last executing test programs: 11.531834701s ago: executing program 3 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) connect$unix(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x8000000003c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000540), 0x10) 10.534903045s ago: executing program 3 (id=765): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FpdxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRNi3+EWV9Prb43Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEA7KfLo189dcb9HwAeK1f9/z8AAAAAAAAAAAAAABx0KYp4MlLMXl5N49X7jvqldt/tO2PDI5tXG0hVzUNV+fJX/fSZs+e+9MLQ+W5eak9/QP3d9tl4bfTqxcbLM7dm5ybn5ycnGmPT7eszE5Pb3sNO6290ojoBjVuv3564cWO+ceb5s/d8fGfw/f4njg1eGHr25DPdsmPDIyOj60XqveVrD9yQjq1meByOIk5Giue+99PUiogidn4u6vs79hsNVJ04UXVibHik6shUuzW9UH54pXsiiohGT6Vm9xxtPhZR69vXPmytGbFYNr9s8Imye6OzrbnWtanJxpXW3EJ7oT0zfSV1Wlv2pxFFnE8RSxGx0n//7vqiiFqk+M7R1XQtIg51z8MXq4nBW7ej2MM+bkPZzkZfxFLxCIzZAdYfRbwaKX72zvG4nq8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfI94tFUiyL+shz/C6tporoedK8rl77W+Mr0jZmest3ryke8P9x3pXhI94eBDbk/7rs2Ha1+HpRrUz2KaFVX/NX04L/ZAQAAAAAAAAAAAAAAAGC3DUQRn4kUr/zHn1TziqOal370wtAfDv5q75zxpz9kP2XZ5yNisdjenNzDeWLglXQlpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989npaid03x9vTNxtXWtanOqrDdtX+7a6avra2tNVInmznHcy7mXMq5nHMlZxS5fs5mzvGcizmXci7nXMkZh3L9nM2c4zkXcy7lXM65kjNquX7OZs7xnIs5l3Iu51zJGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jdWU6SIaEaMRyeX+x926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzbvbahGRqn87jpc/zkXzcJmfjOZQmS9F82LOVpW15rceQvvZmb5UxI8jRX/97bsDnse/r/Pu7tcg3vrm+rvP1jp5qPvh4Pv9Txw7emFo5Dee3up12qwBJy61p2/faYwNj4yM9myu5aN/smfbYD5usTtdJyLm33jz9dbU1OTcg78ovwIPUr0c4Z0ffT9fpNqD9dSLR/RF1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xY072ub9v7axXr7/l/f0ze7/T/ZsezH/bqSvFlFfuDXbdyyiPv/Gmyfbt1o3J29OTp87derLQ0NfPnuq73BE/UZ7arLn1a6cLgAAAAAAAAAAAAAAAID9k4r4/UjR+vFqakTEnWq+1uCFoWdPPnMoDlXzre6Zt/3a6NWLjZdnbs3OTc7PT040xqbb12cmJrd7uHo13WtseGRPOvOhBva4/QP1l2dm35hr3/zjhU0/P1K/eG1+Ya51ffOPYyCKiGbvlhNVg8eGR6pGT7Vb01XVK5tOpv/o+lIR/xUprp9rpM/nbXn+/8YZ/vfM/1/cuKM9mv//iZ5t5TFTKuLnkeJ3/urp+HzVziNx3znL5f4uUpw4/7lcLg6X5bpt6DxXoDMzsCz7f5Hin35xb9nufMgn18ue3vaJfUSU4380Unz/L74bv5m33fv8h83H/8jGHe3R+D/Vs+3IPc8r2HHXyeN/MlK89OTb8Vt52wc9/6P77I3jufDd53Ps0fh/qmfbYD7ub+9O1wEAAAAAAAAAAB5pfamIv48UPxyppRfytu38/b+JjTvao7//9emebRO7s17Rh77Y8UkFAAAAgAOiLxXxk0hxc+Htu3Oo753/3TP/8/fW538Opw2fVn/O92vVcwN288//eg3m447vvNsAAAAAAAAAAAAAAAAAAABwoKRUxAt5PfXxaj7/xJbrqS9Hilf+57lcLh0ry3XXgR+sftYvz0yfvDg1NXO9tdC6NjXZGJ1tXZ8s6z4VKVb/9nO5blGtr95db76zxvv6WuxzkWLkH7plO2uxd9cmf2q97Omy7CcixX//471lu+tYf2q97Jmy7N9Eiq//y+Zlj62XPVuW/W6k+NHXG92yR8qy3eejfnq97PPXZ4o9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97a+nuXP68/n9fz9vKW9/sWe9/gzvVOv+D1fr/W71+kPX/q+cKLG51VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWL28mpa7i/fd9Qvtadv3xkbHtm82kCqah6qype/6qfPnD33pReGznfzg+vvts/Ea6NXLzZenrk1Ozc5Pz850Ribbl+fmZjc9h52Wn+jE9UJaNx6/fbEjRvzjTPPn73n4zuD7/c/cWzwwtCzJ5/plh0bHhkZ7SlT63vgo98nbbH9cBTx15Hiue/9NP2wP6KInZ+L+747u9iPbRioOnGi6sTY8EjVkal2a3qh/PBK90QUEY2eSs3uOdqHsdiRZsRi2fyywSfK7o3OtuZa16YmG1dacwvthfbM9JXUaW3Zn0YUcT5FLEXESv/9u+uLIl6PFN85upr+tT/iUPc8fPHy6FdPndm6HcUe9nEbynY2+iKWikdgzA6w/ijinyPFz945Hv/WH1GLzq/4QsSrZf4g4q3ojHcqvxjnIt7b5HvEo6kWRfx/Of4XVtM7/flSXV1XLn2t8ZXpGzM9ZbvXlV2/P+yvgX092gG/NtWjiB9VV/zV9O/+uwYAAAAAAAAAAAAAAAA4QIr49Ujx4rvHUzU/+O6c4vb0zcbV1rWpzrS+7ty/7pzptbW1tUbqZDPneM7FnEs5l3Ou5Iwi18/ZLLO+tjae3y/mXMq5nHMlZxzK9XM2c47nXMy5lHM550rOqOX6OZs5x3Mu5lzKuZxzJec+z2cHAAAAAAAAAAAAAAAAAAAeE0X1T4pvf2M1rfV31pcej04uWw/0Y++XAQAA//8acfcO") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f0000000540)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) syz_open_procfs(0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10.408812257s ago: executing program 2 (id=766): mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) open(0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f00000000c0)=ANY=[]) r0 = syz_open_dev$admmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000"], 0x68}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000580)={0x1ff, 0x8, 0x2, {0x4, @sdr={0x30324c4a, 0x3}}, 0x8}) r6 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) 9.811882885s ago: executing program 4 (id=767): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 7.98403653s ago: executing program 2 (id=768): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) shutdown(r1, 0x0) pipe(&(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 7.23993715s ago: executing program 2 (id=770): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "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"}, 0x2bf) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 6.818665426s ago: executing program 3 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x3}, 0x18) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 6.692036667s ago: executing program 0 (id=773): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0xc0046209, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) 6.424823051s ago: executing program 1 (id=774): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e1", 0x5, 0xfffffffffffffffe) r0 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.421847961s ago: executing program 2 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x7f, 0xef0, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r3}, 0x38) 6.401585911s ago: executing program 4 (id=776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 5.290694387s ago: executing program 0 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r0, &(0x7f0000000080)=@known='trusted.overlay.upper\x00') 4.871706972s ago: executing program 4 (id=778): mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) open(0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f00000000c0)=ANY=[]) r0 = syz_open_dev$admmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000"], 0x68}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000580)={0x1ff, 0x8, 0x2, {0x4, @sdr={0x30324c4a, 0x3}}, 0x8}) r6 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) 4.672029795s ago: executing program 0 (id=779): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e99c27f53cd", 0x8}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 4.660388776s ago: executing program 1 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001000010028bd7000000000000000f100", @ANYRES32=0x0, @ANYBLOB="1000000000000000140003006e657464657673696d3000000000000034001680300001802c000c8014"], 0x68}, 0x1, 0x0, 0x0, 0x24000110}, 0x4c950) 4.009276084s ago: executing program 2 (id=781): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x8b, 0x100000500) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.979382345s ago: executing program 0 (id=782): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) gettid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f0000000540)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000140)="e9", 0x1}], 0x1}}], 0x1, 0x600c000) syz_open_procfs(0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.861868956s ago: executing program 4 (id=783): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) preadv(r5, &(0x7f00000015c0), 0x0, 0x0, 0x0) 3.811773497s ago: executing program 1 (id=784): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}]}]}}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000841) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x7f, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) 3.672331469s ago: executing program 3 (id=785): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000020000000610", @ANYRES32, @ANYBLOB="00b9000000", @ANYRES32=0x0, @ANYRES32], 0x50) 2.550207444s ago: executing program 4 (id=786): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/kvm\x00'}], 0xa, "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"}, 0x2c4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.308091778s ago: executing program 0 (id=787): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0xc0046209, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) 1.268456072s ago: executing program 2 (id=788): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c06", 0x3, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.223442783s ago: executing program 3 (id=789): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') iopl(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) clock_gettime(0x9, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/192, 0xc0}], 0x1}, 0x18df}], 0x1, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x7}, 0x8) 1.190583163s ago: executing program 0 (id=790): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e1", 0x5, 0xfffffffffffffffe) r0 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.176689723s ago: executing program 4 (id=791): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.138513094s ago: executing program 1 (id=792): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e99c27f53cd", 0x8}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 1.056338345s ago: executing program 1 (id=793): mknod(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) open(0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f00000000c0)=ANY=[]) r0 = syz_open_dev$admmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000008c0)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000"], 0x68}}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000580)={0x1ff, 0x8, 0x2, {0x4, @sdr={0x30324c4a, 0x3}}, 0x8}) r6 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x1, 0xb, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) 130.004188ms ago: executing program 3 (id=794): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 0s ago: executing program 1 (id=795): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x180000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) kernel console output (not intermixed with test programs): iscuous mode [ 72.414346][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.423835][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.433491][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.449679][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.461665][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.472839][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.485162][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.498532][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.507024][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.516633][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.526026][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.535065][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.545230][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.562813][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.570927][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.579894][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.589792][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.599345][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.608719][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.643419][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.662593][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.672616][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.717234][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.732400][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.746262][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.754137][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.762840][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.772109][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.780858][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.790709][ T4179] device veth0_macvtap entered promiscuous mode [ 72.812653][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.821552][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.830289][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.846758][ T4170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.858927][ T4170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.868041][ T4170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.877062][ T4170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.897087][ T4179] device veth1_macvtap entered promiscuous mode [ 72.906758][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.915424][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.923336][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.931563][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.941184][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.977279][ T4172] device veth0_vlan entered promiscuous mode [ 72.999695][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.012429][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.024451][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.027949][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.034976][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.036795][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.054860][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.069093][ T4168] device veth0_vlan entered promiscuous mode [ 73.075857][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 73.087745][ T4172] device veth1_vlan entered promiscuous mode [ 73.094846][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 73.113592][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 73.117795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.120958][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 73.135686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.146585][ T4219] Bluetooth: hci4: command 0x040f tx timeout [ 73.147591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.163033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.173982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.182825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.191773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.200489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.243782][ T4168] device veth1_vlan entered promiscuous mode [ 73.258320][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.270551][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.281966][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.292515][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.304819][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.325581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.334097][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.343028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.352504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.370447][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.374559][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.380802][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.390411][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.403479][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.412508][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.439303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.449131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.457879][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.467754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.496630][ T4172] device veth0_macvtap entered promiscuous mode [ 73.531927][ T4168] device veth0_macvtap entered promiscuous mode [ 73.563576][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.571719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.584541][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.588290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.601499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.610742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.619854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.638604][ T4172] device veth1_macvtap entered promiscuous mode [ 73.650165][ T4168] device veth1_macvtap entered promiscuous mode [ 