last executing test programs: 34m16.196296483s ago: executing program 4 (id=333): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae50400090507"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) 34m10.951449619s ago: executing program 4 (id=344): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x20000000000, 0x3}) 34m9.514528575s ago: executing program 4 (id=347): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 34m8.434284848s ago: executing program 4 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x14b000, 0x15) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 34m8.197885333s ago: executing program 4 (id=352): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 34m7.713862453s ago: executing program 4 (id=354): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae50400090507"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) 34m7.345675913s ago: executing program 32 (id=354): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae50400090507"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) 33m39.323501048s ago: executing program 5 (id=355): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 33m37.974171711s ago: executing program 5 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x20040050) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r5 = socket(0xa, 0x3, 0x87) sendto(r5, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000280)=0x14) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r7, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) socket$netlink(0x10, 0x3, 0x14) 33m36.235188468s ago: executing program 5 (id=422): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_pidfd_open(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705a, 0x3}, {0x200, 0x7}]}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000380)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xbb0c, 0x2, 0x0, 0xf0}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, 0x0) 33m32.878199118s ago: executing program 5 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 33m17.463173601s ago: executing program 33 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 33m7.453275465s ago: executing program 0 (id=472): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400181, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$l2tp(0x2, 0x2, 0x73) unshare(0x20000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) 33m6.017800957s ago: executing program 0 (id=474): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000000)=""/61, 0x3d}], 0x2, 0x1, 0xffffff7c) 33m5.65009079s ago: executing program 0 (id=476): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06023ae50400090507"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 32m59.083993522s ago: executing program 0 (id=483): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 32m58.05687561s ago: executing program 0 (id=486): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f00000001c0), &(0x7f0000000000)) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000001f40)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1391a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0xfffffffffffffffd, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) lseek(r1, 0x7, 0x4) 32m55.373139165s ago: executing program 0 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r4, 0x0, 0x4010) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) 32m39.968296517s ago: executing program 34 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r4, 0x0, 0x4010) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r8, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) 20m38.277965915s ago: executing program 2 (id=2147): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {0xfff2, 0xfff1}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 20m37.537060317s ago: executing program 2 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 20m37.362790279s ago: executing program 2 (id=2151): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m36.373874216s ago: executing program 2 (id=2152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x24000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20m32.086621853s ago: executing program 2 (id=2163): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r0, 0x1) 20m31.677521996s ago: executing program 2 (id=2167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r4, 0x0, r4) socket$inet6_udplite(0xa, 0x2, 0x88) listen(0xffffffffffffffff, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 20m16.477499629s ago: executing program 35 (id=2167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="5e022a1173f7dedc04b574482a4d3934eb364ce70fc2f9ba995b7f79fad2552552810ae0c8acb77597804408c01b64c563208d5fdb7aa290732e0c806eb7cb660c2fca84367a604af6e4f04ef21f6c8f8a905f3fb5a9ff788d4f6f65d302bb22902e3db48b0a51306442da614341c3a53583f31f7952239eefe7e282d268f8f71838b9c76b26f81d15d4425dcc8b0954a5b39871e3ac6a0c1bf5effa564533658ceb589ed04058b994415339d6ffcfa1c3fa4e784e437bfa998f09ac808ab72f7916483fadc569d13675ae8ab4f0dc7f14de6c7500925d4ab8d6ea34de61cca9625998b4b04130a35c9fb048c569af51e163b2c7b4acfbd42303a042762d52b0bd45d3112fbdba6680769b766d3e3f946707f515ef74f5e3db55bba47ae0f030957f1354fbf79a1d2877e861d80ead9ae8ddab9a857fb39cc777000e34cb890d2e66803bc2f9850f40ad903488031f3fceac81a073713bf51baa6b18d6744262ec2d70a908b21a713708ce5267df4174990ccdd932a85e7b58930c94e2a6f33417faa628706212cf006744a09e77d07ab99b128be2848c17abd7c6f6a00d0ac24557744c654b272d8e6667fd511550819c8f2a52a7ecaba1142a6e6628a699db89bf7ecebf5db5f682d812f7ed1c3a642ce6ca0da18bf43490d6675e3a48ae9187e063e0c93462c052253b14f0510875f3b15b194285e8ced04f352fd47491a57abb38f30f62b2d9d03dda6424579432f7ac717d761124f68922ebd68486c07cb5d983205a44c30447235d0097c217c91b2c272daa1711a3ead04e6dc61f4d4d5ddf29dd1c1208ad6ebc10e11ee1af3c05ae225e66b4f673b806d6cc12f3dd7d41f9bef597524e3fab90f296650fa92d9939157f6b016cb3ccb681c824bc0593f5a3ec9685ea1ef5fb9d9ccdb0476b5655a45a82a212f386fd0de8b35869dddcaa8320490643ce82fb9c25b9150d9d9552a4962af665c4b47cfecc3b000c38e0afd943b65cf81c0fe3ee8cb1a7eb4bce5f7ddff821e2fca5dd655be560e514539de5ae363399a80a08d23433ea439c53452052468d34417db64220915a23b695614b502c599a3f7d0f23890b2fa41554a0c93387368b5c4b69d9ea5beedb870d4940eb1f42e0e35a6c37aca0c76106d45a224e84b2b88f7bda32583b61646b7923b3e1d86edabb6e429a1914d676702eb010a7dd8a18e62cb00eff870f71926d81d8bf521c211b76ea547c440a51884584370eae698c36299566356c7656403eadac8d1077061f942bb51859d6d157ed71a13d72163986e66dfcabd19839559abcd5df1d7b282234338e4170b777a9ac892c2394ba4138ea2c67b4fb2d576f8ac3c34e9edc10d6fbbc4a50331a4180d1ed7cb3765ebb7475a3f0826f589a1f63c906a64f5a33b2fc0c2205fa5c3060cdefaf7191bac0b054e1cec8d541f506e2aaba6db891b461cfe41d4072a6aaa452248b9df718043b53a77e8ab1b2c8809f141e97f2e5ec81de247bd1d7782940b3f4144d8caa37147331d396e6e975f28eb5be0218b91578e2a11547488d6ada5e2a7fcc235e56a98bbd78caee88681cebeae903b7403cf1b76a8b7223dfa3a48919f35536634017a499d62b01cbcbce3d1e085768f32c907e4df266cc2e8d1f5b6bd5d9382888aa09657922de79241eb4cd9a7f5a841ee6f4a27eddcab348765a48df3446d2729cdb3a0a5a536494f5eba54821bae60881e37a1ffd1a0bd68508c3d843b9a048c4a3b23e1375f01fd47674da1339607db06f123fbd33b6c4f17507238948624eb9b00af5d55e643a0d0a500ff877d48843acf10788dde2de8a598640e4641d5668decdb058407edf8b532c6841faf035141f413430319cfd97e01df317b9d5e1915e43806032bd8c7cdd99a24a812653411d466607802a86c838af0804904cfa932e24c1a7a16c43ff3baa7bab26be9dd4b8af4684fa929dbcbcb41e713a429c885a9054e661ff66b1edca04139816479b83dc4676f262d29f29606d8c0a2082a86ab0a62ec8309a06430f4cad4712e3f6eda47e8ef855e952cfc5757809726b4b9603a206ec3b45b5f83208325068ede98630b74f65a5edd97a22b4f68b461c32164aaf8b73704c1532b550e8bac0bfddef58ca98e946470d4518b24c2972e7631e6bbd11566c0b5eae4ae74004718482ed3e4b668dd60ee6973773a3b3b80d726f13a503b53552694e1cd5dfc074f35125291ee47281ffb078d0dfdfa0b564aab70fc4a388ccbc6060e7c34271ed87de9e80497bbd621e596b8d0a330541d7a723ec0e3b4976316872f21cc09644aec9774c65344e4c109624c74872c42bf9f07c3739f736c2123dd0db4c115626c37aadd5622c5f8a3f1aa5021791bdcf2bbbcc57732d6067556155e76385452099654980f7efbb330af931c2db700b9ebc6fb4656f6c166072d53db9c82cb8466422b52275c6e590dfcfceeb883e96907f92825d5bb81b30732bf782791de9b8d69b7f08b07cb90190a881078e8811426ac942697aa9110e65fcdae0970dd04859dc069c4988c49ee265a68d7f2e12770d60bdf8999fca21cbf98cdf582d89bc39f1ed8f11c00f8cbb5b2c26608f7f09399703643d93d49256762553e3183f1d66d4bcf7ccf7594cbd316884700ca5bfa738e89356a7dff87029aa7b8681088e8483982a74ec1e27018aefb2d680ddecad8d9728a5a5b22dd764c28d094263f93f1831b0676b943459f35ac4f205e638b722be2d3695eaeb071cb3474c98b711114801325ef457e6308d105debf3d240b3c88a0b27995bfe3246a3ac6e022ea972741efaea69ffb41d2f895b2b036e55cebeb30908d6c54b41cd99d3fe2054dd2b036fc9d34e1bedd09c8b640f843e6c60414b253679ad5308d3b7ceb5d69bf539576dc1f773fefb6035c14f59a0803c93efdfa8a236c30953da98afc0d096006194907447fe44b8fa451b41d5e474a6ee503b9c1a85305ba2ed107d0f1a4f3fe628efcdfc27da1c9f9c8ed79f0d8b278084407a08236465ab6b7c50c4757d2a41947634f9e37eedde07601d1e393a1501f4973e2e2a2270914fa7c49297f5d13ed2b7b60c1826b2dd5035a16ca9f8c8a4f728f553ef375095bada1e0764f26e1755a308a8f4f7084573a9be7b52d98eb834350f6ea76a894ea27f2d1d8237810a2b14ef3f75e56c94570deb1f322d2799eeab58f2202b12f1ee0ad56c822932d07b94163668610466e6cfb064bcf08098f85be2f633b6704e2583eeea55a4d7d1a9c14314f2acb84c3996933ec1745764edbddc2e0dd471d09def8a7c12e6e45e4812556e88c6a3d822c621ed56601693e4f1ec2d622fb7e3f2c8955ebf9c4b416d59ec18d386c00323f59e06205dba08299169760d3540187a7c26e57055e40487218a02cdc147ca52f9fb7ed7ec8b8aff8d10d3c40549e76be6b84ba8f57407ee83a8fe3db6ddcbbd75075311a02e684136f449e0aa7c2802a318baacc75e9c61eef5edad3cf481fe3e4a2aac2499a6ffe8f9b088ec6831efee2f4083e05d12515fa9fc8ccf6b133d5556adfb6fe40fa254ba94f2a2bdd056e4162d832c6d40ca9e13c3865585054cb2fddb53bae1548fa9cbab20536821192e1c491ccd02c8992bb9d64e1ae6fd5f826fe1bc95589f5cb4e8dc70f0dffef0e604956c6ae6cc83e8a7462dc1f2a059f91a8deb68b5a212521b2c34d4087071f5c54142338c1902adc53a4950ff546f56d71a9d2bfc8c8d938f66c6278e94bbf1aa74a115961276eb89dd75089675dacad6c765ace9d4e32fc4c0c6d615226301b9cb14d84e1f1a73d50f177cff8f03acbc9dbf4fe3c4428b9d2d2e9959cadc3b8521a2518757570f321c24fd4919b7da432646d348e3dddcf7185112e760fd4e03c0a8d6662e1d33e2dd2e76cb6f910d0d697a99e152aa8f8ed41efd61bbbb01e7eda3ccadb7c65860d2bba47f0d05f850c0264bd16468c0f202fad7eb40df6aba61cec1d236f79752bfa32899dbcbd8aa6e22aa8636fea9996141d768897d8ca0f2193e9f84b44bf35ec2dc85360cdb0636c39403d578dcdbc8713fb3e0aa2f659cb71d3831372888838e393aee4022598132c2cc8474e4a3f9f0b99f25d75e412cbe74fda64ed1a881127e74c82a4e306ce9f97a84cf531997b1e7d834646546e9ae490b32e6399e4c8769af37e884ef102c2a6b321007a1373ecf60f157980b7b390b91511d2fa471b4ef9d7cc07b41a57f5d5ab0e9c18640516416c496debfb37b2ad7cf0567dfc4da98dd3959f9cddbad336165bb2d07a6e2785d36564a58b65eeea0cfd5528ecb8afbc91e31c255f98dd235efeebba2417d38cd82b11eb3fc8784e832535eae9f3eef58e97f2a9566856868d11ff147daac0b5a89cafb182e4e80bdd796a8a52631adeaa6ded33a9b61fe4d41d86ee0e6007faddc1a2309896330d5ce748b9f621ef745ff93a70bb9579872c7da02d3a9d7f65a531d5c6b754f348b66b02ebbf113d6b7fea7473ffdc217145a5a37ad1872f27c64ae2ee49dd6cfc6fd6d76994759a487322d7ff3315163ec1d840165d2208fda212caec63143b8446ddfd541ea883e23cf482fb3a8a736971fe5ad956a994284586e6bf0e3bb156fd09b729efc49e7daf18e6ca5256065ffbbffc927a59bf0bb403a13c5e2b4fb537cd9903d1e22e20760e312e7180542b3e35b7280bd65e4c6a55ab6e4f84a15298dfe20d7c63fc751855cf545f9d0d068c50f4a76ffb2264f563882ea3e3deb96850501cf7551777bec96d76492c730d26767257cc4239268a5a8c6c0dd680fb5149a39419b8b808db3d56ae32fd534943e8f668e9a390938256a4e09d97a29cf6a5e2cc276d270d2262bc8ca8e20d66b890f4a90fcc87b60348a4739593c619bc9a54e9570f5f8288840b565a731daa53fd9493f0b870c853262931baa4f8a9423450d84f40c5a7e1a438630f8f4103db95282ce31a42763fb2d895c711da5dce6f08e2fa8e80d0bafa79fd7d9dd359a3e24b50a50e3211b3e56d556536e6b97e5f59d16af0f4a27a3c52a23f10d1f2d63837bc87cee82d45ff9ef8e21239794d113ffe335ac026087209b5c6355a4c5134e8561292b558be7631ca8c024a89f6d2cee0e51988f5fa94f055e97729f5152b30ca7b2edaeaed136ef8dc3816800a8baf5f007c0ecb19968fdc04eb09dfea3cf3c7bbed458033fd188676bb4bd67e79c3d06cd8a92f2b74f00b48e41e2fbee5ca6076e822cf99d2144f6190fdeae0231b570c2a9b3213f07c5e39b5789a37437863496efa2d443ab4a3fc8d806a819cb79ab5d03cc0c19da6d4c7343c1516f2619b65bea66ae9c76aefc7f2c7f76eee80e74e1085b260b426d871e8831ff371d9ea7a29a6472badd8c3cada9a33307b5befc63f56a5448bd4a06a7b75b881ce75b70363eea6b54518b5b67aa518d0c39c46551ba11521c8fac973657bbb6797ea8697c77315acff2107f1779c4756185ed81aa10054619540941082623649f375494aa4154d09abc15e71292c51b2ae3f02bca95f50f92e41e089306354c5b1a3bb356eb87910b4f4df50b63d92afdc4a703ba8525de60341782373b1c827632133db8f3d9e82b3a393ef27ad86800f02b1b58e5fd188f7486d6be4ae2451627ad7993551159ca05c8a24baa0c9d3dad7921c0177c55a9ae8f7914fc6d45387f5914e5663bf17667e347c79d122bb09ce89088ccbd8dda64413d1c5697098538790a3c5d688fb1537cc6c37f24faa585b30e9c9ac3edb36f43346e874ee30d50f4c9836f7a9db7dc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r4, 0x0, r4) socket$inet6_udplite(0xa, 0x2, 0x88) listen(0xffffffffffffffff, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 43.467909947s ago: executing program 3 (id=5066): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x4000000d, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x4, 0x2}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x0, 0xd, 0xa, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) 40.39586851s ago: executing program 3 (id=5070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 37.785270877s ago: executing program 3 (id=5074): socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(r2, r2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x200, 0x40000) socket(0x400000000010, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 