T6782] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 202.473264][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 202.485535][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 202.496605][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 202.525324][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 204.702578][ T6806] loop3: detected capacity change from 0 to 2048 [ 204.876052][ T6806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.954827][ T6806] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 204.971925][ T6806] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 204.984672][ T6806] EXT4-fs (loop3): This should not happen!! Data will be lost [ 204.984672][ T6806] [ 204.994497][ T6806] EXT4-fs (loop3): Total free blocks count 0 [ 205.000596][ T6806] EXT4-fs (loop3): Free/Dirty block details [ 205.006697][ T6806] EXT4-fs (loop3): free_blocks=2415919504 [ 205.012669][ T6806] EXT4-fs (loop3): dirty_blocks=48 [ 205.018738][ T6806] EXT4-fs (loop3): Block reservation details [ 205.024902][ T6806] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 206.041640][ T6818] loop0: detected capacity change from 0 to 4096 [ 206.152806][ T6819] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.776152][ T3516] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 209.223290][ T6838] netlink: 436 bytes leftover after parsing attributes in process `syz.1.257'. [ 209.234165][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 209.630681][ T6847] loop2: detected capacity change from 0 to 4096 [ 209.741983][ T6858] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.786368][ T6869] (null): rxe_set_mtu: Set mtu to 1024 [ 211.795467][ T6869] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 218.365247][ T6880] binder: 6877:6880 ioctl 4018620d 0 returned -22 [ 218.397208][ T6881] netlink: 436 bytes leftover after parsing attributes in process `syz.3.267'. [ 218.406366][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 219.606378][ T6898] mmap: syz.2.274 (6898) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.753310][ T6904] loop1: detected capacity change from 0 to 64 [ 222.753128][ T6913] (null): rxe_set_mtu: Set mtu to 1024 [ 222.758999][ T6913] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 223.129332][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 223.410908][ T6921] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.281'. [ 223.784434][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 227.401538][ T6959] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.291'. [ 227.435001][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.505328][ T5848] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 228.936174][ T43] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 228.955034][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 228.960438][ T43] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 228.984121][ T5848] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 230.774926][ T43] usb 4-1: Product: syz [ 230.779174][ T43] usb 4-1: SerialNumber: syz [ 230.786543][ T5848] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.381859][ T43] usb 4-1: config 0 descriptor?? [ 231.387026][ T5848] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.397396][ T43] usb 4-1: can't set config #0, error -71 [ 231.405087][ T5848] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.415943][ T43] usb 4-1: USB disconnect, device number 9 [ 231.440745][ T5848] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.161959][ T6995] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.300'. [ 232.776249][ T5848] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 232.785962][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.797067][ T5848] usb 2-1: can't set config #16, error -71 [ 233.373981][ T6990] (null): rxe_set_mtu: Set mtu to 1024 [ 233.379939][ T6990] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 233.577262][ T5848] usb 2-1: USB disconnect, device number 9 [ 234.757371][ T7020] loop1: detected capacity change from 0 to 2048 [ 234.960009][ T7020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.024702][ T7020] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 235.040254][ T7020] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 235.052759][ T7020] EXT4-fs (loop1): This should not happen!! Data will be lost [ 235.052759][ T7020] [ 235.063564][ T7020] EXT4-fs (loop1): Total free blocks count 0 [ 235.069869][ T7020] EXT4-fs (loop1): Free/Dirty block details [ 235.075921][ T7020] EXT4-fs (loop1): free_blocks=2415919504 [ 235.081761][ T7020] EXT4-fs (loop1): dirty_blocks=48 [ 