73.708220][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.721644][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.739386][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.747446][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.758118][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.768807][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.780930][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.791619][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.805286][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.838779][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.851572][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.875764][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.909230][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.927531][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.940660][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.959726][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.970982][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.983760][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.991703][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.001019][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.010086][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.019168][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.029694][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.046863][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.065083][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.076474][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.088046][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.098491][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.110463][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.134263][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.145436][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.156063][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.166772][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.178557][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.190635][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.206353][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.218457][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.229279][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.240556][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.263924][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.275048][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.304704][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.315489][ T4256] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.335287][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.412740][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.422506][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437844][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.437871][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.440467][ T4172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.440495][ T4172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.440516][ T4172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.440536][ T4172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.456767][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.511329][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.565957][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.717595][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.764105][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.809733][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.841454][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.894266][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.897532][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.940118][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.018827][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.029792][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.082131][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.118425][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.153584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.206178][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.236121][ T4266] loop3: detected capacity change from 0 to 32768 [ 75.246099][ T4219] Bluetooth: hci0: command 0x0419 tx timeout [ 75.252200][ T4219] Bluetooth: hci2: command 0x0419 tx timeout [ 75.258330][ T4219] Bluetooth: hci3: command 0x0419 tx timeout [ 75.264739][ T4219] Bluetooth: hci4: command 0x0419 tx timeout [ 75.270842][ T4219] Bluetooth: hci1: command 0x0419 tx timeout [ 75.275329][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.338960][ T1232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.442818][ T4266] XFS (loop3): Mounting V5 Filesystem [ 75.570309][ T4266] XFS (loop3): Ending clean mount [ 75.622359][ T4266] XFS (loop3): Quotacheck needed: Please wait. [ 75.901375][ T4266] XFS (loop3): Quotacheck: Done. [ 77.054364][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 77.064299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.583386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.584471][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.586362][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.586487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.588097][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 77.593236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 77.644009][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.645406][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 77.702502][ T4328] netlink: 'syz.0.22': attribute type 39 has an invalid length. [ 77.719769][ T4170] XFS (loop3): Unmounting Filesystem [ 80.630323][ T4355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.31'. [ 80.676548][ T4212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.899858][ T4370] loop3: detected capacity change from 0 to 1764 [ 80.973280][ T4212] usb 2-1: Using ep0 maxpacket: 32 [ 81.103578][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.184621][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.265950][ T4212] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 81.311373][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.451802][ T4212] usb 2-1: config 0 descriptor?? [ 82.107332][ T4382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.40'. [ 82.156276][ T4379] loop3: detected capacity change from 0 to 2048 [ 82.177043][ T4382] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 82.207527][ T4212] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 82.252422][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.261029][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.298613][ T4379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.406373][ T26] audit: type=1800 audit(1750891964.222:2): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.38" name="bus" dev="loop3" ino=1367 res=0 errno=0 [ 82.450324][ T4212] usb 2-1: USB disconnect, device number 2 [ 82.756469][ T4396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 82.797767][ T4398] loop3: detected capacity change from 0 to 256 [ 82.825642][ T4396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.44'. [ 82.931268][ T4398] FAT-fs (loop3): Directory bread(block 64) failed [ 82.966041][ T4398] FAT-fs (loop3): Directory bread(block 65) failed [ 82.972799][ T4398] FAT-fs (loop3): Directory bread(block 66) failed [ 83.043313][ T4398] FAT-fs (loop3): Directory bread(block 67) failed [ 83.057067][ T4401] loop2: detected capacity change from 0 to 1024 [ 83.063740][ T4398] FAT-fs (loop3): Directory bread(block 68) failed [ 83.081001][ T4398] FAT-fs (loop3): Directory bread(block 69) failed [ 83.111470][ T4398] FAT-fs (loop3): Directory bread(block 70) failed [ 83.121532][ T4398] FAT-fs (loop3): Directory bread(block 71) failed [ 83.141908][ T4398] FAT-fs (loop3): Directory bread(block 72) failed [ 83.159202][ T4398] FAT-fs (loop3): Directory bread(block 73) failed [ 83.357227][ T9] hfsplus: b-tree write err: -5, ino 4 [ 83.732629][ T4421] loop0: detected capacity change from 0 to 64 [ 83.737051][ T4422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.55'. [ 83.767503][ T4422] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 83.792167][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.800024][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.828405][ T4424] netlink: 'syz.3.56': attribute type 13 has an invalid length. [ 83.836534][ T4214] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.916065][ T4421] process 'syz.0.54' launched './bus' with NULL argv: empty string added [ 84.203429][ T4214] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.219624][ T4214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.323487][ T4214] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.333667][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.341902][ T4214] usb 3-1: SerialNumber: syz [ 84.495348][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.503435][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.639170][ T4214] usb 3-1: 0:2 : does not exist [ 84.653964][ T4214] usb 3-1: unit 5: unexpected type 0x0a [ 84.693346][ T4214] usb 3-1: USB disconnect, device number 2 [ 84.947991][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.262583][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.286939][ T4424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.821848][ T4424] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.831457][ T4424] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.840608][ T4424] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.849583][ T4424] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.975128][ T4426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.53'. [ 86.548706][ T4465] kvm: pic: non byte read [ 86.564181][ T26] audit: type=1326 audit(1750891968.382:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 87.315207][ T1346] cfg80211: failed to load regulatory.db [ 87.339389][ T4465] kvm: pic: level sensitive irq not supported [ 87.339513][ T4465] kvm: pic: non byte read [ 87.351150][ T4465] kvm: pic: level sensitive irq not supported [ 87.351266][ T4465] kvm: pic: non byte read [ 87.362640][ T4465] kvm: pic: level sensitive irq not supported [ 87.362704][ T4465] kvm: pic: non byte read [ 87.387904][ T26] audit: type=1326 audit(1750891969.152:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4402d58b19 code=0x7ffc0000 [ 87.585389][ T4476] loop3: detected capacity change from 0 to 32768 [ 87.663797][ T4476] ======================================================= [ 87.663797][ T4476] WARNING: The mand mount option has been deprecated and [ 87.663797][ T4476] and is ignored by this kernel. Remove the mand [ 87.663797][ T4476] option from the mount to silence this warning. [ 87.663797][ T4476] ======================================================= [ 87.823126][ T4476] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 87.856771][ T26] audit: type=1326 audit(1750891969.152:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 87.962167][ T4485] netlink: 56 bytes leftover after parsing attributes in process `syz.4.74'. [ 88.016926][ T26] audit: type=1326 audit(1750891969.152:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4402d58b19 code=0x7ffc0000 [ 88.188072][ T26] audit: type=1326 audit(1750891969.152:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 88.293201][ T4214] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.331342][ T26] audit: type=1326 audit(1750891969.152:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 88.360806][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 88.409736][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.480011][ T26] audit: type=1326 audit(1750891969.152:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 88.606067][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 88.642698][ T26] audit: type=1326 audit(1750891969.152:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4402d58b19 code=0x7ffc0000 [ 88.672771][ T26] audit: type=1326 audit(1750891969.152:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 88.695039][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.725495][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.743138][ T26] audit: type=1326 audit(1750891969.152:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 88.773544][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.798837][ T4496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.78'. [ 88.803542][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.834447][ T4214] usb 2-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 88.834828][ T4496] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 88.854402][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.867501][ T4214] usb 2-1: config 0 descriptor?? [ 88.891035][ T26] audit: type=1326 audit(1750891969.152:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4402d58b19 code=0x7ffc0000 [ 88.993499][ T26] audit: type=1326 audit(1750891969.152:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4402d58b19 code=0x7ffc0000 [ 89.119817][ T4501] netlink: 116 bytes leftover after parsing attributes in process `syz.2.80'. [ 89.130921][ T4499] binder_alloc: 4498: binder_alloc_buf, no vma [ 89.242152][ T4170] ocfs2: Unmounting device (7,3) on (node local) [ 89.529031][ T4214] logitech-hidpp-device 0003:046D:C343.0002: hidraw0: USB HID v3.0e Device [HID 046d:c343] on usb-dummy_hcd.1-1/input0 [ 91.344920][ T4213] usb 2-1: USB disconnect, device number 3 [ 91.441162][ T4510] fido_id[4510]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 92.771119][ T4524] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 92.925946][ T4538] loop0: detected capacity change from 0 to 1024 [ 92.944493][ T4540] netlink: 20 bytes leftover after parsing attributes in process `syz.4.90'. [ 92.973870][ T4540] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 93.053216][ T4455] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.160576][ T4546] hfsplus: request for non-existent node 211 in B*Tree [ 93.167935][ T4546] hfsplus: request for non-existent node 211 in B*Tree [ 93.761612][ T4549] binder_alloc: 4548: binder_alloc_buf, no vma [ 93.843450][ T4551] binder_alloc: 4548: binder_alloc_buf, no vma [ 93.858812][ T4544] sctp: failed to load transform for md5: -2 [ 93.985109][ T4455] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.018637][ T4455] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.081659][ T4455] usb 2-1: New USB device found, idVendor=abcd, idProduct=00ee, bcdDevice= 0.00 [ 94.094284][ T4455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.276376][ T4455] usb 2-1: config 0 descriptor?? [ 94.317911][ T4455] usb 2-1: MIDIStreaming interface descriptor not found [ 94.876937][ T4455] usb 2-1: USB disconnect, device number 4 [ 96.591244][ T4537] udevd[4537]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.721826][ T4587] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 96.729124][ T4587] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.812097][ T4595] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 96.819276][ T4595] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.887644][ T4598] binder_alloc: 4597: binder_alloc_buf, no vma [ 96.900497][ T4595] vhci_hcd vhci_hcd.0: Device attached [ 97.617651][ T4605] binder_alloc: 4597: binder_alloc_buf, no vma [ 97.773373][ T4213] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 97.794563][ T4587] vhci_hcd vhci_hcd.0: Device attached [ 97.822530][ T4615] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.846092][ T4610] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 97.852781][ T4610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.870601][ T4599] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 97.877375][ T4599] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.930667][ T4599] vhci_hcd vhci_hcd.0: Device attached [ 97.939084][ T4610] vhci_hcd vhci_hcd.0: Device attached [ 97.948709][ T4622] netlink: 116 bytes leftover after parsing attributes in process `syz.1.109'. [ 97.953428][ T4595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 97.965478][ T4595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.979456][ T4587] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 97.986134][ T4587] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.044276][ T4612] vhci_hcd: connection closed [ 98.057503][ T4590] vhci_hcd: stop threads [ 98.063566][ T4587] vhci_hcd vhci_hcd.0: Device attached [ 98.101022][ T4590] vhci_hcd: release socket [ 98.114480][ T4590] vhci_hcd: disconnect device [ 98.120312][ T4615] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.200673][ T4595] vhci_hcd vhci_hcd.0: Device attached [ 99.061383][ T4633] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(23) [ 99.068141][ T4633] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.152383][ T4633] vhci_hcd vhci_hcd.0: Device attached [ 99.315708][ T4625] vhci_hcd: connection closed [ 99.316967][ T4596] vhci_hcd: connection closed [ 99.322014][ T4634] vhci_hcd: connection closed [ 99.322843][ T4619] vhci_hcd: connection closed [ 99.332178][ T4616] vhci_hcd: connection closed [ 99.337922][ T4591] vhci_hcd: connection reset by peer [ 99.367845][ T4335] vhci_hcd: stop threads [ 99.372168][ T4335] vhci_hcd: release socket [ 99.379381][ T4335] vhci_hcd: disconnect device [ 99.618561][ T4335] vhci_hcd: stop threads [ 99.622868][ T4335] vhci_hcd: release socket [ 99.684582][ T4335] vhci_hcd: disconnect device [ 99.883742][ T4579] Bluetooth: hci3: command 0x0409 tx timeout [ 99.914381][ T4645] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.974372][ T4645] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.160774][ T4215] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.513462][ T4215] usb 4-1: device descriptor read/64, error -71 [ 100.806667][ T4215] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.883244][ T4335] vhci_hcd: stop threads [ 100.888243][ T4335] vhci_hcd: release socket [ 100.903344][ T4335] vhci_hcd: disconnect device [ 100.940338][ T4335] vhci_hcd: stop threads [ 100.971043][ T4335] vhci_hcd: release socket [ 100.980051][ T4335] vhci_hcd: disconnect device [ 100.999042][ T4335] vhci_hcd: stop threads [ 101.007503][ T4668] only policy match revision 0 supported [ 101.007521][ T4668] unable to load match [ 101.020200][ T4335] vhci_hcd: release socket [ 101.025582][ T4335] vhci_hcd: disconnect device [ 101.049191][ T4335] vhci_hcd: stop threads [ 101.079074][ T4335] vhci_hcd: release socket [ 101.085926][ T4335] vhci_hcd: disconnect device [ 101.112398][ T4671] netlink: 116 bytes leftover after parsing attributes in process `syz.2.123'. [ 101.143206][ T4215] usb 4-1: device descriptor read/64, error -71 [ 101.274989][ T4215] usb usb4-port1: attempt power cycle [ 101.713428][ T4215] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.854030][ T4215] usb 4-1: device descriptor read/8, error -71 [ 102.054466][ T4684] loop4: detected capacity change from 0 to 1024 [ 102.209254][ T4215] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.253100][ T4687] device bpq0 entered promiscuous mode [ 102.288153][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 102.314135][ T4215] usb 4-1: device descriptor read/8, error -71 [ 102.523514][ T4215] usb usb4-port1: unable to enumerate USB device [ 102.987703][ T4213] vhci_hcd: vhci_device speed not set [ 104.153822][ T4694] sctp: failed to load transform for md5: -2 [ 105.260871][ T4721] netlink: 'syz.3.136': attribute type 39 has an invalid length. [ 105.507507][ T4733] netlink: 116 bytes leftover after parsing attributes in process `syz.0.140'. [ 105.879972][ T2304] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 108.029888][ T4215] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.273201][ T4215] usb 2-1: device descriptor read/64, error -71 [ 108.292102][ T2304] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 108.309183][ T2304] usb usb34-port1: attempt power cycle [ 108.495576][ T4758] loop4: detected capacity change from 0 to 1024 [ 109.413777][ T4215] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.540090][ T4770] hfsplus: request for non-existent node 211 in B*Tree [ 109.547141][ T4770] hfsplus: request for non-existent node 211 in B*Tree [ 109.563329][ T2304] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 110.353168][ T4768] sctp: failed to load transform for md5: -2 [ 110.494049][ T4778] netlink: 116 bytes leftover after parsing attributes in process `syz.1.153'. [ 110.550962][ T4777] loop2: detected capacity change from 0 to 2048 [ 110.654324][ T2304] usb usb34-port1: Cannot enable. Maybe the USB cable is bad? [ 110.749868][ T2304] usb usb34-port1: unable to enumerate USB device [ 111.018827][ T4777] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.606426][ T4799] loop3: detected capacity change from 0 to 8 [ 111.719834][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 112.662707][ T4816] program syz.1.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.108199][ T154] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 114.114051][ T4824] loop0: detected capacity change from 0 to 2048 [ 114.138985][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 114.159754][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.159754][ T154] [ 114.173913][ T154] EXT4-fs (loop2): Total free blocks count 0 [ 114.179939][ T154] EXT4-fs (loop2): Free/Dirty block details [ 114.213202][ T154] EXT4-fs (loop2): free_blocks=4096 [ 114.218708][ T154] EXT4-fs (loop2): dirty_blocks=512 [ 114.236939][ T4824] loop0: p1 < > p4 [ 114.256059][ T154] EXT4-fs (loop2): Block reservation details [ 114.265927][ T4824] loop0: p4 size 8388608 extends beyond EOD, truncated [ 114.273399][ T154] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 114.279558][ T4833] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 114.288318][ T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 114.308767][ T154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.308767][ T154] [ 115.279712][ T4839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.172'. [ 115.308240][ T4839] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.501033][ T4537] udevd[4537]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 115.534574][ T4656] udevd[4656]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 115.587592][ T4852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.176'. [ 115.638904][ T4853] netlink: 'syz.2.177': attribute type 39 has an invalid length. [ 116.652318][ T4883] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.727852][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.807202][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.819513][ T4883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.836476][ T4883] device bridge_slave_0 left promiscuous mode [ 116.843478][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.876506][ T4883] device bridge_slave_1 left promiscuous mode [ 116.884468][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.967848][ T4883] bond0: (slave bond_slave_0): Releasing backup interface [ 117.044447][ T4883] bond0: (slave bond_slave_1): Releasing backup interface [ 117.195439][ T4883] team0: Port device team_slave_0 removed [ 117.219577][ T4883] team0: Port device team_slave_1 removed [ 117.228467][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.236702][ T4883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.476812][ T4883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.502839][ T4895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'. [ 117.517036][ T4894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.190'. [ 117.545700][ T4883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.581709][ T4885] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 117.592072][ T4883] syz.2.186 (4883) used greatest stack depth: 20416 bytes left [ 117.636383][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.679972][ T4885] team0: Port device bond0 added [ 117.952405][ T4905] tipc: Started in network mode [ 117.978385][ T4905] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 118.051931][ T4905] tipc: Enabling of bearer rejected, failed to enable media [ 118.163243][ T4579] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.314632][ T4912] netlink: 'syz.3.197': attribute type 39 has an invalid length. [ 118.583627][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.620541][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.649020][ T4579] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.748779][ T4579] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.803170][ T4579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.811951][ T26] kauditd_printk_skb: 154 callbacks suppressed [ 118.811965][ T26] audit: type=1326 audit(1750892000.632:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 118.845123][ T4922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 118.865849][ T4579] usb 5-1: config 0 descriptor?? [ 118.871875][ T26] audit: type=1326 audit(1750892000.642:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 118.895857][ T26] audit: type=1326 audit(1750892000.682:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 118.928518][ T26] audit: type=1326 audit(1750892000.692:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 118.977547][ T26] audit: type=1326 audit(1750892000.692:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 119.019207][ T26] audit: type=1326 audit(1750892000.692:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 119.063263][ T26] audit: type=1326 audit(1750892000.692:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 119.090205][ T26] audit: type=1326 audit(1750892000.692:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4402dbc929 code=0x7ffc0000 [ 119.110776][ T2304] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.127704][ T26] audit: type=1326 audit(1750892000.692:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4923 comm="syz.0.203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4402dbc929 code=0x0 [ 119.414746][ T4938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.206'. [ 119.429300][ T4579] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 119.514887][ T4579] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 119.813180][ T2304] usb 3-1: Using ep0 maxpacket: 16 [ 119.873112][ T4946] netlink: 'syz.0.209': attribute type 39 has an invalid length. [ 120.113370][ T2304] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 120.135282][ T2304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.142322][ T4952] Zero length message leads to an empty skb [ 120.169894][ T2304] usb 3-1: Product: syz [ 120.180544][ T2304] usb 3-1: Manufacturer: syz [ 120.192162][ T2304] usb 3-1: SerialNumber: syz [ 120.228585][ T2304] usb 3-1: config 0 descriptor?? [ 120.277068][ T2304] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 120.615507][ T2304] ssu100: probe of 3-1:0.0 failed with error -110 [ 121.285189][ T4960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.214'. [ 121.519267][ T4965] netlink: 'syz.1.216': attribute type 3 has an invalid length. [ 121.529048][ T4965] netlink: 'syz.1.216': attribute type 3 has an invalid length. [ 121.831957][ T4969] loop0: detected capacity change from 0 to 2048 [ 121.856843][ T4975] netlink: 'syz.4.220': attribute type 39 has an invalid length. [ 121.936203][ T4979] netlink: 44 bytes leftover after parsing attributes in process `syz.1.219'. [ 122.198637][ T2304] usb 5-1: USB disconnect, device number 2 [ 122.295683][ T21] usb 3-1: USB disconnect, device number 3 [ 122.364810][ T4969] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.703438][ T4215] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.718842][ T4995] loop2: detected capacity change from 0 to 47 [ 122.809859][ T4999] tipc: Started in network mode [ 122.829435][ T4999] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 122.888993][ T4999] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 122.918480][ T4999] tipc: Enabled bearer , priority 10 [ 122.927292][ T5003] netlink: 84 bytes leftover after parsing attributes in process `syz.1.227'. [ 122.988900][ T4215] usb 4-1: Using ep0 maxpacket: 8 [ 123.130322][ T5012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'. [ 123.134907][ T4215] usb 4-1: config 255 has an invalid interface number: 222 but max is 0 [ 123.153207][ T4215] usb 4-1: config 255 has no interface number 0 [ 123.354193][ T4215] usb 4-1: New USB device found, idVendor=071d, idProduct=1005, bcdDevice=4d.b4 [ 123.366846][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.386104][ T4215] usb 4-1: Product: syz [ 123.397040][ T4215] usb 4-1: Manufacturer: syz [ 123.409523][ T4215] usb 4-1: SerialNumber: syz [ 123.486099][ T4215] HFC-S_USB: probe of 4-1:255.222 failed with error -5 [ 123.655980][ T5025] netlink: 'syz.2.236': attribute type 39 has an invalid length. [ 123.689267][ T4215] usb 4-1: USB disconnect, device number 6 [ 123.785784][ T4579] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.073201][ T4579] usb 5-1: Using ep0 maxpacket: 16 [ 124.113928][ T5030] loop2: detected capacity change from 0 to 40427 [ 124.123415][ T2304] tipc: Node number set to 1 [ 124.219820][ T4264] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 124.286977][ T5032] tipc: Started in network mode [ 124.299526][ T5032] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 124.309826][ T4264] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 124.313447][ T4579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 124.322452][ T5032] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 124.344199][ T5032] tipc: Enabled bearer , priority 10 [ 124.372831][ T4264] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.372831][ T4264] [ 124.396230][ T4579] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 124.405716][ T4264] EXT4-fs (loop0): Total free blocks count 0 [ 124.426344][ T4264] EXT4-fs (loop0): Free/Dirty block details [ 124.445070][ T4264] EXT4-fs (loop0): free_blocks=4096 [ 124.465703][ T4264] EXT4-fs (loop0): dirty_blocks=416 [ 124.470934][ T4264] EXT4-fs (loop0): Block reservation details [ 124.496219][ T4264] EXT4-fs (loop0): i_reserved_data_blocks=26 [ 124.529088][ T4264] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 390 with error 28 [ 124.559500][ T4579] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 124.572279][ T4264] EXT4-fs (loop0): This should not happen!! Data will be lost [ 124.572279][ T4264] [ 124.843419][ T4579] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 124.913116][ T4579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.099697][ T4579] usb 5-1: Product: syz [ 125.133391][ T4579] usb 5-1: Manufacturer: syz [ 125.152957][ T4579] usb 5-1: SerialNumber: syz [ 125.194261][ T4579] usb 5-1: config 0 descriptor?? [ 125.216774][ T5021] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.293038][ T4579] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 125.323269][ T2304] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.325753][ T4579] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 125.372469][ T4579] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 125.392501][ T4579] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 125.426504][ T4579] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 125.546117][ T5062] netlink: 'syz.1.248': attribute type 39 has an invalid length. [ 125.569600][ T4579] tipc: Node number set to 1 [ 125.661103][ T5061] loop2: detected capacity change from 0 to 2048 [ 125.694557][ T2304] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.726049][ T2304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.784012][ T5061] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.827787][ T2304] usb 4-1: config 0 descriptor?? [ 126.036366][ T2304] cp210x 4-1:0.0: cp210x converter detected [ 126.463273][ T2304] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 126.493322][ T2304] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 126.510778][ T2304] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 126.546992][ T2304] usb 4-1: cp210x converter now attached to ttyUSB0 [ 126.624878][ T2304] usb 4-1: USB disconnect, device number 7 [ 126.652163][ T2304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.685833][ T2304] cp210x 4-1:0.0: device disconnected [ 126.728141][ T5085] tipc: Started in network mode [ 126.742185][ T5085] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 126.771733][ T5085] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 126.808594][ T5085] tipc: Enabled bearer , priority 10 [ 127.080858][ T5092] loop1: detected capacity change from 0 to 128 [ 127.237857][ T5094] kvm: pic: non byte read [ 127.242536][ T5094] kvm: pic: level sensitive irq not supported [ 127.242603][ T5094] kvm: pic: non byte read [ 127.293724][ T5094] kvm: pic: level sensitive irq not supported [ 127.293794][ T5094] kvm: pic: non byte read [ 127.359760][ T5094] kvm: pic: level sensitive irq not supported [ 127.359808][ T5094] kvm: pic: non byte read [ 127.383544][ T5094] kvm: pic: level sensitive irq not supported [ 127.383618][ T5094] kvm: pic: non byte read [ 127.414689][ T5099] binder: 5098:5099 ioctl 4018620d 0 returned -22 [ 127.507863][ T5094] kvm: pic: level sensitive irq not supported [ 127.507912][ T5094] kvm: pic: non byte read [ 127.569887][ T5094] kvm: pic: level sensitive irq not supported [ 127.569953][ T5094] kvm: pic: non byte read [ 127.620423][ T5094] kvm: pic: level sensitive irq not supported [ 127.620490][ T5094] kvm: pic: non byte read [ 127.663621][ T5094] kvm: pic: level sensitive irq not supported [ 127.663685][ T5094] kvm: pic: non byte read [ 127.788525][ T5105] loop1: detected capacity change from 0 to 32768 [ 127.852214][ T5105] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.257 (5105) [ 127.927141][ T5105] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 127.936177][ T5105] BTRFS info (device loop1): setting nodatacow, compression disabled [ 127.944371][ T5105] BTRFS info (device