26.527105184s ago: executing program 3 (id=5087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, r4, 0x3}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) 23.58433502s ago: executing program 3 (id=5088): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000800010000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78000000001400020077673000000000000000000000000000060006004e230000"], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB], 0x48) 22.496833375s ago: executing program 3 (id=5090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x80400, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) 22.088062338s ago: executing program 6 (id=5093): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000200000200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x4000000d, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x4, 0x2}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x0, 0xd, 0xa, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) 21.948014652s ago: executing program 8 (id=5094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80081, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x3, 0xc}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 21.765050385s ago: executing program 6 (id=5095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000100)={0x1d, 0x0, 0x2, 0xc0}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009"], 0x0) rt_sigqueueinfo(0x0, 0x11, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) 21.682652519s ago: executing program 8 (id=5096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 20.33506601s ago: executing program 8 (id=5097): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r4, 0x118, 0x137db) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000000)={0x2}) ioctl$KVM_REINJECT_CONTROL(r8, 0xae71, &(0x7f0000000200)={0x3f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xdc) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$igmp(0x2, 0x3, 0x2) 17.194249773s ago: executing program 1 (id=5100): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capget(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x2c9, 0x0, 0xfffffffd}}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc0205647, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000356ffc)=0xffffff3d, 0x4) 15.267176555s ago: executing program 1 (id=5101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) 14.758794184s ago: executing program 1 (id=5102): socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='net/raw6\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) 14.642707778s ago: executing program 6 (id=5103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c) socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x28181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x10002, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e21, 0x9, 0x4e24, 0x0, 0x2, 0xa0, 0x20, 0xff}, {0x100000001, 0x7, 0x0, 0x1, 0x4, 0x1, 0x0, 0x1}, {0x0, 0x340000000000000, 0x6}, 0x9, 0x6e6bbf}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x804d5, 0x3c}, 0x8, @in=@private=0xa010104, 0x3504, 0x1, 0x2, 0x5, 0x0, 0x916d, 0x4}}, 0xe8) 13.837010772s ago: executing program 7 (id=5104): socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0xfffd, @local}, {0x2, 0x4e24, @broadcast}, 0x1dd, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xe, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 13.694172955s ago: executing program 1 (id=5105): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000900)={0x667, 0x7d, 0x0, {{0x500, 0x2b5, 0x0, 0x0, {0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\"(9\xe4F\x1a\xb6*\xeb\x84\x1f \x83~\x01\b\xe2\xe7HP\x1cQH', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x667) 13.490553886s ago: executing program 7 (id=5106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80081, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x3, 0xc}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 11.7234025s ago: executing program 1 (id=5107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) 10.631675148s ago: executing program 1 (id=5108): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x3000, 0x0, 0x3) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x7ff) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7, 0xee01}}, './file2\x00'}) r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 10.480059443s ago: executing program 8 (id=5109): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40070}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) 10.425934124s ago: executing program 6 (id=5110): syz_open_dev$dri(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 10.341807061s ago: executing program 7 (id=5111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r3, &(0x7f00000000c0), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6(0xa, 0x5, 0x1) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) socket(0x2, 0x3, 0xff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) 6.944298231s ago: executing program 7 (id=5112): io_uring_setup(0x2255, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in6=@mcast2}}]}, 0x154}}, 0x4810) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="aa1d484ea000f500f7fc08fcd111fbdf23ea32db0e", 0x15}], 0x2) userfaultfd(0x80001) socket$netlink(0x10, 0x3, 0x1) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) 6.573127751s ago: executing program 36 (id=5090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x80400, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) 6.490390267s ago: executing program 6 (id=5114): ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff8001}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), 0x0}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x20010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x10000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xfffffbffa003e45b, 0x700000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffebd) 6.306035697s ago: executing program 8 (id=5115): socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xdc) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1.603348776s ago: executing program 8 (id=5116): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.585484415s ago: executing program 6 (id=5117): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) epoll_create(0xaf2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xb5{\xa0k\x95s\xa8l\xd4\b|m\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}', 0x42, 0x101, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r4) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x9) close(0xffffffffffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) socket$key(0xf, 0x3, 0x2) 1.490761285s ago: executing program 7 (id=5118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) 0s ago: executing program 7 (id=5119): socket$inet(0x2, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x7) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis)\x00'}, 0x58) socket(0x25, 0x5, 0x0) r3 = syz_io_uring_setup(0xae1, &(0x7f0000000d40)={0x0, 0x1484, 0x200, 0x0, 0xe4, 0x0, r0}, &(0x7f0000000d00)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x3, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) kernel console output (not intermixed with test programs): 40534][ T5886] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1517.833568][T18595] sctp: [Deprecated]: syz.7.3269 (pid 18595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1517.833568][T18595] Use struct sctp_sack_info instead [ 1517.933860][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.328830][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1518.794938][ T5886] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1518.830417][ T5886] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1518.852844][ T5886] usb 2-1: Manufacturer: syz [ 1518.899086][ T5886] usb 2-1: config 0 descriptor?? [ 1518.937361][ T5886] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1518.956938][T18601] loop7: detected capacity change from 0 to 512 [ 1518.981495][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3266'. [ 1519.043140][T18602] loop8: detected capacity change from 0 to 512 [ 1519.064956][T18602] EXT4-fs: Ignoring removed i_version option [ 1519.085190][T18601] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1519.152994][T18602] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1519.170239][T18601] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1519.200896][T18601] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.3272: Failed to acquire dquot type 1 [ 1519.206326][T18602] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.3271: EA inode hash validation failed [ 1519.231405][T18602] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.3271: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1519.263785][T18601] loop7: lost filesystem error report for type 5 error -117 [ 1519.270257][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1519.284125][ C1] EXT4-fs (loop7): last error at time 1770744460: ext4_acquire_dquot:7003 [ 1519.436217][T18602] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1519.440055][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1519.455823][ C1] EXT4-fs (loop8): initial error at time 1770744460: ext4_xattr_inode_update_ref:1037: inode 11 [ 1519.466354][ C1] EXT4-fs (loop8): last error at time 1770744460: ext4_xattr_inode_update_ref:1037: inode 11 [ 1519.473712][T18601] EXT4-fs (loop7): 1 truncate cleaned up [ 1519.490425][T18602] EXT4-fs (loop8): Remounting filesystem read-only [ 1519.506110][T18602] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.3271: ea_inode dec ref err=-117 [ 1519.532430][T18601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1519.662128][T18602] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -30) [ 1519.682578][T18602] EXT4-fs (loop8): 1 orphan inode deleted [ 1519.688588][T18601] ext4 filesystem being mounted at /551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.711388][T18602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1521.365484][ T7974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.604404][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.800467][T18645] loop6: detected capacity change from 0 to 512 [ 1524.159881][ T3412] usb 2-1: USB disconnect, device number 81 [ 1524.196922][T18690] loop6: detected capacity change from 0 to 256 [ 1524.249989][T18690] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1525.133956][T18708] loop7: detected capacity change from 0 to 512 [ 1525.380839][T18714] loop3: detected capacity change from 0 to 512 [ 1525.431003][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3284'. [ 1525.457691][T18714] EXT4-fs: Ignoring removed i_version option [ 1525.490812][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3284'. [ 1525.535196][T18714] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1525.586883][T18714] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3286: EA inode hash validation failed [ 1525.753423][T18714] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.3286: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1525.825855][T18714] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1525.827968][T18714] EXT4-fs (loop3): Remounting filesystem read-only [ 1525.837241][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1525.837278][ C0] EXT4-fs (loop3): initial error at time 1770744467: ext4_xattr_inode_update_ref:1037: inode 11 [ 1525.837304][ C0] EXT4-fs (loop3): last error at time 1770744467: ext4_xattr_inode_update_ref:1037: inode 11 [ 1526.695564][T18714] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.3286: ea_inode dec ref err=-117 [ 1526.714014][T18714] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 1526.732771][T18714] EXT4-fs (loop3): 1 orphan inode deleted [ 1526.755534][T18714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1527.310413][ T5969] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1527.765425][T18187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.808631][ T5969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.854171][ T5969] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1528.006576][ T5969] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1528.055964][ T5969] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1528.064420][ T5969] usb 2-1: Manufacturer: syz [ 1528.390321][T18770] loop6: detected capacity change from 0 to 32768 [ 1528.400211][T18770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3297 (18770) [ 1528.416724][T18770] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1528.418125][ T5969] usb 2-1: config 0 descriptor?? [ 1528.426888][T18770] BTRFS info (device loop6): using sha256 checksum algorithm [ 1528.539057][ T5969] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1528.613788][T18770] BTRFS info (device loop6): enabling ssd optimizations [ 1528.620853][T18770] BTRFS info (device loop6): turning on async discard [ 1528.627626][T18770] BTRFS info (device loop6): enabling free space tree [ 1528.921742][ T29] audit: type=1800 audit(1770744470.250:2482): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3297" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 1529.652875][T18796] loop7: detected capacity change from 0 to 512 [ 1531.271225][ T8150] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1531.965597][T18819] SET target dimension over the limit! [ 1532.592777][T18821] loop6: detected capacity change from 0 to 512 [ 1532.600819][T18821] EXT4-fs: Ignoring removed i_version option [ 