235.087870][ T7020] EXT4-fs (loop1): Block reservation details [ 235.093944][ T7020] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 235.435207][ T7028] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 237.068909][ T7040] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.310'. [ 237.719049][ T3516] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 237.913861][ T7053] loop1: detected capacity change from 0 to 256 [ 237.928914][ T7053] FAT-fs (loop1): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 238.213131][ T7055] (null): rxe_set_mtu: Set mtu to 1024 [ 238.220871][ T7055] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 239.557138][ T7066] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.320'. [ 239.854572][ T7072] loop1: detected capacity change from 0 to 4096 [ 240.131304][ T7072] EXT4-fs (loop1): Test dummy encryption mode enabled [ 240.168541][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.430673][ T7072] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 240.521887][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.919868][ T7096] process 'syz.0.326' launched './file0' with NULL argv: empty string added [ 243.637034][ T7108] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.330'. [ 244.186660][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 244.642411][ T5783] block nbd0: Receive control failed (result -1) [ 246.241828][ T7137] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 247.525278][ T7145] loop1: detected capacity change from 0 to 256 [ 247.556092][ T7145] FAT-fs (loop1): Unrecognized mount option "uU 鎰#M Di 9!;lN9A\>{CJdV0" or missing value [ 249.417708][ T5848] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.624842][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 249.643849][ T5848] usb 2-1: no configurations [ 249.648672][ T5848] usb 2-1: can't read configurations, error -22 [ 249.816499][ T5848] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.064896][ T5892] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 250.072842][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 250.107025][ T5848] usb 2-1: no configurations [ 250.112697][ T5848] usb 2-1: can't read configurations, error -22 [ 250.130011][ T5848] usb usb2-port1: attempt power cycle [ 250.265230][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 250.286019][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 250.330381][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 250.379430][ T5892] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 250.408274][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.444024][ T5892] usb 4-1: config 0 descriptor?? [ 250.585082][ T5848] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 250.629245][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 250.635666][ T5848] usb 2-1: no configurations [ 250.645241][ T5848] usb 2-1: can't read configurations, error -22 [ 250.815136][ T5848] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.877941][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 250.884328][ T7156] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 250.925158][ T5848] usb 2-1: no configurations [ 250.929939][ T5848] usb 2-1: can't read configurations, error -22 [ 251.288475][ T5848] usb usb2-port1: unable to enumerate USB device [ 251.587882][ T7171] loop3: detected capacity change from 0 to 8 [ 253.198136][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 253.204209][ T5892] usbhid: probe of 4-1:0.0 failed with error -71 [ 253.213246][ T5892] usb 4-1: USB disconnect, device number 10 [ 255.054906][ T5892] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 255.388322][ T5892] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 255.413535][ T5892] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 255.444501][ T5892] usb 2-1: config 220 has no interface number 2 [ 255.462599][ T5892] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 255.491176][ T5892] usb 2-1: config 220 interface 0 has no altsetting 0 [ 255.509973][ T5892] usb 2-1: config 220 interface 76 has no altsetting 0 [ 255.545104][ T5892] usb 2-1: config 220 interface 1 has no altsetting 0 [ 255.570933][ T5892] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 255.584968][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 255.599187][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.608066][ T5892] usb 2-1: Product: syz [ 255.622951][ T5892] usb 2-1: Manufacturer: syz [ 255.629626][ T5892] usb 2-1: SerialNumber: syz [ 255.655985][ T7200] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 255.775237][ T43] usb 4-1: device descriptor read/64, error -71 [ 255.929592][ T5892] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 255.940022][ T5892] usb 2-1: No valid video chain found. [ 255.949320][ T5892] usb 2-1: selecting invalid altsetting 0 [ 255.983915][ T5892] usb 2-1: selecting invalid altsetting 0 [ 255.996505][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002883][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.008958][ T5892] usbtest: probe of 2-1:220.1 failed with error -22 [ 256.027646][ T5892] usb 2-1: USB disconnect, device number 14 [ 256.075064][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 256.244986][ T43] usb 4-1: device descriptor read/64, error -71 [ 256.365911][ T43] usb usb4-port1: attempt power cycle [ 256.727922][ T7205] binder: 7204:7205 ioctl c0306201 0 returned -14 [ 256.794971][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 256.845976][ T43] usb 4-1: device descriptor read/8, error -71 [ 257.225250][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 257.302301][ T43] usb 4-1: device descriptor read/8, error -71 [ 257.474186][ T43] usb usb4-port1: unable to enumerate USB device [ 258.836922][ T7218] 9pnet_fd: Insufficient options for proto=fd [ 259.604084][ T7230] netlink: 620 bytes leftover after parsing attributes in process `syz.1.372'. [ 259.621654][ T7229] loop3: detected capacity change from 0 to 256 [ 259.660114][ T7231] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 259.835239][ T7229] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3984d6b7, utbl_chksum : 0xe619d30d) [ 260.053664][ T27] audit: type=1800 audit(1780983143.217:129): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.370" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 260.099151][ T7229] bio_check_eod: 4 callbacks suppressed [ 260.099170][ T7229] syz.3.370: attempt to access beyond end of device [ 260.099170][ T7229] loop3: rw=0, sector=184, nr_sectors = 6095 limit=256 [ 260.141568][ T7229] syz.3.370: attempt to access beyond end of device [ 260.141568][ T7229] loop3: rw=0, sector=6279, nr_sectors = 6832 limit=256 [ 260.727107][ T7229] syz.3.370: attempt to access beyond end of device [ 260.727107][ T7229] loop3: rw=0, sector=13111, nr_sectors = 17024 limit=256 [ 261.326752][ T7229] syz.3.370: attempt to access beyond end of device [ 261.326752][ T7229] loop3: rw=0, sector=30135, nr_sectors = 8 limit=256 [ 263.884946][ T5892] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 264.074885][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 264.082253][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 264.098517][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.129917][ T5892] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 264.154863][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.179689][ T5892] usb 2-1: config 0 descriptor?? [ 264.610303][ T7251] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 265.019308][ T7257] loop1: detected capacity change from 0 to 8 [ 266.104232][ T7264] netlink: 620 bytes leftover after parsing attributes in process `syz.0.382'. [ 267.585262][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 267.591347][ T5892] usbhid: probe of 2-1:0.0 failed with error -71 [ 267.620028][ T5892] usb 2-1: USB disconnect, device number 15 [ 267.684852][ T7272] capability: warning: `syz.1.384' uses 32-bit capabilities (legacy support in use) [ 268.305573][ T7279] loop1: detected capacity change from 0 to 2048 [ 268.519707][ T7279] Alternate GPT is invalid, using primary GPT. [ 268.527596][ T7279] loop1: p2 p3 p7 [ 271.444436][ T7285] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 272.095168][ T5848] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 272.165228][ T7296] netlink: 620 bytes leftover after parsing attributes in process `syz.0.391'. [ 272.304852][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 272.721868][ T5848] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.026301][ T5848] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.056885][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.084023][ T5848] usb 2-1: Product: syz [ 273.094869][ T5848] usb 2-1: Manufacturer: syz [ 273.099523][ T5848] usb 2-1: SerialNumber: syz [ 273.112683][ T5848] usb 2-1: config 0 descriptor?? [ 273.113172][ T7301] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 273.118828][ T7292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 273.410088][ T5785] usb 2-1: USB disconnect, device number 16 [ 273.534975][ T5848] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 273.725058][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 273.736945][ T5848] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.754794][ T5848] usb 4-1: config 0 has no interface number 0 [ 273.765139][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.784646][ T5848] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.799129][ T5848] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 273.809833][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.833169][ T5848] usb 4-1: config 0 descriptor?? [ 274.300342][ T5848] hid (null): unknown global tag 0xd [ 274.845712][ T7318] netlink: 436 bytes leftover after parsing attributes in process `syz.1.397'. [ 274.854904][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'. [ 274.954389][ T5848] usb 4-1: USB disconnect, device number 15 [ 275.374053][ T7323] netlink: 620 bytes leftover after parsing attributes in process `syz.1.400'. [ 275.649932][ T7331] loop3: detected capacity change from 0 to 764 [ 278.842085][ T7354] netlink: 436 bytes leftover after parsing attributes in process `syz.3.410'. [ 278.851673][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 279.242301][ T7357] netlink: 620 bytes leftover after parsing attributes in process `syz.2.412'. [ 279.429230][ T7363] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 281.374981][ T5785] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 281.575082][ T5785] usb 4-1: Using ep0 maxpacket: 8 [ 281.618118][ T5785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 281.690550][ T5785] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 281.806468][ T5785] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 282.006335][ T7384] netlink: 620 bytes leftover after parsing attributes in process `syz.2.422'. [ 282.186326][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.197040][ T5785] usb 4-1: config 0 descriptor?? [ 282.627369][ T7370] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 282.932904][ T7402] loop3: detected capacity change from 0 to 8 [ 283.313128][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 284.706964][ T5785] usbhid 4-1:0.0: can't add hid device: -71 [ 284.713103][ T5785] usbhid: probe of 4-1:0.0 failed with error -71 [ 284.726531][ T5785] usb 4-1: USB disconnect, device number 16 [ 284.836414][ T7419] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 285.056050][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 285.416209][ T7429] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 286.615122][ T5785] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 287.045089][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 287.654788][ T5785] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 287.667933][ T5785] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 287.677315][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 287.685724][ T5785] usb 4-1: Product: syz [ 287.691051][ T5785] usb 4-1: Manufacturer: syz [ 287.711515][ T5785] usb 4-1: SerialNumber: syz [ 287.727648][ T5785] usb 4-1: config 0 descriptor?? [ 287.733518][ T7436] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 288.096012][ T5858] usb 4-1: USB disconnect, device number 17 [ 289.919529][ T7446] loop1: detected capacity change from 0 to 32768 [ 289.968238][ T7446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.442 (7446) [ 290.021534][ T7464] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 290.961558][ T7446] BTRFS error (device loop1): open_ctree failed: -4 [ 291.317900][ T7472] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 291.329132][ T5783] Bluetooth: hci0: unexpected event for opcode 0x0004 [ 292.641817][ T7478] binder: 7477:7478 ioctl c0306201 0 returned -14 [ 293.414914][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 293.616552][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 293.639466][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 293.670576][ T8] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 293.695507][ T8] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 293.721286][ T8] usb 4-1: Product: syz [ 293.741247][ T8] usb 4-1: Manufacturer: syz [ 293.757870][ T8] usb 4-1: SerialNumber: syz [ 293.783599][ T8] usb 4-1: config 0 descriptor?? [ 293.826986][ T7483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 294.199128][ T5785] usb 4-1: USB disconnect, device number 18 [ 295.347452][ T5783] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 295.356654][ T5783] Bluetooth: hci0: Injecting HCI hardware error event [ 295.367637][ T5783] Bluetooth: hci0: hardware error 0x00 [ 297.424923][ T5783] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 297.571100][ T7501] syz.3.458 uses obsolete (PF_INET,SOCK_PACKET) [ 297.781606][ T7504] loop1: detected capacity