loop1): max_inline at 0 [ 127.951338][ T5105] BTRFS info (device loop1): enabling disk space caching [ 127.958485][ T5105] BTRFS info (device loop1): setting datasum, datacow enabled [ 127.966013][ T5105] BTRFS info (device loop1): turning off barriers [ 127.972428][ T5105] BTRFS info (device loop1): turning on flush-on-commit [ 127.979716][ T5105] BTRFS info (device loop1): doing ref verification [ 127.986417][ T5105] BTRFS info (device loop1): force clearing of disk cache [ 127.993608][ T5105] BTRFS info (device loop1): enabling ssd optimizations [ 128.000565][ T5105] BTRFS info (device loop1): max_inline at 4096 [ 128.006895][ T5105] BTRFS info (device loop1): disk space caching is enabled [ 128.014191][ T5105] BTRFS info (device loop1): has skinny extents [ 128.022178][ T2304] tipc: Node number set to 1 [ 128.098952][ T2304] usb 5-1: USB disconnect, device number 3 [ 128.148810][ T2304] mcba_usb 5-1:0.0 can0: device disconnected [ 128.532809][ T5105] BTRFS info (device loop1): clearing free space tree [ 128.540181][ T5105] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.550294][ T5105] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.745896][ T26] audit: type=1800 audit(1750892010.572:178): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.257" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 128.996682][ T4335] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 129.052976][ T4335] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 129.163431][ T4335] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.163431][ T4335] [ 129.174502][ T4335] EXT4-fs (loop2): Total free blocks count 0 [ 129.182130][ T4335] EXT4-fs (loop2): Free/Dirty block details [ 129.189018][ T4335] EXT4-fs (loop2): free_blocks=4096 [ 129.195209][ T4335] EXT4-fs (loop2): dirty_blocks=400 [ 129.200454][ T4335] EXT4-fs (loop2): Block reservation details [ 129.207411][ T4335] EXT4-fs (loop2): i_reserved_data_blocks=25 [ 129.216103][ T4335] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 372 with error 28 [ 129.230355][ T4335] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.230355][ T4335] [ 130.043251][ T4456] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.318077][ T4215] Bluetooth: hci4: command 0x0405 tx timeout [ 130.455133][ T5158] binder: 5154:5158 ioctl 4018620d 0 returned -22 [ 130.563280][ T4456] usb 4-1: Using ep0 maxpacket: 8 [ 130.718505][ T4456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.739940][ T4456] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.953254][ T4456] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 131.720352][ T4456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.728839][ T4456] usb 4-1: Product: syz [ 131.733038][ T4456] usb 4-1: Manufacturer: syz [ 131.738188][ T4456] usb 4-1: SerialNumber: syz [ 131.748463][ T4456] usb 4-1: config 0 descriptor?? [ 131.798470][ T4456] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 131.930605][ T5183] loop4: detected capacity change from 0 to 2048 [ 132.004838][ T4456] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 132.019396][ T4456] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 132.050098][ T4456] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 132.104250][ T5183] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.215450][ T4456] usb 4-1: USB disconnect, device number 8 [ 132.827209][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.027996][ T5200] kvm: emulating exchange as write [ 133.426669][ T5210] binder: 5207:5210 ioctl 4018620d 0 returned -22 [ 133.736287][ T5214] fuse: Bad value for 'fd' [ 133.909582][ T5222] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.523319][ T4456] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 134.923651][ T4456] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 134.971644][ T4456] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.083519][ T4456] usb 3-1: config 0 has no interface number 0 [ 135.106241][ T4456] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.148800][ T4456] usb 3-1: config 0 interface 25 has no altsetting 0 [ 135.250835][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 135.330789][ T5245] loop3: detected capacity change from 0 to 256 [ 135.333593][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.353359][ T4456] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 135.372991][ T4456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.393278][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.393278][ T9] [ 135.398319][ T5245] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.403141][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 135.415600][ T4456] usb 3-1: Product: syz [ 135.419923][ T9] EXT4-fs (loop4): Free/Dirty block details [ 135.431312][ T9] EXT4-fs (loop4): free_blocks=4096 [ 135.436906][ T9] EXT4-fs (loop4): dirty_blocks=400 [ 135.442287][ T9] EXT4-fs (loop4): Block reservation details [ 135.455089][ T9] EXT4-fs (loop4): i_reserved_data_blocks=25 [ 135.462604][ T4590] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 380 with error 28 [ 135.493175][ T4456] usb 3-1: Manufacturer: syz [ 135.499974][ T4456] usb 3-1: SerialNumber: syz [ 135.504757][ T5245] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 135.515886][ T4456] usb 3-1: config 0 descriptor?? [ 135.521482][ T4590] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.521482][ T4590] [ 135.560320][ T5245] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 136.373347][ T4456] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 136.383253][ T4456] usb 3-1: No valid video chain found. [ 137.321521][ T4456] usb 3-1: USB disconnect, device number 4 [ 137.690576][ T5260] binder: 5259:5260 ioctl c0306201 0 returned -14 [ 139.333813][ T5282] loop3: detected capacity change from 0 to 40427 [ 139.424420][ T5282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.432497][ T5282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.446712][ T5282] F2FS-fs (loop3): invalid crc value [ 139.529476][ T5282] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.026245][ T5282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.034559][ T5282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.037389][ T5291] loop0: detected capacity change from 0 to 2048 [ 141.363927][ T5291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 141.823550][ T4302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 141.901741][ T4302] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 142.000411][ T4302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.000411][ T4302] [ 142.044998][ T4302] EXT4-fs (loop0): Total free blocks count 0 [ 142.071076][ T4302] EXT4-fs (loop0): Free/Dirty block details [ 142.099704][ T4302] EXT4-fs (loop0): free_blocks=4096 [ 142.121248][ T4302] EXT4-fs (loop0): dirty_blocks=512 [ 142.146782][ T4302] EXT4-fs (loop0): Block reservation details [ 142.176799][ T4302] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 142.202326][ T4303] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 142.247851][ T4303] EXT4-fs (loop0): This should not happen!! Data will be lost [ 142.247851][ T4303] [ 142.504557][ T5312] binder: 5311:5312 ioctl c0306201 0 returned -14 [ 142.637970][ T5314] capability: warning: `syz.0.307' uses 32-bit capabilities (legacy support in use) [ 144.457204][ T5310] loop2: detected capacity change from 0 to 40427 [ 144.642031][ T5310] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 144.729799][ T5310] F2FS-fs (loop2): invalid crc value [ 144.757585][ T5310] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.135860][ T5339] loop3: detected capacity change from 0 to 256 [ 145.659166][ T5339] FAT-fs (loop3): Directory bread(block 64) failed [ 145.978772][ T5339] FAT-fs (loop3): Directory bread(block 65) failed [ 145.985518][ T5339] FAT-fs (loop3): Directory bread(block 66) failed [ 145.992079][ T5339] FAT-fs (loop3): Directory bread(block 67) failed [ 145.998799][ T5339] FAT-fs (loop3): Directory bread(block 68) failed [ 146.006494][ T5339] FAT-fs (loop3): Directory bread(block 69) failed [ 146.013532][ T5339] FAT-fs (loop3): Directory bread(block 70) failed [ 146.020119][ T5339] FAT-fs (loop3): Directory bread(block 71) failed [ 146.026894][ T5339] FAT-fs (loop3): Directory bread(block 72) failed [ 146.033514][ T5339] FAT-fs (loop3): Directory bread(block 73) failed [ 146.531517][ T5352] loop1: detected capacity change from 0 to 2048 [ 147.172301][ T4455] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 147.232419][ T5352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.463118][ T4455] usb 1-1: Using ep0 maxpacket: 16 [ 148.573204][ T4455] usb 1-1: device descriptor read/all, error -71 [ 148.621899][ T5347] loop4: detected capacity change from 0 to 32768 [ 148.777094][ T5372] kvm: pic: non byte read [ 148.782036][ T5372] kvm: pic: level sensitive irq not supported [ 148.782103][ T5372] kvm: pic: non byte read [ 148.786008][ T5347] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 148.789567][ T5372] kvm: pic: level sensitive irq not supported [ 148.802801][ T5372] kvm: pic: non byte read [ 148.844227][ T5372] kvm: pic: level sensitive irq not supported [ 148.844293][ T5372] kvm: pic: non byte read [ 148.885310][ T5372] kvm: pic: level sensitive irq not supported [ 148.885377][ T5372] kvm: pic: non byte read [ 148.933593][ T5372] kvm: pic: level sensitive irq not supported [ 148.933668][ T5372] kvm: pic: non byte read [ 148.963524][ T5372] kvm: pic: level sensitive irq not supported [ 148.963591][ T5372] kvm: pic: non byte read [ 149.103014][ T26] audit: type=1800 audit(1750892030.922:179): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.316" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 149.201301][ T26] audit: type=1800 audit(1750892030.952:180): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.316" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 149.331897][ T4179] ocfs2: Unmounting device (7,4) on (node local) [ 149.409447][ T5380] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.420301][ T5380] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.511599][ T5397] device vcan0 entered promiscuous mode [ 149.653440][ T4457] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.447172][ T4457] usb 3-1: Using ep0 maxpacket: 32 [ 150.573430][ T4457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.611906][ T4457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.694615][ T4457] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 150.720108][ T4457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.754408][ T4457] usb 3-1: config 0 descriptor?? [ 150.880031][ T5422] netlink: 'syz.0.336': attribute type 39 has an invalid length. [ 151.715925][ T4457] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 151.739857][ T4457] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 151.853165][ T4579] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 151.897214][ T5426] kvm: pic: non byte read [ 151.912063][ T5426] kvm: pic: level sensitive irq not supported [ 151.912112][ T5426] kvm: pic: non byte read [ 151.927304][ T5426] kvm: pic: level sensitive irq not supported [ 151.927369][ T5426] kvm: pic: non byte read [ 151.952937][ T5426] kvm: pic: level sensitive irq not supported [ 151.953287][ T5426] kvm: pic: level sensitive irq not supported [ 151.953409][ T4457] ft260 0003:0403:6030.0004: chip code: 6424 8183 [ 152.244734][ T4579] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.265032][ T4579] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.393368][ T4457] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 152.473622][ T4579] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.502399][ T4579] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.527431][ T4579] usb 2-1: Product: syz [ 152.531885][ T4579] usb 2-1: Manufacturer: syz [ 152.537255][ T4579] usb 2-1: SerialNumber: syz [ 152.544367][ T4579] usb 2-1: config 0 descriptor?? [ 152.597260][ T4579] usb 2-1: selecting invalid altsetting 0 [ 152.618260][ T5431] loop4: detected capacity change from 0 to 40427 [ 152.650205][ T5395] ft260 0003:0403:6030.0004: ft260_i2c_read: failed to start transaction, ret -38 [ 152.678167][ T4457] usb 3-1: USB disconnect, device number 5 [ 152.762730][ T5431] F2FS-fs (loop4): invalid crc value [ 153.074659][ T5431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.587752][ T4215] usb 2-1: USB disconnect, device number 7 [ 153.681985][ T5431] F2FS-fs (loop4): Start checkpoint disabled! [ 153.883303][ T5431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 155.105801][ T5465] sched: RT throttling activated [ 156.244350][ T5431] attempt to access beyond end of device [ 156.244350][ T5431] loop4: rw=2049, want=45104, limit=40427 [ 156.772794][ T154] attempt to access beyond end of device [ 156.772794][ T154] loop4: rw=2049, want=45112, limit=40427 [ 156.833427][ T4457] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.002528][ T5486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 157.020858][ T5486] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 157.054076][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.061637][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.093275][ T4457] usb 3-1: Using ep0 maxpacket: 16 [ 157.103403][ T4214] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.223433][ T4457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 157.260179][ T4457] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 157.313881][ T4457] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 158.079647][ T4214] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.090109][ T4214] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.133459][ T4457] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 158.215507][ T5172] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.461822][ T4457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.470336][ T4457] usb 3-1: Product: syz [ 158.474627][ T4457] usb 3-1: Manufacturer: syz [ 158.479246][ T4457] usb 3-1: SerialNumber: syz [ 158.486034][ T4457] usb 3-1: config 0 descriptor?? [ 158.561130][ T5472] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.610311][ T4457] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 158.616475][ T4214] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.633213][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.642885][ T4457] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 158.649606][ T4214] usb 1-1: Product: syz [ 158.654551][ T4457] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 158.660417][ T4457] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 158.667587][ T4214] usb 1-1: Manufacturer: syz [ 158.672214][ T4214] usb 1-1: SerialNumber: syz [ 158.683381][ T4457] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 158.697784][ T4214] usb 1-1: config 0 descriptor?? [ 158.748964][ T4214] usb 1-1: selecting invalid altsetting 0 [ 158.889458][ T4214] usb 3-1: USB disconnect, device number 6 [ 158.900281][ T4214] mcba_usb 3-1:0.0 can0: device disconnected [ 159.871655][ T5172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.904798][ T5172] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 159.928313][ T5172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.709669][ T5172] usb 5-1: config 0 descriptor?? [ 161.093321][ T5172] ath6kl: Failed to submit usb control message: -71 [ 161.101220][ T5172] ath6kl: unable to send the bmi data to the device: -71 [ 161.108765][ T5172] ath6kl: Unable to send get target info: -71 [ 161.119504][ T5172] ath6kl: Failed to init ath6kl core: -71 [ 161.145850][ T5172] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 161.165014][ T5172] usb 5-1: USB disconnect, device number 4 [ 161.813954][ T4214] usb 1-1: USB disconnect, device number 4 [ 162.221886][ T5556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.367'. [ 162.245387][ T5559] loop1: detected capacity change from 0 to 256 [ 162.260055][ T5556] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.520402][ T5568] loop4: detected capacity change from 0 to 2048 [ 162.618329][ T5568] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 162.993450][ T5585] loop3: detected capacity change from 0 to 4096 [ 163.077352][ T4215] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 163.085400][ T5172] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.136470][ T5585] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 163.149831][ T5585] ntfs3: loop3: Failed to load $Extend. [ 163.790897][ T4215] usb 2-1: Using ep0 maxpacket: 16 [ 163.963314][ T5172] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 163.973379][ T4215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 164.096952][ T4215] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 164.107288][ T5172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.114352][ T4215] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 165.013500][ T5172] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 165.032529][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 165.043461][ T5172] usb 1-1: Product: syz [ 165.047701][ T5172] usb 1-1: Manufacturer: syz [ 165.052582][ T5172] usb 1-1: SerialNumber: syz [ 165.057690][ T4215] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 165.067867][ T4215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.077147][ T5172] usb 1-1: config 0 descriptor?? [ 165.083889][ T4215] usb 2-1: Product: syz [ 165.088086][ T4215] usb 2-1: Manufacturer: syz [ 165.092859][ T4215] usb 2-1: SerialNumber: syz [ 165.112473][ T4215] usb 2-1: config 0 descriptor?? [ 165.122999][ T5172] usb 1-1: selecting invalid altsetting 0 [ 165.189312][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.380'. [ 165.199439][ T5603] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 165.241491][ T5579] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 165.299195][ T4215] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 165.451441][ T4215] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 165.458154][ T4215] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 165.465275][ T4215] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 165.471754][ T4215] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 166.573182][ T2304] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.660690][ T5615] loop4: detected capacity change from 0 to 512 [ 166.712377][ T5615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 166.726430][ T5618] kAFS: No cell specified [ 166.748570][ T5615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 166.779268][ T5615] EXT4-fs (loop4): 1 truncate cleaned up [ 166.789446][ T5615] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000010000,stripe=0x0000000000000012,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 167.644612][ T4214] usb 1-1: USB disconnect, device number 5 [ 167.687050][ T2304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.716228][ T2304] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 167.743456][ T5632] loop3: detected capacity change from 0 to 256 [ 167.771139][ T2304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.872012][ T2304] usb 3-1: config 0 descriptor?? [ 168.158574][ T5632] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 168.381064][ T5632] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 168.571519][ T5642] loop4: detected capacity change from 0 to 2048 [ 168.893410][ T5642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.035360][ T2304] ath6kl: Failed to read usb control message: -71 [ 169.041873][ T2304] ath6kl: Unable to read the bmi data from the device: -71 [ 169.053186][ T2304] ath6kl: Unable to recv target info: -71 [ 169.059635][ T2304] ath6kl: Failed to init ath6kl core: -71 [ 169.076432][ T2304] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 169.087562][ T2304] usb 3-1: USB disconnect, device number 7 [ 169.097297][ T4162] udevd[4162]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 170.422868][ T4579] usb 2-1: USB disconnect, device number 8 [ 170.432273][ T4302] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 170.477280][ T3840] mcba_usb 2-1:0.0 can0: bit-timing not yet defined [ 170.479724][ T4302] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.488563][ T4579] mcba_usb 2-1:0.0 can0: device disconnected [ 170.603122][ T4302] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.603122][ T4302] [ 170.646171][ T4302] EXT4-fs (loop4): Total free blocks count 0 [ 170.666786][ T4302] EXT4-fs (loop4): Free/Dirty block details [ 170.680375][ T4302] EXT4-fs (loop4): free_blocks=4096 [ 170.691390][ T4302] EXT4-fs (loop4): dirty_blocks=512 [ 170.749082][ T4302] EXT4-fs (loop4): Block reservation details [ 170.796827][ T4302] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 170.835283][ T4302] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 170.849048][ T4302] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.849048][ T4302] [ 171.048101][ T5679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.391'. [ 171.113022][ T5679] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 172.157526][ T5656] loop3: detected capacity change from 0 to 32768 [ 172.353181][ T5174] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 172.705233][ T5656] JBD2: Ignoring recovery information on journal [ 173.147823][ T5656] JBD2: recovery failed [ 173.182567][ T5656] (syz.3.390,5656,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 173.233769][ T5656] (syz.3.390,5656,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 173.243244][ T5656] (syz.3.390,5656,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 173.250917][ T5656] (syz.3.390,5656,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 173.447174][ T5656] (syz.3.390,5656,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 174.114632][ T5174] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 174.155440][ T5174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.214849][ T5717] loop2: detected capacity change from 0 to 2048 [ 174.313444][ T5174] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.373901][ T5174] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.434355][ T5717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.547440][ T5174] usb 5-1: Product: syz [ 174.552048][ T5174] usb 5-1: Manufacturer: syz [ 174.697756][ T5174] usb 5-1: SerialNumber: syz [ 175.038548][ T5174] usb 5-1: config 0 descriptor?? [ 175.254361][ T5174] usb 5-1: can't set config #0, error -71 [ 175.266327][ T5174] usb 5-1: USB disconnect, device number 5 [ 175.988310][ T5746] netlink: 'syz.3.409': attribute type 39 has an invalid length. [ 177.783340][ T4457] Bluetooth: hci2: command 0x0409 tx timeout [ 177.932174][ T144] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 177.956625][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 177.970259][ T5773] netlink: 'syz.3.420': attribute type 39 has an invalid length. [ 177.973273][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.973273][ T144] [ 178.014731][ T144] EXT4-fs (loop2): Total free blocks count 0 [ 178.021572][ T144] EXT4-fs (loop2): Free/Dirty block details [ 178.058219][ T144] EXT4-fs (loop2): free_blocks=4096 [ 178.068829][ T144] EXT4-fs (loop2): dirty_blocks=512 [ 178.075604][ T144] EXT4-fs (loop2): Block reservation details [ 178.081807][ T144] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 178.107902][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 178.161575][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 178.161575][ T144] [ 178.235382][ T4457] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.272585][ T5779] loop1: detected capacity change from 0 to 256 [ 179.647914][ T5787] netlink: 116 bytes leftover after parsing attributes in process `syz.3.423'. [ 179.793429][ T4457] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 179.825207][ T4457] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.650140][ T4457] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 180.673420][ T4457] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 180.681638][ T4457] usb 5-1: Product: syz [ 180.687195][ T4457] usb 5-1: Manufacturer: syz [ 180.691821][ T4457] usb 5-1: SerialNumber: syz [ 180.735530][ T4457] usb 5-1: config 0 descriptor?? [ 180.793302][ T4457] usb 5-1: can't set config #0, error -71 [ 180.803935][ T5804] loop2: detected capacity change from 0 to 2048 [ 180.810341][ T4457] usb 5-1: USB disconnect, device number 6 [ 180.820238][ T5810] netlink: 'syz.4.431': attribute type 39 has an invalid length. [ 180.914365][ T5804] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.692151][ T4590] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 181.843322][ T4590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.859802][ T4590] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.859802][ T4590] [ 181.869888][ T4590] EXT4-fs (loop2): Total free blocks count 0 [ 181.875977][ T4590] EXT4-fs (loop2): Free/Dirty block details [ 181.882128][ T4590] EXT4-fs (loop2): free_blocks=4096 [ 181.887433][ T4590] EXT4-fs (loop2): dirty_blocks=512 [ 181.893497][ T4590] EXT4-fs (loop2): Block reservation details [ 181.899514][ T4590] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 181.938567][ T4590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 181.951617][ T4590] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.951617][ T4590] [ 182.183146][ T4457] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 182.347867][ T5841] loop0: detected capacity change from 0 to 2048 [ 182.506844][ T5841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.583250][ T4457] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 183.027237][ T4457] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.041448][ T4457] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 183.053526][ T4457] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.068762][ T4457] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.079830][ T4457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.536729][ T4457] usb 4-1: invalid MIDI out EP 0 [ 185.211066][ T5856] netlink: 'syz.3.443': attribute type 39 has an invalid length. [ 185.303665][ T4457] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 185.320012][ T4457] usb 4-1: USB disconnect, device number 9 [ 185.503370][ T4219] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.560203][ T5866] loop4: detected capacity change from 0 to 2048 [ 185.703173][ T4215] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.712871][ T4284] udevd[4284]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.934307][ T5866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.183346][ T4215] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 186.263356][ T4215] usb 1-1: config 0 has no interfaces? [ 186.343455][ T4215] usb 1-1: config 0 has no interfaces? [ 186.435477][ T4215] usb 1-1: config 0 has no interfaces? [ 186.479570][ T1232] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 186.501702][ T1232] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 186.514139][ T1232] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.514139][ T1232] [ 186.524629][ T1232] EXT4-fs (loop4): Total free blocks count 0 [ 186.530679][ T1232] EXT4-fs (loop4): Free/Dirty block details [ 186.537059][ T1232] EXT4-fs (loop4): free_blocks=4096 [ 186.542292][ T1232] EXT4-fs (loop4): dirty_blocks=512 [ 186.548080][ T1232] EXT4-fs (loop4): Block reservation details [ 186.554470][ T1232] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 186.562203][ T1232] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 186.625689][ T1232] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.625689][ T1232] [ 186.663376][ T4215] usb 1-1: config 0 has no interfaces? [ 186.743476][ T4215] usb 1-1: config 0 has no interfaces? [ 186.843595][ T4215] usb 1-1: config 0 has no interfaces? [ 186.935636][ T4215] usb 1-1: config 0 has no interfaces? [ 187.545208][ T4215] usb 1-1: config 0 has no interfaces? [ 187.572342][ T4219] usb 2-1: device descriptor read/all, error -71 [ 187.714214][ T4215] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.935461][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.143310][ T4215] usb 1-1: Product: syz [ 188.147527][ T4215] usb 1-1: Manufacturer: syz [ 188.152395][ T4215] usb 1-1: SerialNumber: syz [ 188.188354][ T4215] usb 1-1: config 0 descriptor?? [ 188.663960][ T4215] usb 1-1: can't set config #0, error -71 [ 188.681125][ T4215] usb 1-1: USB disconnect, device number 6 [ 191.083919][ T4215] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.434471][ T4214] Bluetooth: hci2: command 0x0406 tx timeout [ 191.483656][ T4215] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 191.520529][ T4215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.682890][ T4215] usb 1-1: config 0 has no interface number 0 [ 191.769554][ T4214] Bluetooth: hci3: command 0x0406 tx timeout [ 191.782549][ T4215] usb 1-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.523248][ T5914] loop1: detected capacity change from 0 to 2048 [ 192.549549][ T4215] usb 1-1: config 0 interface 25 has no altsetting 0 [ 193.184317][ T4214] Bluetooth: hci1: command 0x0406 tx timeout [ 193.853251][ T4215] usb 1-1: string descriptor 0 read error: -71 [ 193.859571][ T4215] usb 1-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 193.899082][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.919660][ T5914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.932999][ T4215] usb 1-1: config 0 descriptor?? [ 193.940235][ T5924] binder: BINDER_SET_CONTEXT_MGR already set [ 193.955464][ T5924] binder: 5922:5924 ioctl 4018620d 200000000040 returned -16 [ 194.003538][ T4215] usb 1-1: can't set config #0, error -71 [ 194.021124][ T4215] usb 1-1: USB disconnect, device number 7 [ 194.280036][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563812][ T5931] loop4: detected capacity change from 0 to 2048 [ 194.979949][ T5944] usb usb8: usbfs: process 5944 (syz.1.466) did not claim interface 0 before use [ 194.997677][ T4215] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.012043][ T5931] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 195.843236][ T4215] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.907258][ T4215] usb 1-1: config 0 interface 0 has no altsetting 0 [ 196.790401][ T5961] netlink: 'syz.3.469': attribute type 4 has an invalid length. [ 197.647795][ T4215] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.656988][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.669109][ T4215] usb 1-1: Product: syz [ 197.673406][ T4215] usb 1-1: Manufacturer: syz [ 197.678020][ T4215] usb 1-1: SerialNumber: syz [ 197.685678][ T4215] usb 1-1: config 0 descriptor?? [ 197.694828][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 197.715300][ T4215] usb 1-1: can't set config #0, error -71 [ 197.729333][ T5972] binder: BINDER_SET_CONTEXT_MGR already set [ 197.793267][ T4214] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.830259][ T5972] binder: 5971:5972 ioctl 4018620d 200000000040 returned -16 [ 198.813731][ T4214] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 198.868045][ T4214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.034930][ T4214] usb 3-1: config 0 has no interface number 0 [ 199.147487][ T4214] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.267016][ T4215] usb 1-1: USB disconnect, device number 8 [ 199.346449][ T4214] usb 3-1: config 0 interface 25 has no altsetting 0 [ 199.593628][ T4214] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 199.639764][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.753537][ T4214] usb 3-1: Product: syz [ 199.821130][ T4214] usb 3-1: Manufacturer: syz [ 199.889118][ T4214] usb 3-1: SerialNumber: syz [ 200.613987][ T5981] loop4: detected capacity change from 0 to 2048 [ 200.661202][ T4214] usb 3-1: config 0 descriptor?? [ 200.721096][ T5981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.733986][ T4214] usb 3-1: can't set config #0, error -71 [ 200.945876][ T4214] usb 3-1: USB disconnect, device number 8 [ 201.318426][ T5997] tipc: Enabling of bearer rejected, already enabled [ 201.607317][ T6004] loop3: detected capacity change from 0 to 2048 [ 201.864971][ T6012] xt_bpf: check failed: parse error [ 202.257845][ T6004] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.608736][ T4214] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 202.767560][ T6010] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 202.775747][ T6010] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 203.715213][ T4224] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 203.763318][ T4214] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.783465][ T4214] usb 2-1: config 0 interface 0 has no altsetting 0 [ 203.791592][ T4224] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 203.803956][ T4224] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.803956][ T4224] [ 203.815060][ T4224] EXT4-fs (loop3): Total free blocks count 0 [ 203.821076][ T4224] EXT4-fs (loop3): Free/Dirty block details [ 203.827204][ T4224] EXT4-fs (loop3): free_blocks=4096 [ 203.832432][ T4224] EXT4-fs (loop3): dirty_blocks=512 [ 203.837696][ T4224] EXT4-fs (loop3): Block reservation details [ 203.843849][ T4224] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 203.853103][ T4456] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.876003][ T4224] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 