1532.701053][T18821] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1532.723836][T18821] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3306: EA inode hash validation failed [ 1532.836422][T18821] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.3306: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1532.990059][T18821] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1532.990699][T18821] EXT4-fs (loop6): Remounting filesystem read-only [ 1533.006512][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1533.006540][ C0] EXT4-fs (loop6): initial error at time 1770744474: ext4_xattr_inode_update_ref:1037: inode 11 [ 1533.006611][ C0] EXT4-fs (loop6): last error at time 1770744474: ext4_xattr_inode_update_ref:1037: inode 11 [ 1533.141089][T18821] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.3306: ea_inode dec ref err=-117 [ 1533.201943][T18829] loop8: detected capacity change from 0 to 256 [ 1533.219334][T18829] exfat: Deprecated parameter 'utf8' [ 1533.242350][T18829] exfat: Unknown parameter 'k+ÑèÛÔeep@last_dots' [ 1533.250564][T18821] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -30) [ 1533.269721][T18821] EXT4-fs (loop6): 1 orphan inode deleted [ 1533.502920][T18821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1534.982319][ T48] usb 2-1: USB disconnect, device number 82 [ 1534.983316][ T8150] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.573202][T18870] loop8: detected capacity change from 0 to 32768 [ 1536.219891][T18870] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3312 (18870) [ 1536.288615][T18870] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1536.298866][T18870] BTRFS info (device loop8): using sha256 checksum algorithm [ 1536.445226][T18870] BTRFS info (device loop8): enabling ssd optimizations [ 1536.453462][T18870] BTRFS info (device loop8): turning on async discard [ 1536.460345][T18870] BTRFS info (device loop8): enabling free space tree [ 1537.011356][ T29] audit: type=1800 audit(1770744478.200:2483): pid=18900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3312" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 1538.166712][T18914] loop1: detected capacity change from 0 to 512 [ 1538.212576][T18914] EXT4-fs: Ignoring removed i_version option [ 1538.285274][T18914] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1538.319012][T18914] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3322: EA inode hash validation failed [ 1538.379143][T18921] ALSA: mixer_oss: invalid OSS volume '' [ 1538.461726][T18915] loop3: detected capacity change from 0 to 4096 [ 1539.071146][T18914] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.3322: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1539.125579][T18914] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1539.130050][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1539.145750][ C1] EXT4-fs (loop1): initial error at time 1770744480: ext4_xattr_inode_update_ref:1037: inode 11 [ 1539.156299][ C1] EXT4-fs (loop1): last error at time 1770744480: ext4_xattr_inode_update_ref:1037: inode 11 [ 1539.166708][T18914] EXT4-fs (loop1): Remounting filesystem read-only [ 1539.173516][T18914] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.3322: ea_inode dec ref err=-117 [ 1539.198656][T18914] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30) [ 1539.208788][T18914] EXT4-fs (loop1): 1 orphan inode deleted [ 1539.218023][T18914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1539.233516][T18915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.286062][T14374] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1541.624184][T18934] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1541.760491][T18934] netlink: 'syz.7.3326': attribute type 7 has an invalid length. [ 1541.910239][T18934] netlink: 'syz.7.3326': attribute type 8 has an invalid length. [ 1541.923658][T17726] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.027071][T18187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.058109][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3326'. [ 1542.631197][ T5969] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1542.829573][ T5969] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.861808][ T5969] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1542.878400][T15849] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1542.919382][ T5969] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1542.929626][T18978] lo speed is unknown, defaulting to 1000 [ 1542.936624][ T5969] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1542.956991][ T5969] usb 9-1: Manufacturer: syz [ 1542.969024][ T5969] usb 9-1: config 0 descriptor?? [ 1542.992104][ T5969] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1543.065953][T15849] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1543.106641][T15849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.161358][T15849] usb 2-1: Product: syz [ 1543.199523][T15849] usb 2-1: Manufacturer: syz [ 1543.226950][T15849] usb 2-1: SerialNumber: syz [ 1543.317747][T15849] usb 2-1: config 0 descriptor?? [ 1543.425679][T18987] loop7: detected capacity change from 0 to 32768 [ 1543.435122][T18987] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3334 (18987) [ 1543.441206][T15849] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1543.471393][T18987] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1543.481599][T18987] BTRFS info (device loop7): using sha256 checksum algorithm [ 1543.527652][T18989] overlayfs: missing 'lowerdir' [ 1543.606456][T15849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1543.618569][T15849] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1543.628006][T15849] usb 2-1: media controller created [ 1543.682977][T18975] dvb-usb: bulk message failed: -22 (7/0) [ 1543.859065][T18987] BTRFS info (device loop7): enabling ssd optimizations [ 1543.866213][T18987] BTRFS info (device loop7): turning on async discard [ 1543.873101][T18987] BTRFS info (device loop7): enabling free space tree [ 1543.901842][T15849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1544.815030][ T29] audit: type=1800 audit(1770744485.510:2484): pid=19011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3334" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 1545.023006][T15849] DVB: Unable to find symbol mt352_attach() [ 1545.199196][T15849] DVB: Unable to find symbol nxt6000_attach() [ 1545.215207][T15849] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1545.236944][T19019] loop1: detected capacity change from 0 to 4096 [ 1545.321808][T15849] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 1545.349682][T15849] dvb-usb: schedule remote query interval to 1000 msecs. [ 1545.365591][T15849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1545.442853][T19019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1545.476259][T15849] dvb-usb: bulk message failed: -22 (7/0) [ 1545.504263][T15849] dvb-usb: bulk message failed: -22 (7/0) [ 1545.567834][T15849] usb 2-1: USB disconnect, device number 83 [ 1545.876752][T15849] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1545.907432][T17726] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.929034][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.935565][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.303741][T19028] loop1: detected capacity change from 0 to 512 [ 1546.362928][T19028] EXT4-fs: Ignoring removed i_version option [ 1546.369857][ T7974] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1546.397785][T19028] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1546.444483][T19028] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3339: EA inode hash validation failed [ 1546.520416][T19028] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.3339: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1546.612890][T19028] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1546.615334][T19028] EXT4-fs (loop1): Remounting filesystem read-only [ 1546.624562][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1546.624579][ C1] EXT4-fs (loop1): initial error at time 1770744487: ext4_xattr_inode_update_ref:1037: inode 11 [ 1546.624600][ C1] EXT4-fs (loop1): last error at time 1770744487: ext4_xattr_inode_update_ref:1037: inode 11 [ 1546.743282][T19028] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.3339: ea_inode dec ref err=-117 [ 1546.773692][ T48] usb 9-1: USB disconnect, device number 40 [ 1546.816725][T19028] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30) [ 1546.900383][T19028] EXT4-fs (loop1): 1 orphan inode deleted [ 1546.908156][T19028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1547.260172][ T5969] usb 8-1: new low-speed USB device number 67 using dummy_hcd [ 1547.939735][T17726] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.178895][ T5969] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1548.267818][ T5969] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1548.318326][ T5969] usb 8-1: can't read configurations, error -71 [ 1548.772226][T19073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3344'. [ 1548.974222][T19078] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1549.090652][T19079] lo speed is unknown, defaulting to 1000 [ 1549.328046][T12235] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1550.192038][T12235] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1550.210419][T12235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.239059][T12235] usb 4-1: Product: syz [ 1550.249178][T12235] usb 4-1: Manufacturer: syz [ 1550.253892][T12235] usb 4-1: SerialNumber: syz [ 1550.272272][T12235] usb 4-1: config 0 descriptor?? [ 1550.325662][T12235] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1550.360593][T12235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1550.390564][T12235] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1550.402825][T12235] usb 4-1: media controller created [ 1550.424756][T12235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1550.670448][T12235] DVB: Unable to find symbol mt352_attach() [ 1551.010097][ T5835] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1551.042738][T19098] loop1: detected capacity change from 0 to 32768 [ 1551.052401][T19098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3350 (19098) [ 1551.067066][T12235] DVB: Unable to find symbol nxt6000_attach() [ 1551.077814][T12235] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1551.087248][T19098] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1551.099238][T19098] BTRFS info (device loop1): using sha256 checksum algorithm [ 1551.123669][T12235] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66 [ 1551.142633][T12235] dvb-usb: schedule remote query interval to 1000 msecs. [ 1551.151617][T12235] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1551.163059][T12235] dvb-usb: bulk message failed: -22 (7/0) [ 1551.172637][T12235] dvb-usb: bulk message failed: -22 (7/0) [ 1551.193141][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.220082][ T5835] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1551.235320][T12235] usb 4-1: USB disconnect, device number 70 [ 1551.280551][ T5835] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1551.316458][T19098] BTRFS info (device loop1): enabling ssd optimizations [ 1551.325078][T19098] BTRFS info (device loop1): turning on async discard [ 1551.332024][T19098] BTRFS info (device loop1): enabling free space tree [ 1551.339352][ T5835] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1551.400538][ T5835] usb 8-1: Manufacturer: syz [ 1551.461092][ T5835] usb 8-1: config 0 descriptor?? [ 1551.493819][ T5835] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1551.592965][T12235] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1551.704333][ T29] audit: type=1800 audit(1770744493.030:2485): pid=19118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3350" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 1552.301360][T19115] loop3: detected capacity change from 0 to 4096 [ 1552.349531][T19121] loop8: detected capacity change from 0 to 512 [ 1552.408635][T19123] overlayfs: missing 'lowerdir' [ 1552.458031][T19121] EXT4-fs: Ignoring removed i_version option [ 1552.503480][T19121] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1552.689242][T19115] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1552.702592][T19121] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.3353: EA inode hash validation failed [ 1552.727103][T19115] ntfs3(loop3): ino=1a, mi_enum_attr [ 1552.727219][T19121] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.3353: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1552.762273][T19115] ntfs3(loop3): ino=1a, mi_enum_attr [ 1552.795332][T19115] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1552.802664][T19121] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1552.809187][T19121] EXT4-fs (loop8): Remounting filesystem read-only [ 1552.818540][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1552.818577][ C0] EXT4-fs (loop8): initial error at time 1770744494: ext4_xattr_inode_update_ref:1037: inode 11 [ 1552.818614][ C0] EXT4-fs (loop8): last error at time 1770744494: ext4_xattr_inode_update_ref:1037: inode 11 [ 1552.867874][T19121] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.3353: ea_inode dec ref err=-117 [ 1552.885806][T19121] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -30) [ 1552.901240][T19121] EXT4-fs (loop8): 1 orphan inode deleted [ 1552.917889][T19121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1553.683810][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.011180][T17726] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1555.275330][T19173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1555.310151][T19173] netlink: 