change from 0 to 1024 [ 297.795685][ T7504] EXT4-fs: Ignoring removed bh option [ 297.896370][ T7504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.990376][ T7504] BUG: unable to handle page fault for address: ffffffffffffffec [ 297.998170][ T7504] #PF: supervisor read access in kernel mode [ 298.004187][ T7504] #PF: error_code(0x0000) - not-present page [ 298.010197][ T7504] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 298.016252][ T7504] Oops: 0000 [#1] PREEMPT SMP KASAN [ 298.021496][ T7504] CPU: 1 PID: 7504 Comm: syz.1.460 Not tainted syzkaller #0 [ 298.028812][ T7504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.038988][ T7504] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 298.045127][ T7504] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 77 d5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 298.064821][ T7504] RSP: 0018:ffffc9000523f800 EFLAGS: 00010246 [ 298.070939][ T7504] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 298.078954][ T7504] RDX: ffffc9000d06a000 RSI: 00000000000168fa RDI: ffffffffffffffec [ 298.086971][ T7504] RBP: ffffc9000523fab0 R08: ffff888052d25b43 R09: 1ffff1100a5a4b68 [ 298.094995][ T7504] R10: dffffc0000000000 R11: ffffed100a5a4b69 R12: 0000000000000004 [ 298.103020][ T7504] R13: 1ffff92000a47f2c R14: dffffc0000000000 R15: ffffffffffffffe4 [ 298.111127][ T7504] FS: 00007f83abf986c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 298.120103][ T7504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.126762][ T7504] CR2: ffffffffffffffec CR3: 000000002bfb7000 CR4: 00000000003506e0 [ 298.134813][ T7504] Call Trace: [ 298.138133][ T7504] [ 298.141131][ T7504] ? __might_sleep+0xe0/0xe0 [ 298.145797][ T7504] ? ext4_ext_release+0x10/0x10 [ 298.150690][ T7504] ? __lock_acquire+0x7d40/0x7d40 [ 298.155750][ T7504] ? ext4_es_lookup_extent+0x60e/0xa00 [ 298.161233][ T7504] ext4_map_blocks+0x9e2/0x1b80 [ 298.166114][ T7504] ? ext4_issue_zeroout+0x250/0x250 [ 298.171331][ T7504] ? ext4_journal_check_start+0x178/0x250 [ 298.177081][ T7504] ? __ext4_journal_start_sb+0x259/0x560 [ 298.182761][ T7504] ext4_alloc_file_blocks+0x3df/0xc50 [ 298.188175][ T7504] ? trace_ext4_fallocate_enter+0x1d0/0x1d0 [ 298.194096][ T7504] ? __mark_inode_dirty+0x3a8/0xc90 [ 298.199313][ T7504] ? down_read_killable+0x340/0x340 [ 298.204533][ T7504] ? file_modified_flags+0x267/0x2a0 [ 298.209928][ T7504] ext4_fallocate+0xa7f/0x1d40 [ 298.214718][ T7504] vfs_fallocate+0x58e/0x700 [ 298.219331][ T7504] __x64_sys_fallocate+0xc1/0x110 [ 298.224388][ T7504] do_syscall_64+0x55/0xb0 [ 298.228839][ T7504] ? clear_bhb_loop+0x40/0x90 [ 298.233534][ T7504] ? clear_bhb_loop+0x40/0x90 [ 298.238217][ T7504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.244128][ T7504] RIP: 0033:0x7f83ab19ce59 [ 298.248557][ T7504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.268185][ T7504] RSP: 002b:00007f83abf98028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 298.276663][ T7504] RAX: ffffffffffffffda RBX: 00007f83ab415fa0 RCX: 00007f83ab19ce59 [ 298.284684][ T7504] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 298.292672][ T7504] RBP: 00007f83ab232d6f R08: 0000000000000000 R09: 0000000000000000 [ 298.300670][ T7504] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 298.308661][ T7504] R13: 00007f83ab416038 R14: 00007f83ab415fa0 R15: 00007ffdf30d3be8 [ 298.316737][ T7504] [ 298.319771][ T7504] Modules linked in: [ 298.323673][ T7504] CR2: ffffffffffffffec [ 298.327830][ T7504] ---[ end trace 0000000000000000 ]--- [ 298.333285][ T7504] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 298.339372][ T7504] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 77 d5 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 298.359007][ T7504] RSP: 0018:ffffc9000523f800 EFLAGS: 00010246 [ 298.365114][ T7504] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 298.373148][ T7504] RDX: ffffc9000d06a000 RSI: 00000000000168fa RDI: ffffffffffffffec [ 298.381251][ T7504] RBP: ffffc9000523fab0 R08: ffff888052d25b43 R09: 1ffff1100a5a4b68 [ 298.389237][ T7504] R10: dffffc0000000000 R11: ffffed100a5a4b69 R12: 0000000000000004 [ 298.397217][ T7504] R13: 1ffff92000a47f2c R14: dffffc0000000000 R15: ffffffffffffffe4 [ 298.405199][ T7504] FS: 00007f83abf986c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 298.414133][ T7504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.420719][ T7504] CR2: ffffffffffffffec CR3: 000000002bfb7000 CR4: 00000000003506e0 [ 298.428722][ T7504] Kernel panic - not syncing: Fatal exception [ 298.434990][ T7504] Kernel Offset: disabled [ 298.439330][ T7504] Rebooting in 86400 seconds..