203.888743][ T4224] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.888743][ T4224] [ 204.073967][ T4214] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.293423][ T4456] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 204.309437][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.668878][ T4456] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.748292][ T4214] usb 2-1: Product: syz [ 204.752517][ T4214] usb 2-1: Manufacturer: syz [ 204.759700][ T4456] usb 3-1: config 0 has no interface number 0 [ 204.766133][ T4214] usb 2-1: SerialNumber: syz [ 204.771611][ T4456] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.786251][ T4214] usb 2-1: config 0 descriptor?? [ 204.791430][ T4456] usb 3-1: config 0 interface 25 has no altsetting 0 [ 204.813239][ T4214] usb 2-1: can't set config #0, error -71 [ 204.831827][ T4214] usb 2-1: USB disconnect, device number 11 [ 204.856036][ T6034] loop4: detected capacity change from 0 to 2048 [ 204.984318][ T4456] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 205.007117][ T6034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.027415][ T4456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.146539][ T4456] usb 3-1: Product: syz [ 205.150845][ T4456] usb 3-1: Manufacturer: syz [ 205.155570][ T4456] usb 3-1: SerialNumber: syz [ 205.295239][ T4456] usb 3-1: config 0 descriptor?? [ 205.345972][ T6042] tipc: Started in network mode [ 205.381284][ T6042] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 205.408948][ T6042] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 205.504374][ T6042] tipc: Enabled bearer , priority 10 [ 205.643266][ T4456] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 205.653143][ T4456] usb 3-1: No valid video chain found. [ 205.681054][ T4456] usb 3-1: USB disconnect, device number 9 [ 206.314039][ T6063] loop2: detected capacity change from 0 to 2048 [ 206.458155][ T6063] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.229781][ T4215] tipc: Node number set to 1 [ 207.674922][ T4264] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 207.707300][ T4264] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 207.722580][ T4264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.722580][ T4264] [ 207.732937][ T4264] EXT4-fs (loop2): Total free blocks count 0 [ 207.853454][ T4264] EXT4-fs (loop2): Free/Dirty block details [ 207.994489][ T4264] EXT4-fs (loop2): free_blocks=4096 [ 208.101051][ T4264] EXT4-fs (loop2): dirty_blocks=512 [ 208.255578][ T4264] EXT4-fs (loop2): Block reservation details [ 208.350743][ T6083] loop4: detected capacity change from 0 to 2048 [ 208.373332][ T4264] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 208.401489][ T4264] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 208.459670][ T6083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.506508][ T5174] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 208.525630][ T4264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 208.525630][ T4264] [ 208.852899][ T6091] loop3: detected capacity change from 0 to 128 [ 208.873416][ T5174] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.902184][ T5174] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.174117][ T5174] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.259750][ T5174] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 210.306748][ T5174] usb 2-1: Product: syz [ 210.331016][ T5174] usb 2-1: Manufacturer: syz [ 210.344248][ T6092] tipc: Enabling of bearer rejected, already enabled [ 210.358333][ T5174] usb 2-1: SerialNumber: syz [ 210.424238][ T5174] usb 2-1: config 0 descriptor?? [ 210.513511][ T5174] usb 2-1: can't set config #0, error -71 [ 210.547436][ T5174] usb 2-1: USB disconnect, device number 12 [ 210.635663][ T6091] zonefs (loop3) ERROR: Not a zoned block device [ 211.781389][ T6100] mmap: syz.1.511 (6100) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 212.594276][ T6110] loop4: detected capacity change from 0 to 2048 [ 212.786458][ T6116] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.895902][ T6118] loop2: detected capacity change from 0 to 2048 [ 213.042026][ T6122] device pim6reg1 entered promiscuous mode [ 213.080570][ T6118] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.115437][ T6125] netlink: 56 bytes leftover after parsing attributes in process `syz.0.520'. [ 215.155253][ T6145] tipc: Enabling of bearer rejected, already enabled [ 217.018063][ T6155] 9pnet: Insufficient options for proto=fd [ 218.019987][ T6155] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 220.981908][ T6181] loop4: detected capacity change from 0 to 2048 [ 221.111191][ T6181] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.474287][ T6200] tipc: Enabling of bearer rejected, already enabled [ 222.499412][ T6178] loop1: detected capacity change from 0 to 40427 [ 222.525438][ T6206] netlink: 'syz.3.542': attribute type 39 has an invalid length. [ 222.585130][ T6178] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 222.642092][ T6178] F2FS-fs (loop1): invalid crc value [ 222.693508][ T6178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 225.727091][ T6221] afs: Unknown parameter 'dy' [ 227.316996][ T6238] loop0: detected capacity change from 0 to 40427 [ 227.557136][ T6238] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 227.565259][ T6238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 227.715862][ T6238] F2FS-fs (loop0): invalid crc value [ 227.842557][ T6238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.911076][ T6238] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 227.918237][ T6238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 228.038159][ T6250] tipc: Enabling of bearer rejected, already enabled [ 229.127629][ T4214] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 229.556739][ T6272] afs: Unknown parameter 'dy' [ 229.643282][ T5172] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 229.743268][ T4219] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 229.783656][ T4214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.814767][ T4214] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 229.824566][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.856863][ T4214] usb 3-1: config 0 descriptor?? [ 230.003220][ T5172] usb 2-1: config 0 has no interfaces? [ 230.143841][ T4219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.304179][ T4219] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.388642][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.483504][ T4214] ath6kl: Failed to read usb control message: -71 [ 230.504025][ T4214] ath6kl: Unable to read the bmi data from the device: -71 [ 230.580208][ T4219] usb 5-1: config 0 descriptor?? [ 230.610906][ T4214] ath6kl: Unable to recv target info: -71 [ 230.661629][ T4214] ath6kl: Failed to init ath6kl core: -71 [ 230.797291][ T4219] pwc: Askey VC010 type 2 USB webcam detected. [ 230.823465][ T5172] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 230.834500][ T4214] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 230.853221][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.861375][ T4214] usb 3-1: USB disconnect, device number 10 [ 231.636362][ T4219] pwc: recv_control_msg error -32 req 02 val 2b00 [ 231.669878][ T6289] binder: BINDER_SET_CONTEXT_MGR already set [ 231.682463][ T5172] usb 2-1: Product: syz [ 231.683270][ T4219] pwc: recv_control_msg error -32 req 02 val 2700 [ 231.693438][ T6289] binder: 6288:6289 ioctl 4018620d 200000000040 returned -16 [ 231.699753][ T6291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.566'. [ 231.700961][ T5172] usb 2-1: Manufacturer: syz [ 231.755897][ T5172] usb 2-1: SerialNumber: syz [ 231.763578][ T4219] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.782541][ T5172] usb 2-1: config 0 descriptor?? [ 231.803220][ T4219] pwc: recv_control_msg error -32 req 04 val 1000 [ 231.823195][ T5172] usb 2-1: can't set config #0, error -71 [ 231.848941][ T5172] usb 2-1: USB disconnect, device number 13 [ 231.873197][ T4219] pwc: recv_control_msg error -32 req 04 val 1300 [ 232.036822][ T4219] pwc: recv_control_msg error -32 req 04 val 1400 [ 232.083193][ T4219] pwc: recv_control_msg error -32 req 02 val 2000 [ 232.871331][ T4219] pwc: recv_control_msg error -32 req 02 val 2100 [ 232.913339][ T4219] pwc: recv_control_msg error -32 req 04 val 1500 [ 232.953300][ T4219] pwc: recv_control_msg error -32 req 02 val 2500 [ 233.003393][ T4219] pwc: recv_control_msg error -32 req 02 val 2400 [ 233.095253][ T4219] pwc: recv_control_msg error -32 req 02 val 2600 [ 233.194071][ T4219] pwc: recv_control_msg error -32 req 02 val 2900 [ 233.324272][ T4219] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.416961][ T4219] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.523368][ T4219] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.393739][ T4219] pwc: Registered as video103. [ 234.445497][ T4219] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 234.502093][ T4219] usb 5-1: USB disconnect, device number 7 [ 234.922297][ T6353] netlink: 52 bytes leftover after parsing attributes in process `syz.1.580'. [ 235.031119][ T5174] libceph: connect (1)[c::]:6789 error -101 [ 235.048087][ T5174] libceph: mon0 (1)[c::]:6789 connect error [ 235.094007][ T6345] ceph: No mds server is up or the cluster is laggy [ 235.121981][ T5174] libceph: connect (1)[c::]:6789 error -101 [ 235.148606][ T5174] libceph: mon0 (1)[c::]:6789 connect error [ 235.553183][ T4219] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 235.713207][ T4214] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.449311][ T6358] ODEBUG: Out of memory. ODEBUG disabled [ 237.047453][ T5172] libceph: connect (1)[c::]:6789 error -101 [ 237.073258][ T5172] libceph: mon0 (1)[c::]:6789 connect error [ 237.383133][ T4456] Bluetooth: hci4: command 0x0406 tx timeout [ 237.453393][ T4219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.453531][ T4214] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 237.471805][ T4214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.091951][ T4214] usb 3-1: config 0 has no interface number 0 [ 238.139204][ T4214] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.155425][ T4219] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 238.243165][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.258527][ T4214] usb 3-1: config 0 interface 25 has no altsetting 0 [ 239.190008][ T4219] usb 5-1: config 0 descriptor?? [ 239.243280][ T4214] usb 3-1: string descriptor 0 read error: -71 [ 239.249732][ T4219] usb 5-1: can't set config #0, error -71 [ 239.263125][ T5172] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 239.267437][ T4214] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 239.314619][ T4219] usb 5-1: USB disconnect, device number 8 [ 239.357933][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.445384][ T4214] usb 3-1: config 0 descriptor?? [ 239.814247][ T5172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.825334][ T5172] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 239.834740][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.888339][ T5172] usb 4-1: config 0 descriptor?? [ 240.026514][ T5172] pwc: Askey VC010 type 2 USB webcam detected. [ 240.058698][ T4214] usb 3-1: can't set config #0, error -71 [ 240.075831][ T6384] binder_alloc: 6381: pid 6381 spamming oneway? 2 buffers allocated for a total size of 5120 [ 240.105534][ T4214] usb 3-1: USB disconnect, device number 11 [ 240.205743][ T6384] binder: 6381:6384 ioctl c0306201 0 returned -14 [ 240.223245][ T6388] netlink: 52 bytes leftover after parsing attributes in process `syz.1.595'. [ 240.463597][ T5172] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.513504][ T5172] pwc: recv_control_msg error -32 req 02 val 2700 [ 240.553641][ T5172] pwc: recv_control_msg error -32 req 02 val 2c00 [ 240.593519][ T5172] pwc: recv_control_msg error -32 req 04 val 1000 [ 240.633635][ T5172] pwc: recv_control_msg error -32 req 04 val 1300 [ 240.693533][ T5172] pwc: recv_control_msg error -32 req 04 val 1400 [ 240.743551][ T5172] pwc: recv_control_msg error -32 req 02 val 2000 [ 240.794033][ T5172] pwc: recv_control_msg error -32 req 02 val 2100 [ 240.843507][ T5172] pwc: recv_control_msg error -32 req 04 val 1500 [ 240.898367][ T5172] pwc: recv_control_msg error -32 req 02 val 2500 [ 240.953224][ T5172] pwc: recv_control_msg error -32 req 02 val 2400 [ 240.973331][ T4214] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 241.003198][ T5172] pwc: recv_control_msg error -32 req 02 val 2600 [ 241.049466][ T5172] pwc: recv_control_msg error -32 req 02 val 2900 [ 241.256265][ T5172] pwc: recv_control_msg error -71 req 02 val 2800 [ 241.363515][ T4214] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 241.387612][ T4214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.474492][ T4214] usb 2-1: config 0 has no interface number 0 [ 241.526718][ T4214] usb 2-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.659635][ T4214] usb 2-1: config 0 interface 25 has no altsetting 0 [ 241.883718][ T4214] usb 2-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 241.933198][ T5172] pwc: recv_control_msg error -71 req 04 val 1100 [ 241.963234][ T5172] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.973454][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.974770][ T5172] pwc: Registered as video103. [ 242.278637][ T5172] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 242.288224][ T6389] usb usb8: usbfs: process 6389 (syz.0.596) did not claim interface 0 before use [ 242.299668][ T6389] capability: warning: `syz.0.596' uses deprecated v2 capabilities in a way that may be insecure [ 242.312188][ T5172] usb 4-1: USB disconnect, device number 10 [ 242.384039][ T4214] usb 2-1: Product: syz [ 242.930123][ T4214] usb 2-1: Manufacturer: syz [ 242.960571][ T4214] usb 2-1: SerialNumber: syz [ 242.993884][ T4214] usb 2-1: config 0 descriptor?? [ 243.144151][ T5172] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 243.363551][ T4214] usb 2-1: Found UVC 0.00 device syz (1b3b:2951) [ 243.375521][ T4214] usb 2-1: No valid video chain found. [ 243.461547][ T4214] usb 2-1: USB disconnect, device number 14 [ 244.149147][ T6415] loop4: detected capacity change from 0 to 4096 [ 244.263733][ T5172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.274411][ T6421] loop1: detected capacity change from 0 to 1024 [ 244.303678][ T5172] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 244.326372][ T6421] EXT4-fs (loop1): filesystem is read-only [ 244.359428][ T6421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 244.370485][ T5172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.382242][ T5172] usb 4-1: config 0 descriptor?? [ 244.392040][ T6421] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #5: comm syz.1.607: unexpected bad inode w/o EXT4_IGET_BAD [ 244.456974][ T6421] EXT4-fs (loop1): no journal found [ 244.462229][ T6421] EXT4-fs (loop1): can't get journal size [ 244.516629][ T6421] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #5: comm syz.1.607: unexpected bad inode w/o EXT4_IGET_BAD [ 244.544759][ T6421] EXT4-fs (loop1): failed to initialize system zone (-117) [ 244.571127][ T6421] EXT4-fs (loop1): mount failed [ 244.872083][ T6431] binder_alloc: 6429: pid 6429 spamming oneway? 2 buffers allocated for a total size of 5120 [ 244.892813][ T6431] binder: 6429:6431 ioctl c0306201 0 returned -14 [ 244.912720][ T5172] ath6kl: Failed to read usb control message: -71 [ 244.922181][ T5172] ath6kl: Unable to read the bmi data from the device: -71 [ 244.958747][ T5172] ath6kl: Unable to recv target info: -71 [ 244.996354][ T5172] ath6kl: Failed to init ath6kl core: -71 [ 245.033685][ T5172] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 245.055548][ T5172] usb 4-1: USB disconnect, device number 11 [ 245.243138][ T4456] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 245.633218][ T4456] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.691112][ T4456] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.837961][ T4456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.971456][ T4456] usb 5-1: config 0 descriptor?? [ 246.048336][ T4456] pwc: Askey VC010 type 2 USB webcam detected. [ 246.264365][ T4215] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.443259][ T4214] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 246.483599][ T4456] pwc: recv_control_msg error -32 req 02 val 2b00 [ 246.534667][ T4456] pwc: recv_control_msg error -32 req 02 val 2700 [ 246.593375][ T4456] pwc: recv_control_msg error -32 req 02 val 2c00 [ 246.643361][ T4456] pwc: recv_control_msg error -32 req 04 val 1000 [ 246.693402][ T4456] pwc: recv_control_msg error -32 req 04 val 1300 [ 246.715954][ T6450] binder: BINDER_SET_CONTEXT_MGR already set [ 246.738921][ T6450] binder: 6449:6450 ioctl 4018620d 200000000040 returned -16 [ 246.748092][ T4456] pwc: recv_control_msg error -32 req 04 val 1400 [ 246.803511][ T4456] pwc: recv_control_msg error -32 req 02 val 2000 [ 246.833739][ T4214] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 246.853394][ T4456] pwc: recv_control_msg error -32 req 02 val 2100 [ 246.862452][ T4214] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.890592][ T4214] usb 1-1: config 0 has no interface number 0 [ 246.915081][ T4214] usb 1-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.928716][ T4456] pwc: recv_control_msg error -32 req 04 val 1500 [ 246.938626][ T4214] usb 1-1: config 0 interface 25 has no altsetting 0 [ 246.983897][ T4456] pwc: recv_control_msg error -32 req 02 val 2500 [ 247.031429][ T4456] pwc: recv_control_msg error -32 req 02 val 2400 [ 247.086976][ T4456] pwc: recv_control_msg error -32 req 02 val 2600 [ 247.111837][ T6462] binder_alloc: 6461: pid 6461 spamming oneway? 