'syz.1.3358': attribute type 7 has an invalid length. [ 1555.340173][T19173] netlink: 'syz.1.3358': attribute type 8 has an invalid length. [ 1555.347920][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1555.360131][ T5969] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 1555.458947][T12235] usb 8-1: USB disconnect, device number 69 [ 1555.633746][ T5969] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1555.648668][ T5969] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1555.672605][ T5969] usb 4-1: can't read configurations, error -71 [ 1555.706553][T19175] lo speed is unknown, defaulting to 1000 [ 1557.392999][T19195] loop6: detected capacity change from 0 to 32768 [ 1557.418231][T19195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3365 (19195) [ 1557.520302][T19195] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1557.530560][T19195] BTRFS info (device loop6): using sha256 checksum algorithm [ 1557.791306][T19195] BTRFS info (device loop6): enabling ssd optimizations [ 1557.798363][T19195] BTRFS info (device loop6): turning on async discard [ 1557.805184][T19195] BTRFS info (device loop6): enabling free space tree [ 1557.872516][T19205] loop7: detected capacity change from 0 to 512 [ 1557.879944][T19205] EXT4-fs: Ignoring removed i_version option [ 1558.042157][T19205] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1558.760331][T19205] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3366: EA inode hash validation failed [ 1558.800101][ T29] audit: type=1800 audit(1770744499.450:2486): pid=19223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3365" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 1558.831394][T19205] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.3366: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1558.960571][T19205] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1558.966502][T19205] EXT4-fs (loop7): Remounting filesystem read-only [ 1558.975824][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1558.975851][ C1] EXT4-fs (loop7): initial error at time 1770744500: ext4_xattr_inode_update_ref:1037: inode 11 [ 1558.975887][ C1] EXT4-fs (loop7): last error at time 1770744500: ext4_xattr_inode_update_ref:1037: inode 11 [ 1559.110945][T19205] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.3366: ea_inode dec ref err=-117 [ 1559.251650][T19205] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -30) [ 1559.262270][ T8150] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1559.282454][ T5969] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1559.332476][T19205] EXT4-fs (loop7): 1 orphan inode deleted [ 1559.374845][T19205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1559.462157][ T5969] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.617940][ T5969] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.380237][ T5969] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1560.501615][ T5969] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1560.696962][ T5969] usb 9-1: Manufacturer: syz [ 1560.781255][ T5969] usb 9-1: config 0 descriptor?? [ 1560.913767][ T5969] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1561.037263][ T7974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.266852][T19268] overlayfs: missing 'lowerdir' [ 1562.020389][ T5886] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 1562.177183][ T5886] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1562.190483][ T5886] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1562.203297][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1562.213250][ T5886] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1562.222767][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1562.231550][ T5886] usb 8-1: Product: syz [ 1562.236044][ T5886] usb 8-1: Manufacturer: syz [ 1562.240939][ T5835] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 1562.253073][ T5886] usb 8-1: SerialNumber: syz [ 1562.330321][ T5886] usb 8-1: config 0 descriptor?? [ 1562.354971][ T5886] usb 8-1: selecting invalid altsetting 0 [ 1562.456153][ T5835] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1562.484589][ T5835] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1562.520197][ T5835] usb 4-1: can't read configurations, error -71 [ 1562.850317][ T48] usb 8-1: USB disconnect, device number 70 [ 1563.468987][T12959] udevd[12959]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.937026][ T48] usb 9-1: USB disconnect, device number 41 [ 1565.482438][T19306] loop8: detected capacity change from 0 to 512 [ 1565.533724][T19306] EXT4-fs: Ignoring removed i_version option [ 1566.434477][T19306] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1566.491614][T19306] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.3382: EA inode hash validation failed [ 1566.540458][T19306] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.3382: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1566.649378][T19306] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1566.649884][T19306] EXT4-fs (loop8): Remounting filesystem read-only [ 1566.659148][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1566.659170][ C0] EXT4-fs (loop8): initial error at time 1770744507: ext4_xattr_inode_update_ref:1037: inode 11 [ 1566.659204][ C0] EXT4-fs (loop8): last error at time 1770744507: ext4_xattr_inode_update_ref:1037: inode 11 [ 1566.702555][T19306] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.8.3382: ea_inode dec ref err=-117 [ 1566.763511][T19306] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -30) [ 1566.850355][T19306] EXT4-fs (loop8): 1 orphan inode deleted [ 1566.858327][T19306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1567.210197][ T5886] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1568.287854][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.353538][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1568.420252][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1568.458603][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1568.560209][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1568.634283][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 1568.699875][ T5886] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1568.757127][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.860603][ T5886] usb 8-1: config 0 descriptor?? [ 1569.345907][ T5886] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1569.740203][ T5886] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1569.902383][ T5886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.921969][ T5886] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1569.973300][ T5886] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1569.998229][ T5886] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1570.022389][ T5886] usb 9-1: Manufacturer: syz [ 1570.049963][ T5886] usb 9-1: config 0 descriptor?? [ 1570.071270][ T5886] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1570.707653][T19368] overlayfs: missing 'lowerdir' [ 1571.316151][ T5969] usb 8-1: USB disconnect, device number 71 [ 1572.304939][T19388] loop3: detected capacity change from 0 to 512 [ 1572.330845][T19388] EXT4-fs: Ignoring removed i_version option [ 1572.472247][T19388] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1572.601687][T19388] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3396: EA inode hash validation failed [ 1572.692630][T19388] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.3396: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1572.772793][T19388] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1572.774463][T19388] EXT4-fs (loop3): Remounting filesystem read-only [ 1572.783777][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1572.783805][ C0] EXT4-fs (loop3): initial error at time 1770744514: ext4_xattr_inode_update_ref:1037: inode 11 [ 1572.783841][ C0] EXT4-fs (loop3): last error at time 1770744514: ext4_xattr_inode_update_ref:1037: inode 11 [ 1572.855963][T19388] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.3396: ea_inode dec ref err=-117 [ 1572.902918][T19388] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -30) [ 1572.980286][T19388] EXT4-fs (loop3): 1 orphan inode deleted [ 1573.095716][T19388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1573.108589][ T48] usb 9-1: USB disconnect, device number 42 [ 1574.485527][T18187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.947534][T19385] loop7: detected capacity change from 0 to 32768 [ 1575.041668][T19385] read_mapping_page failed! [ 1575.046708][T19385] jfs_mount: dbMount failed w/rc = -5 [ 1575.082223][T19385] Mount JFS Failure: -5 [ 1575.093146][T19385] jfs_mount failed w/return code = -5 [ 1577.573609][T19459] loop1: detected capacity change from 0 to 32768 [ 1577.607828][T19459] diRead: diIAGRead returned -5 [ 1578.066469][T19461] ialloc: diAlloc returned -17! [ 1578.106040][T12235] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1578.188894][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1578.197087][T19462] loop7: detected capacity change from 0 to 512 [ 1578.206579][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1578.217292][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1578.246069][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1578.263761][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1578.284947][T19466] loop3: detected capacity change from 0 to 512 [ 1578.300403][T19462] EXT4-fs: Ignoring removed i_version option [ 1578.315349][T12235] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.371767][T19462] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1578.372135][T19466] ext4: Unknown parameter 'subj_user' [ 1578.394113][T12235] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1578.424793][T19462] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.3412: EA inode hash validation failed [ 1578.470557][T12235] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1578.495042][T12235] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1578.509608][T19463] lo speed is unknown, defaulting to 1000 [ 1578.542949][T12235] usb 9-1: Manufacturer: syz [ 1578.559433][T19462] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.3412: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1578.561951][T12235] usb 9-1: config 0 descriptor?? [ 1578.638315][T19462] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1578.650012][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1578.665640][ C1] EXT4-fs (loop7): initial error at time 1770744519: ext4_xattr_inode_update_ref:1037: inode 11 [ 1578.676088][ C1] EXT4-fs (loop7): last error at time 1770744519: ext4_xattr_inode_update_ref:1037: inode 11 [ 1578.690615][T19462] EXT4-fs (loop7): Remounting filesystem read-only [ 1578.697276][T19462] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.3412: ea_inode dec ref err=-117 [ 1578.710457][ T3412] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1578.739426][T19462] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -30) [ 1578.755157][T12235] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1578.816518][T19462] EXT4-fs (loop7): 1 orphan inode deleted [ 1578.846306][T19462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1578.900068][ T3412] usb 4-1: Using ep0 maxpacket: 16 [ 1579.106984][T19472] overlayfs: missing 'lowerdir' [ 1579.957598][ T3412] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1580.049270][ T3412] usb 4-1: config 1 has an invalid interface number: 9 but max is 0 [ 1580.077100][ T3412] usb 4-1: config 1 has no interface number 0 [ 1580.121634][ T3412] usb 4-1: config 1 interface 9 altsetting 69 bulk endpoint 0x4 has invalid maxpacket 8 [ 1580.134412][ T3412] usb 4-1: config 1 interface 9 has no altsetting 0 [ 1580.310293][T14380] Bluetooth: hci3: command tx timeout [ 1580.375819][ T3412] usb 4-1: New USB device found, idVendor=0711, idProduct=5200, bcdDevice=13.fc [ 1580.561805][ T7974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.667137][ T3412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.715968][ T3412] usb 4-1: Product: syz [ 1580.726661][ T3412] usb 4-1: Manufacturer: syz [ 1580.770302][ T3412] usb 4-1: SerialNumber: syz [ 1580.802543][T19466] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1581.193525][ T3412] sisusb 4-1:1.9: Invalid USB2VGA device [ 1581.890084][ T3412] sisusb 4-1:1.9: probe with driver sisusb failed with error -22 [ 1581.910360][ T3412] usb 4-1: USB disconnect, device number 75 [ 1582.420357][T14380] Bluetooth: hci3: command tx timeout [ 1582.473706][T18160] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.740455][T19463] chnl_net:caif_netlink_parms(): no params data found [ 1582.854009][T19495] netlink: 'syz.3.3419': attribute type 1 has an invalid length. [ 1582.861901][T19495] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3419'. [ 1582.881046][ T5835] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1583.645395][T18160] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.700658][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 1583.726328][ T5835] usb 8-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1583.770389][ T5835] usb 8-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1583.770649][T12235] usb 9-1: USB disconnect, device number 43 [ 1583.814296][ T5835] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1583.840105][ T5835] usb 8-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 1583.869014][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.881825][ T5835] usb 8-1: config 0 descriptor?? [ 1583.953079][ T5835] usb 8-1: can't set config #0, error -71 [ 1583.969924][ T5835] usb 8-1: USB disconnect, device number 72 [ 1583.997642][T18160] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.489687][T14380] Bluetooth: hci3: command tx timeout [ 1584.886433][T19508] loop7: detected capacity change from 0 to 256 [ 1584.930897][T19508] exfat: Deprecated parameter 'utf8' [ 1584.936213][T19508] exfat: Deprecated parameter 'utf8' [ 1585.048844][T19508] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1585.245720][T18160] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.117647][T19515] input: syz1 as /devices/virtual/input/input68 [ 1586.550073][T14380] Bluetooth: hci3: command tx timeout [ 1587.347216][T19463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.354806][T19463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.362284][T19463] bridge_slave_0: entered allmulticast mode [ 1587.371167][T19463] bridge_slave_0: entered promiscuous mode [ 1587.383558][T19463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.391078][T19463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.398495][T19463] bridge_slave_1: entered allmulticast mode [ 1587.432167][T19463] bridge_slave_1: entered promiscuous mode [ 1587.681056][T19463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.715658][T19463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.123136][T19539] loop3: detected capacity change from 0 to 2048 [ 1588.218719][T19539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1588.235822][T19463] team0: Port device team_slave_0 added [ 1588.270230][T12235] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1588.354405][T19463] team0: Port device team_slave_1 added [ 1588.460672][ T5886] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1588.620866][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 1588.638395][T12235] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.640744][ T5886] usb 2-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1588.674595][T12235] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1588.843003][ T5886] usb 2-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1588.991375][T12235] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1589.005715][T12235] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1589.049861][T18160] bridge_slave_1: left allmulticast mode [ 1589.058799][ T5886] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1589.068325][ T5886] usb 2-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 1589.072791][T12235] usb 9-1: Manufacturer: syz [ 1589.089367][T18160] bridge_slave_1: left promiscuous mode [ 1589.089398][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.124348][T18160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.133686][ T5886] usb 2-1: config 0 descriptor?? [ 1589.152953][T12235] usb 9-1: config 0 descriptor?? [ 1589.175345][T12235] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1589.201876][T18160] bridge_slave_0: left allmulticast mode [ 1589.220317][T18160] bridge_slave_0: left promiscuous mode [ 1589.233506][T18160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.384974][ T5886] usbhid 2-1:0.0: can't add hid device: -71 [ 1589.400997][ T5886] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1589.470267][ T5886] usb 2-1: USB disconnect, device number 84 [ 1589.727983][T19552] overlayfs: missing 'lowerdir' [ 1591.179097][T19563] loop3: detected capacity change from 0 to 256 [ 1591.266984][T19563] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1592.521241][T19573] loop1: detected capacity change from 0 to 32768 [ 1592.529479][T19575] loop7: detected capacity change from 0 to 64 [ 1592.561435][T19573] (syz.1.3440,19573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1592.576185][T19573] (syz.1.3440,19573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1592.603972][T19573] JBD2: Ignoring recovery information on journal [ 1592.648071][T19573] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1592.672212][T19573] (syz.1.3440,19573,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1592.685285][T19573] (syz.1.3440,19573,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1592.697544][T19573] (syz.1.3440,19573,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1592.706191][T19573] (syz.1.3440,19573,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1592.713796][T19573] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 4 [ 1592.722891][T19573] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1592.732337][T19573] (syz.1.3440,19573,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1592.740372][T19573] (syz.1.3440,19573,0):ocfs2_mknod:318 ERROR: status = -5 [ 1592.747518][T19573] (syz.1.3440,19573,0):ocfs2_mknod:506 ERROR: status = -5 [ 1592.754740][T19573] (syz.1.3440,19573,0):ocfs2_create:679 ERROR: status = -5 [ 1592.800939][T19579] (syz.1.3440,19579,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1592.828738][T19575] hfs: get root inode failed [ 1592.851409][T19579] (syz.1.3440,19579,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1592.987224][T19579] (syz.1.3440,19579,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1593.040162][T19579] (syz.1.3440,19579,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1593.055314][T19579] Quota error (device loop1): find_next_id: Can't read quota tree block 4 [ 1593.072474][T19579] (syz.1.3440,19579,1):ocfs2_get_next_id:921 ERROR: status = -5 [ 1593.455984][T17726] ocfs2: Unmounting device (7,1) on (node local) [ 1593.608919][T18160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.778834][T18160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.822519][T18160] bond0 (unregistering): Released all slaves [ 1593.852518][ T5969] usb 9-1: USB disconnect, device number 44 [ 1593.975423][T19463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.002579][T19463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.071957][T19463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.119557][T19463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.342429][T19463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.369245][T19463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.426859][T18160] tipc: Left network mode [ 1594.567040][T18160] IPVS: stopping master sync thread 10843 ... [ 1597.127485][T19616] loop3: detected capacity change from 0 to 512 [ 1598.687613][T19624] loop8: detected capacity change from 0 to 2048 [ 1598.774142][T19624] EXT4-fs: Ignoring removed mblk_io_submit option [ 1598.813918][T19463] hsr_slave_0: entered promiscuous mode [ 1598.853291][T19463] hsr_slave_1: entered promiscuous mode [ 1598.886872][T19463] debugfs: 'hsr0' already exists in 'hsr' [ 1598.911972][T19624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.929763][T19463] Cannot create hsr debugfs directory [ 1599.131457][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.210961][T12235] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1599.870102][T12235] usb 4-1: Using ep0 maxpacket: 8 [ 1599.882143][T12235] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1599.914559][T12235] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1599.950281][T12235] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1599.991563][T12235] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1600.092991][T12235] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1600.205878][T12235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.444823][T18160] hsr_slave_0: left promiscuous mode [ 1600.456655][T12235] usb 4-1: GET_CAPABILITIES returned 0 [ 1600.485287][T18160] hsr_slave_1: left promiscuous mode [ 1600.485331][T12235] usbtmc 4-1:16.0: can't read capabilities [ 1600.509519][T18160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.538708][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1600.546630][T18160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.567612][T18160] veth1_macvtap: left promiscuous mode [ 1600.573423][T18160] veth0_macvtap: left promiscuous mode [ 1600.584452][T18160] veth1_vlan: left promiscuous mode [ 1600.589857][T18160] veth0_vlan: left promiscuous mode [ 1600.738390][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1600.774223][ T5835] usb 4-1: USB disconnect, device number 76 [ 1601.026073][T18160] pimreg3 (unregistering): left allmulticast mode [ 1601.287686][T18160] team0 (unregistering): Port device team_slave_1 removed [ 1601.327249][T18160] team0 (unregistering): Port device team_slave_0 removed [ 1601.671778][ T5969] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1601.969079][ T5969] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1602.056734][ T5969] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1602.132821][ T5969] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1602.317822][ T5969] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1602.378840][ T5969] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1602.446254][ T5969] usb 4-1: Product: syz [ 1602.450828][ T5969] usb 4-1: Manufacturer: syz [ 1602.456397][ T5969] usb 4-1: SerialNumber: syz [ 1602.630363][T19671] loop1: detected capacity change from 0 to 32768 [ 1602.646104][T19671] [ 1602.646104][T19671] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1602.646104][T19671] [ 1602.666052][T19671] ERROR: (device loop1): diWrite: ixpxd invalid [ 1602.666052][T19671] [ 1602.681493][T19671] ERROR: (device loop1): txCommit: [ 1602.681493][T19671] [ 1602.699887][ T5969] usb 4-1: config 0 descriptor?? [ 1602.710516][T19671] ERROR: (device loop1): diWrite: ixpxd invalid [ 1602.710516][T19671] [ 1602.719419][T19671] ERROR: (device loop1): txCommit: [ 1602.719419][T19671] [ 1602.745931][ T5969] usb 4-1: selecting invalid altsetting 0 [ 1602.768483][T17726] [ 1602.768483][T17726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1602.768483][T17726] [ 1602.785059][T17726] [ 1602.785059][T17726] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1602.785059][T17726] [ 1603.101754][ T29] audit: type=1800 audit(1770744544.440:2487): pid=19675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3464" name="file1" dev="tmpfs" ino=372 res=0 errno=0 [ 1603.302297][ T5886] usb 4-1: USB disconnect, device number 77 [ 1604.117315][T19681] random: crng reseeded on system resumption [ 1604.344849][T19683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1605.589923][T19695] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3471'. [ 1606.984283][T19712] loop8: detected capacity change from 0 to 512 [ 1607.359127][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.365572][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.057190][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3478'. [ 1610.066446][T19750] loop7: detected capacity change from 0 to 8 [ 1610.202953][T19750] SQUASHFS error: xz decompression failed, data probably corrupt [ 1610.210974][T19752] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1610.220987][ T5835] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1610.250875][T19750] SQUASHFS error: Failed to read block 0x108: -5 [ 1610.284632][T19750] SQUASHFS error: Unable to read metadata cache entry [106] [ 1610.311766][T19750] SQUASHFS error: Unable to read inode 0x11f [ 1610.322942][T19463] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1610.533364][T19463] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1610.599933][T19463] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1610.634775][T19755] loop1: detected capacity change from 0 to 32768 [ 1610.643434][T19755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3484 (19755) [ 1610.667792][T19755] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1610.678020][T19755] BTRFS info (device loop1): using sha256 checksum algorithm [ 1610.684760][T19463] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1610.701828][ T5835] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1610.713582][ T5835] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1610.724061][ T5835] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1610.735652][ T5835] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1610.752794][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1610.779283][ T5835] usb 4-1: Product: syz [ 1610.794590][ T5835] usb 4-1: Manufacturer: syz [ 1610.818334][ T5835] usb 4-1: SerialNumber: syz [ 1610.868427][T19755] BTRFS info (device loop1): enabling ssd optimizations [ 1610.876020][T19755] BTRFS info (device loop1): turning on async discard [ 1610.882868][T19755] BTRFS info (device loop1): enabling free space tree [ 1610.903664][ T5835] usb 4-1: config 0 descriptor?? [ 1610.935195][ T5835] usb 4-1: selecting invalid altsetting 0 [ 1612.073999][ T29] audit: type=1800 audit(1770744552.660:2488): pid=19784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3484" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 1613.104739][ T5835] usb 4-1: USB disconnect, device number 78 [ 1613.534995][T19792] loop7: detected capacity change from 0 to 32768 [ 1613.571440][T19792] diRead: diIAGRead returned -5 [ 1613.581106][T19792] ialloc: diAlloc returned -17! [ 1613.622716][T19463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.789427][T19463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.860896][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.868284][T18158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.046662][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.053984][T18167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1614.784336][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 