2 buffers allocated for a total size of 5120 [ 247.123107][ T4215] usb 4-1: Using ep0 maxpacket: 16 [ 247.123185][ T4214] usb 1-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 247.143954][ T6462] binder: 6461:6462 ioctl c0306201 0 returned -14 [ 247.150611][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.159098][ T4456] pwc: recv_control_msg error -32 req 02 val 2900 [ 247.177676][ T4214] usb 1-1: Product: syz [ 247.194843][ T4214] usb 1-1: Manufacturer: syz [ 247.208904][ T4456] pwc: recv_control_msg error -71 req 02 val 2800 [ 247.229864][ T4214] usb 1-1: SerialNumber: syz [ 247.244327][ T4456] pwc: recv_control_msg error -71 req 04 val 1100 [ 247.264938][ T4214] usb 1-1: config 0 descriptor?? [ 247.273298][ T4215] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.283328][ T4456] pwc: recv_control_msg error -71 req 04 val 1200 [ 247.302500][ T4456] pwc: Registered as video103. [ 247.311740][ T4456] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 247.321553][ T4215] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.332967][ T4215] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 247.391716][ T4456] usb 5-1: USB disconnect, device number 9 [ 247.443205][ T4215] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.487574][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 247.496089][ T4215] usb 4-1: SerialNumber: syz [ 247.564111][ T4215] cdc_acm 4-1:1.0: skipping garbage [ 247.573339][ T4214] usb 1-1: Found UVC 0.00 device syz (1b3b:2951) [ 247.580784][ T4214] usb 1-1: No valid video chain found. [ 247.618224][ T4214] usb 1-1: USB disconnect, device number 9 [ 247.909294][ T4456] usb 4-1: USB disconnect, device number 12 [ 249.342927][ T6482] tipc: Enabling of bearer rejected, already enabled [ 249.445056][ T6481] loop0: detected capacity change from 0 to 16 [ 249.765192][ T6489] binder: BINDER_SET_CONTEXT_MGR already set [ 249.771227][ T6489] binder: 6488:6489 ioctl 4018620d 200000000040 returned -16 [ 249.782922][ T6481] erofs: (device loop0): mounted with root inode @ nid 36. [ 251.405357][ T6501] binder_alloc: 6493: pid 6493 spamming oneway? 2 buffers allocated for a total size of 5120 [ 253.098608][ T6505] netlink: 72 bytes leftover after parsing attributes in process `syz.1.634'. [ 253.118390][ T6505] netlink: 'syz.1.634': attribute type 1 has an invalid length. [ 253.356995][ T6506] ubi31: attaching mtd0 [ 253.363680][ T6506] ubi31: scanning is finished [ 253.368490][ T6506] ubi31: empty MTD device detected [ 253.974859][ T6506] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 254.318897][ T6519] loop0: detected capacity change from 0 to 2048 [ 254.755728][ T6519] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 255.093561][ T6534] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 255.110094][ T6534] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 255.122956][ T6534] EXT4-fs (loop0): This should not happen!! Data will be lost [ 255.122956][ T6534] [ 255.132926][ T6534] EXT4-fs (loop0): Total free blocks count 0 [ 255.139098][ T6534] EXT4-fs (loop0): Free/Dirty block details [ 255.145157][ T6534] EXT4-fs (loop0): free_blocks=2415919504 [ 255.150997][ T6534] EXT4-fs (loop0): dirty_blocks=16 [ 255.156233][ T6534] EXT4-fs (loop0): Block reservation details [ 255.162296][ T6534] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 255.565198][ T1232] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 255.593731][ T1232] EXT4-fs (loop0): This should not happen!! Data will be lost [ 255.593731][ T1232] [ 255.704988][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.731386][ T6541] binder_alloc: 6540: pid 6540 spamming oneway? 2 buffers allocated for a total size of 5120 [ 255.750473][ T6537] tipc: Enabling of bearer rejected, failed to enable media [ 256.143152][ T4215] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 257.866163][ T4215] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.923333][ T4215] usb 1-1: not running at top speed; connect to a high speed hub [ 258.016837][ T4215] usb 1-1: config 6 has an invalid interface number: 208 but max is 0 [ 258.091631][ T4215] usb 1-1: config 6 has no interface number 0 [ 258.112860][ T4215] usb 1-1: config 6 interface 208 has no altsetting 0 [ 258.151227][ T6579] tipc: Enabling of bearer rejected, already enabled [ 258.166549][ T6578] binder_alloc: 6577: pid 6577 spamming oneway? 2 buffers allocated for a total size of 5120 [ 258.393381][ T4215] usb 1-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2 [ 258.415628][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.424267][ T4215] usb 1-1: Product: syz [ 258.428728][ T4215] usb 1-1: Manufacturer: syz [ 258.575842][ T6586] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 258.725835][ T6585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 258.745976][ T4215] usb 1-1: SerialNumber: syz [ 259.240393][ T4215] usb 1-1: can't set config #6, error -71 [ 259.294286][ T4215] usb 1-1: USB disconnect, device number 10 [ 259.380283][ T6590] loop2: detected capacity change from 0 to 164 [ 260.627726][ T6590] rock: directory entry would overflow storage [ 260.635253][ T6590] rock: sig=0x4f50, size=4, remaining=3 [ 260.640932][ T6590] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 260.737837][ T6603] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 260.778305][ T6603] batman_adv: batadv0: Adding interface: wlan0 [ 260.788735][ T6603] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.831293][ T6603] batman_adv: batadv0: Interface activated: wlan0 [ 261.669536][ T6611] binder_alloc: 6610: pid 6610 spamming oneway? 2 buffers allocated for a total size of 5120 [ 261.950580][ T6620] loop1: detected capacity change from 0 to 256 [ 262.032318][ T6620] FAT-fs (loop1): Directory bread(block 64) failed [ 262.044739][ T6620] FAT-fs (loop1): Directory bread(block 65) failed [ 262.058250][ T6620] FAT-fs (loop1): Directory bread(block 66) failed [ 262.074503][ T6620] FAT-fs (loop1): Directory bread(block 67) failed [ 262.087971][ T6620] FAT-fs (loop1): Directory bread(block 68) failed [ 262.118419][ T6620] FAT-fs (loop1): Directory bread(block 69) failed [ 262.139724][ T6620] FAT-fs (loop1): Directory bread(block 70) failed [ 262.158895][ T6620] FAT-fs (loop1): Directory bread(block 71) failed [ 262.179499][ T6620] FAT-fs (loop1): Directory bread(block 72) failed [ 262.224223][ T6620] FAT-fs (loop1): Directory bread(block 73) failed [ 262.409845][ T6627] device batadv1 entered promiscuous mode [ 262.989641][ T6613] loop2: detected capacity change from 0 to 32768 [ 263.334041][ T6613] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 264.404517][ T6642] fuse: Bad value for 'fd' [ 264.465354][ T6647] binder_alloc: 6646: pid 6646 spamming oneway? 2 buffers allocated for a total size of 5120 [ 264.721076][ T4173] ocfs2: Unmounting device (7,2) on (node local) [ 265.576882][ T6658] loop3: detected capacity change from 0 to 256 [ 265.878960][ T4456] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 267.125430][ T6673] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 267.188231][ T4456] usb 5-1: device descriptor read/64, error -71 [ 267.463314][ T4456] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 268.184364][ T6679] [U]  [ 270.321309][ T26] audit: type=1326 audit(1750892152.142:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.4.694" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f422f717929 code=0x0 [ 270.520474][ T6684] loop4: detected capacity change from 0 to 4096 [ 270.670063][ T6685] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.984090][ T6687] fuse: Bad value for 'fd' [ 271.027863][ T6691] binder_alloc: 6688: pid 6688 spamming oneway? 2 buffers allocated for a total size of 5120 [ 271.098584][ T26] audit: type=1326 audit(1750892152.922:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 271.098724][ T26] audit: type=1326 audit(1750892152.922:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 271.120538][ T26] audit: type=1326 audit(1750892152.942:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 271.120750][ T26] audit: type=1326 audit(1750892152.942:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 271.120996][ T26] audit: type=1326 audit(1750892152.942:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 271.121188][ T26] audit: type=1326 audit(1750892152.942:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 271.121432][ T26] audit: type=1326 audit(1750892152.942:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6689 comm="syz.1.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d9eca0929 code=0x7ffc0000 [ 272.353361][ T6706] usb usb8: usbfs: process 6706 (syz.2.702) did not claim interface 0 before use [ 272.408741][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 272.408803][ T6715] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 273.194691][ T6720] loop3: detected capacity change from 0 to 1024 [ 273.431549][ T6720] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.497026][ T6720] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 16: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 273.563671][ T6730] tipc: Enabling of bearer rejected, already enabled [ 273.622412][ T6733] fuse: Bad value for 'fd' [ 274.945448][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 275.003885][ T6751] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 278.353972][ T6781] tipc: Enabling of bearer rejected, already enabled [ 278.617198][ T6767] syz.2.722 (6767): drop_caches: 2 [ 279.829520][ T6791] loop2: detected capacity change from 0 to 2048 [ 281.118673][ T6791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.553149][ T4214] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 284.078151][ T6836] netlink: 'syz.4.744': attribute type 10 has an invalid length. [ 284.106485][ T6836] batman_adv: batadv0: Adding interface: wlan0 [ 284.115321][ T6836] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.338252][ T6836] batman_adv: batadv0: Interface activated: wlan0 [ 285.143193][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.396006][ T4214] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 285.517069][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.042580][ T6851] loop1: detected capacity change from 0 to 2048 [ 286.353793][ T4214] usb 4-1: config 0 descriptor?? [ 286.373387][ T4214] usb 4-1: can't set config #0, error -71 [ 286.382637][ T6851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.393221][ T4214] usb 4-1: USB disconnect, device number 13 [ 287.892116][ T6869] netlink: 256 bytes leftover after parsing attributes in process `syz.4.753'. [ 287.916758][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 288.748395][ T6880] netlink: 'syz.3.757': attribute type 39 has an invalid length. [ 289.547088][ T6892] syz.2.759 uses obsolete (PF_INET,SOCK_PACKET) [ 289.752544][ T6901] loop1: detected capacity change from 0 to 512 [ 290.617814][ T6908] loop3: detected capacity change from 0 to 2048 [ 290.829909][ T6915] loop6: detected capacity change from 0 to 524287999 [ 290.857048][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 290.868737][ C0] blk_update_request: I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 0 [ 290.880801][ C0] blk_update_request: I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 0 [ 290.945302][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 292.124678][ T6901] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.763: casefold flag without casefold feature [ 292.441028][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 292.452152][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 292.466813][ T6901] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.763: couldn't read orphan inode 15 (err -117) [ 292.486778][ T6908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.576596][ T6901] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.457666][ T6923] loop0: detected capacity change from 0 to 1024 [ 293.638405][ T6928] tipc: Enabling of bearer rejected, already enabled [ 293.686107][ T1232] hfsplus: b-tree write err: -5, ino 4 [ 293.743202][ T6932] netlink: 'syz.1.771': attribute type 39 has an invalid length. [ 294.073380][ T5173] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 295.793258][ T5173] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.863356][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 295.905411][ T5173] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.146116][ T5173] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.311317][ T5173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.473613][ T6934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 296.616303][ T6970] netlink: 'syz.1.784': attribute type 13 has an invalid length. [ 296.647920][ T6967] loop0: detected capacity change from 0 to 2048 [ 296.744544][ T2304] usb 4-1: USB disconnect, device number 14 [ 296.877640][ T6967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.776374][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.810019][ T6970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.937229][ T6970] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.950135][ T6970] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.962729][ T6970] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.978488][ T6970] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.768435][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.793'. [ 300.451930][ T7018] [ 300.454321][ T7018] ====================================================== [ 300.461349][ T7018] WARNING: possible circular locking dependency detected [ 300.468377][ T7018] 5.15.185-syzkaller #0 Not tainted [ 300.473573][ T7018] ------------------------------------------------------ [ 300.480586][ T7018] syz.3.794/7018 is trying to acquire lock: [ 300.486488][ T7018] ffff88805b3b0d20 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 300.496067][ T7018] [ 300.496067][ T7018] but task is already holding lock: [ 300.503429][ T7018] ffffc90001829c50 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 300.513012][ T7018] [ 300.513012][ T7018] which lock already depends on the new lock. [ 300.513012][ T7018] [ 300.523414][ T7018] [ 300.523414][ T7018] the existing dependency chain (in reverse order) is: [ 300.532437][ T7018] [ 300.532437][ T7018] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 300.540365][ T7018] _raw_spin_lock+0x2a/0x40 [ 300.545408][ T7018] __inet_hash+0xe3/0x960 [ 300.550265][ T7018] inet_csk_listen_start+0x22f/0x320 [ 300.556073][ T7018] inet_listen+0x350/0x7e0 [ 300.561019][ T7018] __sys_listen+0x19d/0x220 [ 300.566053][ T7018] __x64_sys_listen+0x56/0x60 [ 300.571277][ T7018] do_syscall_64+0x4c/0xa0 [ 300.576230][ T7018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.582669][ T7018] [ 300.582669][ T7018] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 300.590422][ T7018] __lock_acquire+0x2c33/0x7c60 [ 300.595837][ T7018] lock_acquire+0x197/0x3f0 [ 300.600896][ T7018] mptcp_diag_get_info+0x1db/0x990 [ 300.606545][ T7018] inet_sk_diag_fill+0xef6/0x1b50 [ 300.612102][ T7018] mptcp_diag_dump+0xcca/0x1290 [ 300.617475][ T7018] __inet_diag_dump+0x1f6/0x380 [ 300.622867][ T7018] netlink_dump+0x5ab/0xcb0 [ 300.627901][ T7018] __netlink_dump_start+0x523/0x700 [ 300.633643][ T7018] inet_diag_handler_cmd+0x1be/0x290 [ 300.639455][ T7018] sock_diag_rcv_msg+0x164/0x3e0 [ 300.644922][ T7018] netlink_rcv_skb+0x1e0/0x430 [ 300.650242][ T7018] sock_diag_rcv+0x26/0x40 [ 300.655183][ T7018] netlink_unicast+0x77c/0x920 [ 300.660466][ T7018] netlink_sendmsg+0x8ab/0xbc0 [ 300.665771][ T7018] sock_write_iter+0x29c/0x380 [ 300.671056][ T7018] do_iter_readv_writev+0x497/0x600 [ 300.676777][ T7018] do_iter_write+0x205/0x7b0 [ 300.681889][ T7018] do_writev+0x254/0x410 [ 300.686660][ T7018] do_syscall_64+0x4c/0xa0 [ 300.691610][ T7018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.698029][ T7018] [ 300.698029][ T7018] other info that might help us debug this: [ 300.698029][ T7018] [ 300.708255][ T7018] Possible unsafe locking scenario: [ 300.708255][ T7018] [ 300.715700][ T7018] CPU0 CPU1 [ 300.721292][ T7018] ---- ---- [ 300.726662][ T7018] lock(&h->lhash2[i].lock); [ 300.731345][ T7018] lock(sk_lock-AF_INET6); [ 300.738370][ T7018] lock(&h->lhash2[i].lock); [ 300.745574][ T7018] lock(sk_lock-AF_INET6); [ 300.750087][ T7018] [ 300.750087][ T7018] *** DEADLOCK *** [ 300.750087][ T7018] [ 300.758227][ T7018] 6 locks held by syz.3.794/7018: [ 300.763258][ T7018] #0: ffffffff8d234428 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 300.772585][ T7018] #1: ffffffff8d2342e8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0 [ 300.783372][ T7018] #2: ffff88801f2f8690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 300.794073][ T7018] #3: ffffffff8d30e648 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 300.804339][ T7018] #4: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 300.813649][ T7018] #5: ffffc90001829c50 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 300.823667][ T7018] [ 300.823667][ T7018] stack backtrace: [ 300.829557][ T7018] CPU: 1 PID: 7018 Comm: syz.3.794 Not tainted 5.15.185-syzkaller #0 [ 300.837623][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.847687][ T7018] Call Trace: [ 300.850987][ T7018] [ 300.853924][ T7018] dump_stack_lvl+0x168/0x230 [ 300.858611][ T7018] ? load_image+0x3b0/0x3b0 [ 300.863117][ T7018] ? show_regs_print_info+0x20/0x20 [ 300.868321][ T7018] ? print_circular_bug+0x12b/0x1a0 [ 300.873522][ T7018] check_noncircular+0x274/0x310 [ 300.878549][ T7018] ? add_chain_block+0x940/0x940 [ 300.883482][ T7018] ? lockdep_lock+0xdc/0x1e0 [ 300.888078][ T7018] ? mark_lock+0x94/0x320 [ 300.892411][ T7018] __lock_acquire+0x2c33/0x7c60 [ 300.897285][ T7018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 300.903276][ T7018] ? verify_lock_unused+0x140/0x140 [ 300.908505][ T7018] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 300.914494][ T7018] ? verify_lock_unused+0x140/0x140 [ 300.919713][ T7018] ? __local_bh_enable_ip+0xcb/0x1b0 [ 300.925038][ T7018] ? __local_bh_enable_ip+0x12a/0x1b0 [ 300.930410][ T7018] ? lockdep_hardirqs_on+0x94/0x140 [ 300.935614][ T7018] ? __local_bh_enable_ip+0x12a/0x1b0 [ 300.941007][ T7018] ? _local_bh_enable+0xa0/0xa0 [ 300.945866][ T7018] ? skb_put+0x117/0x210 [ 300.950113][ T7018] lock_acquire+0x197/0x3f0 [ 300.954621][ T7018] ? inet_sk_diag_fill+0xef6/0x1b50 [ 300.959827][ T7018] ? read_lock_is_recursive+0x10/0x10 [ 300.965204][ T7018] ? rcu_lock_release+0x5/0x20 [ 300.969974][ T7018] ? __lock_acquire+0x7c60/0x7c60 [ 300.975001][ T7018] ? inet_sk_diag_fill+0xef6/0x1b50 [ 300.980222][ T7018] mptcp_diag_get_info+0x1db/0x990 [ 300.985341][ T7018] ? inet_sk_diag_fill+0xef6/0x1b50 [ 300.990553][ T7018] inet_sk_diag_fill+0xef6/0x1b50 [ 300.995589][ T7018] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 301.001310][ T7018] ? do_raw_spin_lock+0x11d/0x280 [ 301.006338][ T7018] ? inet_diag_bc_sk+0x187/0x10c0 [ 301.011370][ T7018] mptcp_diag_dump+0xcca/0x1290 [ 301.016237][ T7018] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 301.022830][ T7018] __inet_diag_dump+0x1f6/0x380 [ 301.027685][ T7018] netlink_dump+0x5ab/0xcb0 [ 301.032191][ T7018] ? netlink_lookup+0x1d0/0x1d0 [ 301.037051][ T7018] ? __inet_diag_dump_start+0x805/0x970 [ 301.042752][ T7018] __netlink_dump_start+0x523/0x700 [ 301.047987][ T7018] inet_diag_handler_cmd+0x1be/0x290 [ 301.053282][ T7018] ? rcu_lock_release+0x20/0x20 [ 301.058143][ T7018] ? inet_diag_handler_get_info+0xb80/0xb80 [ 301.064046][ T7018] ? inet_diag_dump_start+0x20/0x20 [ 301.069246][ T7018] ? inet_diag_dump+0x50/0x50 [ 301.073961][ T7018] ? sock_diag_rcv+0x17/0x40 [ 301.078556][ T7018] ? sock_diag_rcv+0x17/0x40 [ 301.083144][ T7018] ? rcu_lock_release+0x20/0x20 [ 301.087998][ T7018] sock_diag_rcv_msg+0x164/0x3e0 [ 301.092937][ T7018] netlink_rcv_skb+0x1e0/0x430 [ 301.097704][ T7018] ? sock_diag_bind+0xa0/0xa0 [ 301.102402][ T7018] ? netlink_ack+0xb60/0xb60 [ 301.107013][ T7018] ? __lock_acquire+0x7c60/0x7c60 [ 301.112089][ T7018] sock_diag_rcv+0x26/0x40 [ 301.116515][ T7018] netlink_unicast+0x77c/0x920 [ 301.121288][ T7018] netlink_sendmsg+0x8ab/0xbc0 [ 301.126062][ T7018] ? netlink_getsockopt+0x560/0x560 [ 301.131264][ T7018] ? aa_sock_msg_perm+0x94/0x150 [ 301.136204][ T7018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 301.141495][ T7018] ? security_socket_sendmsg+0x7c/0xa0 [ 301.146958][ T7018] sock_write_iter+0x29c/0x380 [ 301.151726][ T7018] ? sock_read_iter+0x340/0x340 [ 301.156580][ T7018] do_iter_readv_writev+0x497/0x600 [ 301.161784][ T7018] ? generic_file_rw_checks+0x280/0x280 [ 301.167339][ T7018] ? common_file_perm+0x171/0x1c0 [ 301.172371][ T7018] ? fsnotify_perm+0x5d/0x560 [ 301.177053][ T7018] ? security_file_permission+0x75/0xa0 [ 301.182602][ T7018] do_iter_write+0x205/0x7b0 [ 301.187195][ T7018] ? import_iovec+0x6f/0xa0 [ 301.191700][ T7018] do_writev+0x254/0x410 [ 301.196060][ T7018] ? do_readv+0x3e0/0x3e0 [ 301.200399][ T7018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.206387][ T7018] ? lock_chain_count+0x20/0x20 [ 301.211242][ T7018] ? vtime_user_exit+0x2dc/0x400 [ 301.216184][ T7018] ? lockdep_hardirqs_on+0x94/0x140 [ 301.221387][ T7018] do_syscall_64+0x4c/0xa0 [ 301.225808][ T7018] ? clear_bhb_loop+0x30/0x80 [ 301.230493][ T7018] ? clear_bhb_loop+0x30/0x80 [ 301.235192][ T7018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.241108][ T7018] RIP: 0033:0x7fe6bb23d929 [ 301.245530][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.265150][ T7018] RSP: 002b:00007fe6b90a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 301.273574][ T7018] RAX: ffffffffffffffda RBX: 00007fe6bb464fa0 RCX: 00007fe6bb23d929 [ 301.281548][ T7018] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006 [ 301.289542][ T7018] RBP: 00007fe6bb2bfb39 R08: 0000000000000000 R09: 0000000000000000 [ 301.297514][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.305484][ T7018] R13: 0000000000000000 R14: 00007fe6bb464fa0 R15: 00007ffd6b2dd568 [ 301.313461][ T7018] [ 301.318063][ T7018] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 301.327143][ T7018] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7018, name: syz.3.794 [ 301.336132][ T7018] INFO: lockdep is turned off. [ 301.340909][ T7018] Preemption disabled at: [ 301.340921][ T7018] [<0000000000000000>] 0x0 [ 301.349816][ T7018] CPU: 1 PID: 7018 Comm: syz.3.794 Not tainted 5.15.185-syzkaller #0 [ 301.357901][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.368151][ T7018] Call Trace: [ 301.371459][ T7018] [ 301.374411][ T7018] dump_stack_lvl+0x168/0x230 [ 301.379128][ T7018] ? show_regs_print_info+0x20/0x20 [ 301.384368][ T7018] ? load_image+0x3b0/0x3b0 [ 301.388894][ T7018] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 301.395535][ T7018] ___might_sleep+0x47c/0x600 [ 301.400261][ T7018] ? __might_sleep+0xf0/0xf0 [ 301.404888][ T7018] ? read_lock_is_recursive+0x10/0x10 [ 301.410304][ T7018] ? rcu_lock_release+0x5/0x20 [ 301.415116][ T7018] __lock_sock_fast+0x2f/0xe0 [ 301.419842][ T7018] ? inet_sk_diag_fill+0xef6/0x1b50 [ 301.425089][ T7018] mptcp_diag_get_info+0x1e7/0x990 [ 301.430254][ T7018] inet_sk_diag_fill+0xef6/0x1b50 [ 301.435327][ T7018] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 301.441090][ T7018] ? do_raw_spin_lock+0x11d/0x280 [ 301.446164][ T7018] ? inet_diag_bc_sk+0x187/0x10c0 [ 301.451369][ T7018] mptcp_diag_dump+0xcca/0x1290 [ 301.456252][ T7018] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 301.462877][ T7018] __inet_diag_dump+0x1f6/0x380 [ 301.467765][ T7018] netlink_dump+0x5ab/0xcb0 [ 301.472296][ T7018] ? netlink_lookup+0x1d0/0x1d0 [ 301.477174][ T7018] ? __inet_diag_dump_start+0x805/0x970 [ 301.482750][ T7018] __netlink_dump_start+0x523/0x700 [ 301.487988][ T7018] inet_diag_handler_cmd+0x1be/0x290 [ 301.493285][ T7018] ? rcu_lock_release+0x20/0x20 [ 301.498144][ T7018] ? inet_diag_handler_get_info+0xb80/0xb80 [ 301.504043][ T7018] ? inet_diag_dump_start+0x20/0x20 [ 301.509249][ T7018] ? inet_diag_dump+0x50/0x50 [ 301.513924][ T7018] ? sock_diag_rcv+0x17/0x40 [ 301.518513][ T7018] ? sock_diag_rcv+0x17/0x40 [ 301.523133][ T7018] ? rcu_lock_release+0x20/0x20 [ 301.527988][ T7018] sock_diag_rcv_msg+0x164/0x3e0 [ 301.532944][ T7018] netlink_rcv_skb+0x1e0/0x430 [ 301.537708][ T7018] ? sock_diag_bind+0xa0/0xa0 [ 301.542382][ T7018] ? netlink_ack+0xb60/0xb60 [ 301.546969][ T7018] ? __lock_acquire+0x7c60/0x7c60 [ 301.551995][ T7018] sock_diag_rcv+0x26/0x40 [ 301.556403][ T7018] netlink_unicast+0x77c/0x920 [ 301.561165][ T7018] netlink_sendmsg+0x8ab/0xbc0 [ 301.565923][ T7018] ? netlink_getsockopt+0x560/0x560 [ 301.571140][ T7018] ? aa_sock_msg_perm+0x94/0x150 [ 301.576075][ T7018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 301.581358][ T7018] ? security_socket_sendmsg+0x7c/0xa0 [ 301.586827][ T7018] sock_write_iter+0x29c/0x380 [ 301.591611][ T7018] ? sock_read_iter+0x340/0x340 [ 301.596459][ T7018] do_iter_readv_writev+0x497/0x600 [ 301.601653][ T7018] ? generic_file_rw_checks+0x280/0x280 [ 301.607435][ T7018] ? common_file_perm+0x171/0x1c0 [ 301.612741][ T7018] ? fsnotify_perm+0x5d/0x560 [ 301.617644][ T7018] ? security_file_permission+0x75/0xa0 [ 301.623223][ T7018] do_iter_write+0x205/0x7b0 [ 301.627822][ T7018] ? import_iovec+0x6f/0xa0 [ 301.632320][ T7018] do_writev+0x254/0x410 [ 301.636560][ T7018] ? do_readv+0x3e0/0x3e0 [ 301.640921][ T7018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.646904][ T7018] ? lock_chain_count+0x20/0x20 [ 301.651871][ T7018] ? vtime_user_exit+0x2dc/0x400 [ 301.656921][ T7018] ? lockdep_hardirqs_on+0x94/0x140 [ 301.662204][ T7018] do_syscall_64+0x4c/0xa0 [ 301.666616][ T7018] ? clear_bhb_loop+0x30/0x80 [ 301.671287][ T7018] ? clear_bhb_loop+0x30/0x80 [ 301.675955][ T7018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.681848][ T7018] RIP: 0033:0x7fe6bb23d929 [ 301.686263][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.705866][ T7018] RSP: 002b:00007fe6b90a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 301.714365][ T7018] RAX: ffffffffffffffda RBX: 00007fe6bb464fa0 RCX: 00007fe6bb23d929 [ 301.722336][ T7018] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006 [ 301.730301][ T7018] RBP: 00007fe6bb2bfb39 R08: 0000000000000000 R09: 0000000000000000 [ 301.738269][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.746266][ T7018] R13: 0000000000000000 R14: 00007fe6bb464fa0 R15: 00007ffd6b2dd568 [ 301.754242][ T7018] [ 301.757345][ T7018] BUG: scheduling while atomic: syz.3.794/7018/0x00000002 [ 301.764463][ T7018] INFO: lockdep is turned off. [ 301.769220][ T7018] Modules linked in: [ 301.773117][ T7018] Preemption disabled at: [ 301.773123][ T7018] [<0000000000000000>] 0x0 [ 301.781845][ T7018] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 301.790606][ T7018] CPU: 1 PID: 7018 Comm: syz.3.794 Tainted: G W 5.15.185-syzkaller #0 [ 301.800071][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.810127][ T7018] Call Trace: [ 301.813415][ T7018] [ 301.816371][ T7018] dump_stack_lvl+0x168/0x230 [ 301.821062][ T7018] ? show_regs_print_info+0x20/0x20 [ 301.826256][ T7018] ? load_image+0x3b0/0x3b0 [ 301.830780][ T7018] panic+0x2c9/0x7f0 [ 301.834681][ T7018] ? bpf_jit_dump+0xd0/0xd0 [ 301.839186][ T7018] ? vprintk_emit+0xf9/0x150 [ 301.843799][ T7018] ? _printk+0xcc/0x110 [ 301.848134][ T7018] check_panic_on_warn+0x80/0xa0 [ 301.853069][ T7018] __schedule_bug+0x184/0x1e0 [ 301.857745][ T7018] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 301.863114][ T7018] ? 0xffffffffa0018210 [ 301.867273][ T7018] __schedule+0x12e4/0x43b0 [ 301.871771][ T7018] ? prepare_to_wait_exclusive+0xc5/0x220 [ 301.877486][ T7018] ? do_raw_spin_lock+0x11d/0x280 [ 301.882508][ T7018] ? lock_chain_count+0x20/0x20 [ 301.887356][ T7018] ? __kthread_should_park+0xa2/0xe0 [ 301.892641][ T7018] ? lock_release+0xba/0x870 [ 301.897227][ T7018] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 301.903207][ T7018] ? __lock_sock+0x145/0x2a0 [ 301.907795][ T7018] ? release_firmware_map_entry+0x190/0x190 [ 301.913688][ T7018] ? __lock_sock+0x145/0x2a0 [ 301.918277][ T7018] ? __local_bh_enable_ip+0x12a/0x1b0 [ 301.923648][ T7018] ? _local_bh_enable+0xa0/0xa0 [ 301.928517][ T7018] schedule+0x11b/0x1e0 [ 301.932690][ T7018] __lock_sock+0x14a/0x2a0 [ 301.937104][ T7018] ? sk_page_frag_refill+0x200/0x200 [ 301.942415][ T7018] ? do_raw_spin_lock+0x11d/0x280 [ 301.947443][ T7018] ? init_wait_entry+0xd0/0xd0 [ 301.952219][ T7018] ? __rwlock_init+0x140/0x140 [ 301.957179][ T7018] ? read_lock_is_recursive+0x10/0x10 [ 301.962550][ T7018] ? rcu_lock_release+0x5/0x20 [ 301.967322][ T7018] ? __lock_sock_fast+0x43/0xe0 [ 301.972171][ T7018] __lock_sock_fast+0x78/0xe0 [ 301.976865][ T7018] ? inet_sk_diag_fill+0xef6/0x1b50 [ 301.982064][ T7018] mptcp_diag_get_info+0x1e7/0x990 [ 301.987173][ T7018] inet_sk_diag_fill+0xef6/0x1b50 [ 301.992197][ T7018] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 301.997924][ T7018] ? do_raw_spin_lock+0x11d/0x280 [ 302.003010][ T7018] ? inet_diag_bc_sk+0x187/0x10c0 [ 302.008078][ T7018] mptcp_diag_dump+0xcca/0x1290 [ 302.013057][ T7018] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 302.019674][ T7018] __inet_diag_dump+0x1f6/0x380 [ 302.024542][ T7018] netlink_dump+0x5ab/0xcb0 [ 302.029083][ T7018] ? netlink_lookup+0x1d0/0x1d0 [ 302.033941][ T7018] ? __inet_diag_dump_start+0x805/0x970 [ 302.039500][ T7018] __netlink_dump_start+0x523/0x700 [ 302.044709][ T7018] inet_diag_handler_cmd+0x1be/0x290 [ 302.050012][ T7018] ? rcu_lock_release+0x20/0x20 [ 302.054871][ T7018] ? inet_diag_handler_get_info+0xb80/0xb80 [ 302.060785][ T7018] ? inet_diag_dump_start+0x20/0x20 [ 302.066012][ T7018] ? inet_diag_dump+0x50/0x50 [ 302.070706][ T7018] ? sock_diag_rcv+0x17/0x40 [ 302.075306][ T7018] ? sock_diag_rcv+0x17/0x40 [ 302.079905][ T7018] ? rcu_lock_release+0x20/0x20 [ 302.084766][ T7018] sock_diag_rcv_msg+0x164/0x3e0 [ 302.089725][ T7018] netlink_rcv_skb+0x1e0/0x430 [ 302.094500][ T7018] ? sock_diag_bind+0xa0/0xa0 [ 302.099185][ T7018] ? netlink_ack+0xb60/0xb60 [ 302.103786][ T7018] ? __lock_acquire+0x7c60/0x7c60 [ 302.108840][ T7018] sock_diag_rcv+0x26/0x40 [ 302.113263][ T7018] netlink_unicast+0x77c/0x920 [ 302.118041][ T7018] netlink_sendmsg+0x8ab/0xbc0 [ 302.122816][ T7018] ? netlink_getsockopt+0x560/0x560 [ 302.128126][ T7018] ? aa_sock_msg_perm+0x94/0x150 [ 302.133157][ T7018] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 302.138446][ T7018] ? security_socket_sendmsg+0x7c/0xa0 [ 302.143912][ T7018] sock_write_iter+0x29c/0x380 [ 302.148682][ T7018] ? sock_read_iter+0x340/0x340 [ 302.153534][ T7018] do_iter_readv_writev+0x497/0x600 [ 302.158734][ T7018] ? generic_file_rw_checks+0x280/0x280 [ 302.164282][ T7018] ? common_file_perm+0x171/0x1c0 [ 302.169311][ T7018] ? fsnotify_perm+0x5d/0x560 [ 302.173985][ T7018] ? security_file_permission+0x75/0xa0 [ 302.179530][ T7018] do_iter_write+0x205/0x7b0 [ 302.184289][ T7018] ? import_iovec+0x6f/0xa0 [ 302.188832][ T7018] do_writev+0x254/0x410 [ 302.193077][ T7018] ? do_readv+0x3e0/0x3e0 [ 302.197407][ T7018] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 302.203385][ T7018] ? lock_chain_count+0x20/0x20 [ 302.208237][ T7018] ? vtime_user_exit+0x2dc/0x400 [ 302.213173][ T7018] ? lockdep_hardirqs_on+0x94/0x140 [ 302.218374][ T7018] do_syscall_64+0x4c/0xa0 [ 302.222784][ T7018] ? clear_bhb_loop+0x30/0x80 [ 302.227456][ T7018] ? clear_bhb_loop+0x30/0x80 [ 302.232129][ T7018] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.238020][ T7018] RIP: 0033:0x7fe6bb23d929 [ 302.242429][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.262037][ T7018] RSP: 002b:00007fe6b90a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 302.270570][ T7018] RAX: ffffffffffffffda RBX: 00007fe6bb464fa0 RCX: 00007fe6bb23d929 [ 302.278546][ T7018] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006 [ 302.286525][ T7018] RBP: 00007fe6bb2bfb39 R08: 0000000000000000 R09: 0000000000000000 [ 302.294520][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.302499][ T7018] R13: 0000000000000000 R14: 00007fe6bb464fa0 R15: 00007ffd6b2dd568 [ 302.310480][ T7018] [ 302.313779][ T7018] Kernel Offset: disabled [ 302.318113][ T7018] Rebooting in 86400 seconds..