1614.981150][T17726] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1615.104998][T19809] loop7: detected capacity change from 0 to 256 [ 1615.251779][T19809] exfat: Deprecated parameter 'namecase' [ 1615.655112][T19809] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1615.781299][T19809] overlayfs: failed to resolve './file1': -2 [ 1616.136492][T19463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.612005][T19847] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3494'. [ 1620.244494][T19866] loop7: detected capacity change from 0 to 512 [ 1620.279247][T19866] EXT4-fs: Ignoring removed bh option [ 1620.351078][T19866] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1620.435516][T19866] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1620.488982][T19463] veth0_vlan: entered promiscuous mode [ 1620.501350][T19866] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1620.539567][T19463] veth1_vlan: entered promiscuous mode [ 1620.609009][T19463] veth0_macvtap: entered promiscuous mode [ 1620.638052][T19463] veth1_macvtap: entered promiscuous mode [ 1620.656272][T19866] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1620.709194][T19463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1620.749217][T19463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1620.768524][T19866] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1620.772308][ T6649] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.810656][T19866] System zones: 0-2, 18-18, 34-35 [ 1620.862393][T19866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.877982][ T6649] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.897500][ T6649] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.975695][T18154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.001226][T19866] fscrypt (loop7, inode 12): Error -61 getting encryption context [ 1621.215108][T18154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.229346][T18154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.244660][ T7974] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.434660][T18174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.599375][T18174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.620837][T19888] loop3: detected capacity change from 0 to 65536 [ 1622.651425][T19888] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1622.707765][T19888] XFS (loop3): Ending clean mount [ 1622.722923][T19888] XFS (loop3): Quotacheck needed: Please wait. [ 1622.858811][T19888] XFS (loop3): Quotacheck: Done. [ 1623.116276][T18187] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1623.406066][T19912] netlink: 'syz.6.3510': attribute type 15 has an invalid length. [ 1623.453988][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3510'. [ 1624.349903][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.364062][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.372765][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.393196][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.413344][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1624.475835][T19908] lo speed is unknown, defaulting to 1000 [ 1625.475956][T19913] lo speed is unknown, defaulting to 1000 [ 1625.666998][T19925] ipvlan2: entered promiscuous mode [ 1625.723773][T19925] bridge0: port 3(ipvlan2) entered blocking state [ 1625.755941][T19925] bridge0: port 3(ipvlan2) entered disabled state [ 1625.770347][T19925] ipvlan2: entered allmulticast mode [ 1625.775663][T19925] bridge0: entered allmulticast mode [ 1625.798162][T19925] ipvlan2: left allmulticast mode [ 1625.824615][T19925] bridge0: left allmulticast mode [ 1626.493552][ T5840] Bluetooth: hci1: command tx timeout [ 1626.985703][ T6649] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.303121][ T6649] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.358237][T19953] netlink: 'syz.3.3516': attribute type 39 has an invalid length. [ 1627.530544][ T6649] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.753523][ T6649] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.196587][T19978] loop3: detected capacity change from 0 to 512 [ 1628.218007][T19913] chnl_net:caif_netlink_parms(): no params data found [ 1628.264678][T19978] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1628.299538][T19978] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1628.319187][ T6649] bridge_slave_1: left allmulticast mode [ 1628.325268][ T6649] bridge_slave_1: left promiscuous mode [ 1628.350437][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.363805][T19978] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3522: Failed to acquire dquot type 1 [ 1628.377099][T19978] loop3: lost filesystem error report for type 5 error -117 [ 1628.380621][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1628.394448][ C1] EXT4-fs (loop3): last error at time 1770744569: ext4_acquire_dquot:7003 [ 1628.419367][T19978] EXT4-fs (loop3): 1 truncate cleaned up [ 1628.427797][T19978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1628.456311][T19978] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1628.472465][ T6649] bridge_slave_0: left allmulticast mode [ 1628.478172][ T6649] bridge_slave_0: left promiscuous mode [ 1628.500460][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.599071][ T5840] Bluetooth: hci1: command tx timeout [ 1629.342278][T18187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.351968][T19975] loop6: detected capacity change from 0 to 32768 [ 1630.435907][T19975] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1630.633440][ T5840] Bluetooth: hci1: command tx timeout [ 1630.745810][T19975] XFS (loop6): Ending clean mount [ 1630.810149][T20023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1631.012380][T19463] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1631.187923][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.262388][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.309869][ T6649] bond0 (unregistering): Released all slaves [ 1631.353108][ T6649] bond1 (unregistering): Released all slaves [ 1631.455016][T20014] loop8: detected capacity change from 0 to 32768 [ 1631.572263][T20014] (syz.8.3527,20014,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1631.620257][T20014] (syz.8.3527,20014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1631.716752][ T6649] tipc: Left network mode [ 1632.437953][T20014] JBD2: Ignoring recovery information on journal [ 1632.464526][ T6649] IPVS: stopping master sync thread 11943 ... [ 1632.600429][T20014] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1632.715887][ T5840] Bluetooth: hci1: command tx timeout [ 1632.861547][T20014] (syz.8.3527,20014,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1632.897930][T20014] (syz.8.3527,20014,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1632.942927][T19913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.972388][T19913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.979641][T20014] (syz.8.3527,20014,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1632.989325][T19913] bridge_slave_0: entered allmulticast mode [ 1632.997338][T19913] bridge_slave_0: entered promiscuous mode [ 1633.003383][T20014] (syz.8.3527,20014,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1633.008760][T19913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.031180][T19913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.032320][T20014] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 4 [ 1633.044069][T19913] bridge_slave_1: entered allmulticast mode [ 1633.067932][T20014] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1633.069370][T19913] bridge_slave_1: entered promiscuous mode [ 1633.099655][T20050] (syz.8.3527,20050,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1633.134134][T20050] (syz.8.3527,20050,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1633.172168][T20014] (syz.8.3527,20014,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1633.172180][T20050] (syz.8.3527,20050,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1633.228089][T20050] (syz.8.3527,20050,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1633.228186][T20014] (syz.8.3527,20014,1):ocfs2_mknod:318 ERROR: status = -5 [ 1633.273227][T20050] Quota error (device loop8): find_next_id: Can't read quota tree block 4 [ 1633.273230][T20014] (syz.8.3527,20014,1):ocfs2_mknod:506 ERROR: status = -5 [ 1633.340947][T20014] (syz.8.3527,20014,1):ocfs2_create:679 ERROR: status = -5 [ 1633.341018][T20050] (syz.8.3527,20050,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1633.371665][T20058] loop3: detected capacity change from 0 to 512 [ 1633.442234][T20058] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1633.453235][T20058] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1633.465649][T20058] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3535: Failed to acquire dquot type 1 [ 1633.490250][T20058] loop3: lost filesystem error report for type 5 error -117 [ 1633.492012][T20058] EXT4-fs (loop3): 1 truncate cleaned up [ 1633.505160][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1633.505186][ C1] EXT4-fs (loop3): last error at time 1770744574: ext4_acquire_dquot:7003 [ 1633.585517][T19913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.623946][T20058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.646238][T20058] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1633.688667][T19913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.735537][T14374] ocfs2: Unmounting device (7,8) on (node local) [ 1634.016931][T20070] loop1: detected capacity change from 0 to 1024 [ 1634.565009][T19913] team0: Port device team_slave_0 added [ 1634.606277][T18187] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.730364][ T6649] hsr_slave_0: left promiscuous mode [ 1634.743843][T20079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3540'. [ 1634.760925][ T6649] hsr_slave_1: left promiscuous mode [ 1634.771088][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.819469][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.240671][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.340110][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.344789][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1635.369390][ T6649] veth1_macvtap: left promiscuous mode [ 1635.378785][ T6649] veth0_macvtap: left promiscuous mode [ 1635.386944][ T6649] veth1_vlan: left promiscuous mode [ 1635.393053][ T6649] veth0_vlan: left promiscuous mode [ 1635.487204][ T6649] pimreg3 (unregistering): left allmulticast mode [ 1635.965863][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 1636.099283][T20092] loop3: detected capacity change from 0 to 256 [ 1636.110888][T20092] exfat: Deprecated parameter 'utf8' [ 1636.120197][T20092] exfat: Unknown parameter 'k+ÑèÛÔeep@last_dots' [ 1636.175700][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 1637.122037][T20096] 0x000000000001-0x000000000004 : "" [ 1637.228471][T20096] ftl_cs: FTL header corrupt! [ 1637.267798][T18154] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805a940000 (7)(syz2) start [ 1637.292538][T19913] team0: Port device team_slave_1 added [ 1637.469416][T18154] infiniband: Removed from hash: ib_dev=ffff88805a940000 (0)(syz2) ndev=ffff888031e26000 (4)(lo) [ 1637.602383][T15849] lo speed is unknown, defaulting to 1000 [ 1637.622926][T15849] infiniband syz2: ib_query_port failed (-19) [ 1637.658289][T18154] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805a940000 (0)(syz2) end [ 1637.699024][T19913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.728753][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.807149][T19913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.979826][T19913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.007189][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.110800][T19913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.222808][T20113] loop8: detected capacity change from 0 to 512 [ 1638.323217][T20101] loop3: detected capacity change from 0 to 32768 [ 1638.368814][T20113] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1638.386339][T20113] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1638.398480][T20101] (syz.3.3545,20101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1638.412222][T20113] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.3549: Failed to acquire dquot type 1 [ 1638.429036][T20113] loop8: lost filesystem error report for type 5 error -117 [ 1638.429994][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1638.444061][ C1] EXT4-fs (loop8): last error at time 1770744579: ext4_acquire_dquot:7003 [ 1638.478950][T20113] EXT4-fs (loop8): 1 truncate cleaned up [ 1638.486888][T20113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1638.504943][T20113] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1638.526786][T20101] (syz.3.3545,20101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1638.684354][T20101] JBD2: Ignoring recovery information on journal [ 1639.835044][T19913] hsr_slave_0: entered promiscuous mode [ 1640.414590][T20116] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 1640.422065][T19913] hsr_slave_1: entered promiscuous mode [ 1640.435074][T20101] JBD2: journal reset failed [ 1640.435093][T20101] (syz.3.3545,20101,0):ocfs2_journal_load:1160 ERROR: Failed to load journal! [ 1640.435121][T20101] (syz.3.3545,20101,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 1640.477425][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1640.582560][T19913] debugfs: 'hsr0' already exists in 'hsr' [ 1640.600773][T19913] Cannot create hsr debugfs directory [ 1641.800786][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3555'. [ 1642.289874][T20160] loop6: detected capacity change from 0 to 512 [ 1642.521255][T20163] loop1: detected capacity change from 0 to 32768 [ 1642.554670][T20160] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1642.582393][T20163] (syz.1.3561,20163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1642.596211][T20163] (syz.1.3561,20163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1642.610501][T20160] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1642.658484][T20163] JBD2: Ignoring recovery information on journal [ 1642.711223][T20160] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.3560: Failed to acquire dquot type 1 [ 1642.764224][T20163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1642.793874][T20160] loop6: lost filesystem error report for type 5 error -117 [ 1642.809991][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1642.823827][ C0] EXT4-fs (loop6): last error at time 1770744584: ext4_acquire_dquot:7003 [ 1642.841696][T20163] (syz.1.3561,20163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1642.855164][T20163] (syz.1.3561,20163,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1642.867421][T20163] (syz.1.3561,20163,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1642.875994][T20163] (syz.1.3561,20163,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1642.883654][T20163] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 4 [ 1642.892682][T20163] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1642.902106][T20163] (syz.1.3561,20163,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1642.910116][T20163] (syz.1.3561,20163,1):ocfs2_mknod:318 ERROR: status = -5 [ 1642.917253][T20163] (syz.1.3561,20163,1):ocfs2_mknod:506 ERROR: status = -5 [ 1642.924556][T20163] (syz.1.3561,20163,1):ocfs2_create:679 ERROR: status = -5 [ 1642.949083][T20170] (syz.1.3561,20170,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1642.962738][T20170] (syz.1.3561,20170,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1642.963574][T20160] EXT4-fs (loop6): 1 truncate cleaned up [ 1642.983020][T20170] (syz.1.3561,20170,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1642.993065][T20170] (syz.1.3561,20170,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1643.023188][T20160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.039064][T20170] Quota error (device loop1): find_next_id: Can't read quota tree block 4 [ 1643.057598][T20160] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1643.075741][T20170] (syz.1.3561,20170,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1643.739688][T20166] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 1643.819394][T19463] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.064784][T17726] ocfs2: Unmounting device (7,1) on (node local) [ 1644.171644][T19913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1644.339500][T19913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1644.406038][T19913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1644.494343][T19913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1645.694743][T19913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.793826][T20211] Illegal XDP return value 4294967274 on prog (id 142) dev N/A, expect packet loss! [ 1646.603933][T19913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.664932][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.672227][T18167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.797458][T20218] loop3: detected capacity change from 0 to 256 [ 1646.955480][T20218] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 1647.052758][T18160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.060469][T18160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.303835][T20230] loop3: detected capacity change from 0 to 32768 [ 1648.315447][ T5835] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1648.343246][T20230] (syz.3.3573,20230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1648.358323][T20230] (syz.3.3573,20230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1648.395625][T20230] JBD2: Ignoring recovery information on journal [ 1648.439313][T20230] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1648.487434][T20230] (syz.3.3573,20230,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1648.504476][T20230] (syz.3.3573,20230,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1648.516723][T20230] (syz.3.3573,20230,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1648.525283][T20230] (syz.3.3573,20230,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1648.533054][T20230] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 4 [ 1648.542113][T20230] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 1648.551641][T20230] (syz.3.3573,20230,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1648.559530][T20230] (syz.3.3573,20230,1):ocfs2_mknod:318 ERROR: status = -5 [ 1648.566714][T20230] (syz.3.3573,20230,1):ocfs2_mknod:506 ERROR: status = -5 [ 1648.573860][T20230] (syz.3.3573,20230,1):ocfs2_create:679 ERROR: status = -5 [ 1648.601184][ T5835] usb 9-1: Using ep0 maxpacket: 8 [ 1648.613583][T20235] (syz.3.3573,20235,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1648.636945][ T5835] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.681315][T20235] (syz.3.3573,20235,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1648.700118][ T5835] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1648.724827][T20235] (syz.3.3573,20235,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1648.751352][ T5835] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1648.776699][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.813712][T20235] (syz.3.3573,20235,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1648.821600][T20235] Quota error (device loop3): find_next_id: Can't read quota tree block 4 [ 1648.822362][ T5835] usb 9-1: Product: syz [ 1648.853550][T20235] (syz.3.3573,20235,1):ocfs2_get_next_id:921 ERROR: status = -5 [ 1648.880223][ T5835] usb 9-1: Manufacturer: syz [ 1648.917891][ T5835] usb 9-1: SerialNumber: syz [ 1648.936433][ T5835] usb 9-1: config 0 descriptor?? [ 1649.176719][T18187] ocfs2: Unmounting device (7,3) on (node local) [ 1649.260598][T20246] io-wq is not configured for unbound workers [ 1649.459252][T19913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.629190][ T5835] usb 9-1: USB disconnect, device number 45 [ 1652.003838][T19913] veth0_vlan: entered promiscuous mode [ 1652.048160][T19913] veth1_vlan: entered promiscuous mode [ 1652.338028][T19913] veth0_macvtap: entered promiscuous mode [ 1652.390473][T19913] veth1_macvtap: entered promiscuous mode [ 1652.542479][T20286] loop8: detected capacity change from 0 to 32768 [ 1652.576250][T20286] (syz.8.3583,20286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1652.590153][T20286] (syz.8.3583,20286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1652.650332][T20286] JBD2: Ignoring recovery information on journal [ 1652.725877][T19913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.740855][T20286] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1653.506503][T20286] (syz.8.3583,20286,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1653.519636][T20286] (syz.8.3583,20286,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1653.531892][T20286] (syz.8.3583,20286,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1653.540469][T20286] (syz.8.3583,20286,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1653.548013][T20286] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 4 [ 1653.557040][T20286] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1653.566586][T20286] (syz.8.3583,20286,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1653.574575][T20286] (syz.8.3583,20286,0):ocfs2_mknod:318 ERROR: status = -5 [ 1653.581744][T20286] (syz.8.3583,20286,0):ocfs2_mknod:506 ERROR: status = -5 [ 1653.588874][T20286] (syz.8.3583,20286,0):ocfs2_create:679 ERROR: status = -5 [ 1653.654863][T20294] (syz.8.3583,20294,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1653.680858][T19913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.694978][T20295] loop6: detected capacity change from 0 to 8 [ 1653.702410][T20294] (syz.8.3583,20294,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1653.723255][T20294] (syz.8.3583,20294,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1653.731913][T20294] (syz.8.3583,20294,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1653.739647][T20294] Quota error (device loop8): find_next_id: Can't read quota tree block 4 [ 1653.755265][T20294] (syz.8.3583,20294,1):ocfs2_get_next_id:921 ERROR: status = -5 [ 1653.809479][ T616] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.820766][T20295] SQUASHFS error: xz decompression failed, data probably corrupt [ 1653.828558][T20295] SQUASHFS error: Failed to read block 0x108: -5 [ 1653.835857][ T616] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.040119][T20295] SQUASHFS error: Unable to read metadata cache entry [106] [ 1654.044858][ T616] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.060169][T20295] SQUASHFS error: Unable to read inode 0x11f [ 1654.090099][ T616] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.014418][T14374] ocfs2: Unmounting device (7,8) on (node local) [ 1655.300119][T18657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.341065][T18657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.590112][ T616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.612058][ T616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1656.623795][T20318] loop8: detected capacity change from 0 to 128 [ 1656.670692][T20318] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1656.725180][T20318] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1657.081986][T20328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1657.857821][T20332] loop6: detected capacity change from 0 to 512 [ 1657.894919][T18158] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1657.951265][T20332] ext4: Unknown parameter 'subj_user' [ 1658.217610][T20336] loop8: detected capacity change from 0 to 2048 [ 1658.267957][T20336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1658.350714][T15849] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1659.130062][T15849] usb 7-1: Using ep0 maxpacket: 16 [ 1659.137838][T15849] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1659.179334][T15849] usb 7-1: config 1 has an invalid interface number: 9 but max is 0 [ 1659.218377][T15849] usb 7-1: config 1 has no interface number 0 [ 1659.240086][T15849] usb 7-1: config 1 interface 9 altsetting 69 bulk endpoint 0x4 has invalid maxpacket 8 [ 1659.249890][T15849] usb 7-1: config 1 interface 9 has no altsetting 0 [ 1660.412192][T20348] loop8: detected capacity change from 0 to 8 [ 1660.440118][T15849] usb 7-1: New USB device found, idVendor=0711, idProduct=5200, bcdDevice=13.fc [ 1660.492763][T15849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.505089][T20348] SQUASHFS error: xz decompression failed, data probably corrupt [ 1660.525762][T20348] SQUASHFS error: Failed to read block 0x108: -5 [ 1660.532333][T15849] usb 7-1: Product: syz [ 1660.549278][T15849] usb 7-1: Manufacturer: syz [ 1660.557942][T20348] SQUASHFS error: Unable to read metadata cache entry [106] [ 1660.565341][T15849] usb 7-1: SerialNumber: syz [ 1660.578816][T20332] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1660.606683][T20348] SQUASHFS error: Unable to read inode 0x11f [ 1660.822966][T15849] sisusb 7-1:1.9: Invalid USB2VGA device [ 1660.858166][T15849] sisusb 7-1:1.9: probe with driver sisusb failed with error -22 [ 1660.914958][T15849] usb 7-1: USB disconnect, device number 55 [ 1662.332474][T20372] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3611'. [ 1663.201269][T15849] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1663.464083][T15849] usb 2-1: Using ep0 maxpacket: 8 [ 1663.484411][T15849] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1663.528904][T15849] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1663.555383][T15849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.577571][T15849] usb 2-1: Product: syz [ 1663.589224][T15849] usb 2-1: Manufacturer: syz [ 1663.600765][T15849] usb 2-1: SerialNumber: syz [ 1663.618575][T15849] usb 2-1: config 0 descriptor?? [ 1665.770421][ T5835] usb 2-1: USB disconnect, device number 85 [ 1668.388591][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3623'. [ 1668.635806][T20417] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1668.797304][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.804991][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.097705][T20429] loop7: detected capacity change from 0 to 128 [ 1670.111235][T20429] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1670.176899][T20429] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1670.953574][T18160] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1671.250966][T20449] loop8: detected capacity change from 0 to 512 [ 1671.258334][T20449] ext4: Unknown parameter 'subj_user' [ 1671.550164][ T5835] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1671.941593][ T5835] usb 9-1: Using ep0 maxpacket: 16 [ 1672.034562][ T5835] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1672.062385][ T5835] usb 9-1: config 1 has an invalid interface number: 9 but max is 0 [ 1672.090044][ T5835] usb 9-1: config 1 has no interface number 0 [ 1672.097274][ T5835] usb 9-1: config 1 interface 9 altsetting 69 bulk endpoint 0x4 has invalid maxpacket 8 [ 1672.127789][ T5835] usb 9-1: config 1 interface 9 has no altsetting 0 [ 1672.139204][ T5835] usb 9-1: New USB device found, idVendor=0711, idProduct=5200, bcdDevice=13.fc [ 1672.167023][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.175306][T20456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3637'. [ 1672.187894][ T5835] usb 9-1: Product: syz [ 1672.231577][ T5835] usb 9-1: Manufacturer: syz [ 1672.255065][ T5835] usb 9-1: SerialNumber: syz [ 1672.297677][T20449] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1672.424476][T20461] kAFS: No cell specified [ 1672.533406][ T5835] sisusb 9-1:1.9: Invalid USB2VGA device [ 1672.562369][ T5835] sisusb 9-1:1.9: probe with driver sisusb failed with error -22 [ 1672.586875][ T5835] usb 9-1: USB disconnect, device number 46 [ 1674.616542][T20486] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3648'. [ 1675.954266][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1677.014211][T20520] netlink: 'syz.1.3659': attribute type 39 has an invalid length. [ 1678.536418][T20538] random: crng reseeded on system resumption [ 1679.454033][T20544] loop8: detected capacity change from 0 to 128 [ 1680.481671][T20544] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1680.540120][T20544] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1681.991961][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3677'. [ 1682.380681][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3680'. [ 1686.690402][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3693'. [ 1688.610260][ T5835] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1688.910818][ T5835] usb 9-1: Using ep0 maxpacket: 8 [ 1689.078983][ T5835] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1689.112191][ T5835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1689.153349][ T5835] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1689.170316][T20644] loop7: detected capacity change from 0 to 128 [ 1689.177631][ T5835] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1689.192417][T20644] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1689.204988][ T5835] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1689.214910][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.237560][T20644] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1689.491444][ T5835] usb 9-1: GET_CAPABILITIES returned 0 [ 1689.521401][ T5835] usbtmc 9-1:16.0: can't read capabilities [ 1689.764629][ T5835] usb 9-1: USB disconnect, device number 47 [ 1693.995668][T20691] netlink: 'syz.7.3714': attribute type 39 has an invalid length. [ 1696.664297][T20711] loop8: detected capacity change from 0 to 2048 [ 1696.711001][T20711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1696.835552][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1701.603955][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 1701.763686][T20765] loop7: detected capacity change from 0 to 32768 [ 1701.802979][T20765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3733 (20765) [ 1701.844970][T20765] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1701.855137][T20765] BTRFS info (device loop7): using sha256 checksum algorithm [ 1702.325504][T20765] BTRFS info (device loop7): enabling ssd optimizations [ 1702.332865][T20765] BTRFS info (device loop7): turning on async discard [ 1702.340899][T20765] BTRFS info (device loop7): enabling free space tree [ 1704.427677][ T29] audit: type=1800 audit(1770744644.880:2489): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3733" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 1706.191804][T19913] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1706.329133][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3743'. [ 1708.384736][T20846] loop7: detected capacity change from 0 to 2048 [ 1708.506854][T20846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1713.201893][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1713.300554][T20863] loop8: detected capacity change from 0 to 32768 [ 1715.775252][ T29] audit: type=1326 audit(1770744657.070:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1716.275206][ T29] audit: type=1326 audit(1770744657.070:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1716.365797][ T29] audit: type=1326 audit(1770744657.070:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1716.564239][ T29] audit: type=1326 audit(1770744657.070:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1717.181919][ T29] audit: type=1326 audit(1770744657.070:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1717.230060][ T29] audit: type=1326 audit(1770744657.070:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1717.383057][ T29] audit: type=1326 audit(1770744657.070:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1718.024800][ T29] audit: type=1326 audit(1770744657.070:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1718.121938][ T29] audit: type=1326 audit(1770744657.070:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1718.145250][ T29] audit: type=1326 audit(1770744657.070:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20902 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542eb9bf79 code=0x7fc00000 [ 1721.183127][T20934] loop7: detected capacity change from 0 to 32768 [ 1721.355145][T20934] (syz.7.3776,20934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1721.382581][T20934] (syz.7.3776,20934,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1721.728513][T20934] JBD2: Ignoring recovery information on journal [ 1722.113078][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1722.113121][ T29] audit: type=1326 audit(1770744663.390:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1722.434501][ T29] audit: type=1326 audit(1770744663.390:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1722.571807][ T29] audit: type=1326 audit(1770744663.390:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.302125][T20934] JBD2: journal reset failed [ 1723.334688][ T29] audit: type=1326 audit(1770744663.390:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.338324][T20934] (syz.7.3776,20934,0):ocfs2_journal_load:1160 ERROR: Failed to load journal! [ 1723.382688][ T29] audit: type=1326 audit(1770744663.400:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.442649][T20934] (syz.7.3776,20934,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 1723.455659][ T29] audit: type=1326 audit(1770744663.400:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.618327][ T29] audit: type=1326 audit(1770744663.400:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.655685][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3790'. [ 1723.685905][ T29] audit: type=1326 audit(1770744663.400:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.760079][ T29] audit: type=1326 audit(1770744663.400:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1723.844029][ T29] audit: type=1326 audit(1770744663.400:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20952 comm="syz.1.3784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca94f9bf79 code=0x7fc00000 [ 1724.912139][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3796'. [ 1726.559515][T20988] loop7: detected capacity change from 0 to 32768 [ 1726.591328][T20988] (syz.7.3797,20988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1726.639827][T20988] (syz.7.3797,20988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1726.702994][T20988] JBD2: Ignoring recovery information on journal [ 1726.848445][T20988] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1727.012689][T20988] (syz.7.3797,20988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1727.041170][T20988] (syz.7.3797,20988,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1727.125297][T20988] (syz.7.3797,20988,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1727.150139][T20988] (syz.7.3797,20988,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1727.176689][T20988] __quota_error: 56 callbacks suppressed [ 1727.176710][T20988] Quota error (device loop7): find_tree_dqentry: Can't read quota tree block 4 [ 1727.239545][T20988] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1727.250108][T20988] (syz.7.3797,20988,1):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 1727.277453][T20988] (syz.7.3797,20988,1):ocfs2_mknod:318 ERROR: status = -5 [ 1727.290445][T21012] (syz.7.3797,21012,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 1727.290476][T20988] (syz.7.3797,20988,1):ocfs2_mknod:506 ERROR: status = -5 [ 1727.290506][T20988] (syz.7.3797,20988,1):ocfs2_create:679 ERROR: status = -5 [ 1727.377573][T21012] (syz.7.3797,21012,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 1727.445602][T21012] (syz.7.3797,21012,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1727.496843][T21012] (syz.7.3797,21012,0):ocfs2_quota_read:201 ERROR: status = -5 [ 1727.531850][T21012] Quota error (device loop7): find_next_id: Can't read quota tree block 4 [ 1727.541067][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1727.569023][T21012] (syz.7.3797,21012,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 1727.765016][T19913] ocfs2: Unmounting device (7,7) on (node local) [ 1727.993269][T21030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1728.700185][ T3412] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1728.767966][T21028] loop8: detected capacity change from 0 to 32768 [ 1728.792030][T21028] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3811 (21028) [ 1728.859582][T21028] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1728.874479][T21028] BTRFS info (device loop8): using sha256 checksum algorithm [ 1728.882067][ T3412] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1728.920693][ T3412] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1728.949500][ T3412] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1728.996528][ T3412] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1729.025558][ T3412] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1729.048428][ T3412] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.153085][ T3412] usb 8-1: config 0 descriptor?? [ 1729.229864][T21028] BTRFS info (device loop8): enabling ssd optimizations [ 1729.233740][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3820'. [ 1729.266213][T21028] BTRFS info (device loop8): turning on async discard [ 1729.276628][T21028] BTRFS info (device loop8): enabling free space tree [ 1729.625558][ T3412] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1730.281448][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.287862][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.550420][T21077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3825'. [ 1730.732790][T15849] usb 8-1: USB disconnect, device number 73 [ 1731.358967][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3831'. [ 1732.675092][T14374] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1733.648991][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3842'. [ 1733.820404][T15849] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1733.983308][T15849] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1734.337254][T15849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1734.360268][T15849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1734.372727][T15849] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1734.386133][T15849] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1734.399010][T15849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.423618][T15849] usb 9-1: config 0 descriptor?? [ 1734.864988][T15849] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1735.908647][ T3412] usb 9-1: USB disconnect, device number 48 [ 1741.367500][ T5835] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1741.902487][ T5835] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1742.716693][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1742.763054][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1742.777537][ T5835] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1742.793008][ T5835] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1742.803269][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.903773][ T5835] usb 9-1: config 0 descriptor?? [ 1743.935104][ T5835] usb 9-1: can't set config #0, error -71 [ 1743.995785][ T5835] usb 9-1: USB disconnect, device number 49 [ 1747.750006][T14380] Bluetooth: hci1: command 0x0406 tx timeout [ 1749.635305][T21258] loop8: detected capacity change from 0 to 47 [ 1749.873688][T21258] MINIX-fs: bad superblock [ 1754.599554][T21294] loop7: detected capacity change from 0 to 256 [ 1754.828935][T21294] exfat: Deprecated parameter 'utf8' [ 1754.943202][T21294] exfat: Unknown parameter 'k+ÑèÛÔeep@last_dots' [ 1756.155592][T21314] loop7: detected capacity change from 0 to 512 [ 1756.210096][T21314] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1756.224146][T21314] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1756.275136][T21314] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.3901: bad orphan inode 131083 [ 1756.408690][T21314] loop7: lost filesystem error report for type 5 error -117 [ 1756.416238][T21314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1757.205567][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1759.838386][T21341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1761.724327][T21355] loop8: detected capacity change from 0 to 256 [ 1761.754005][T21355] exfat: Deprecated parameter 'utf8' [ 1761.837940][T21355] exfat: Unknown parameter 'k+ÑèÛÔeep@last_dots' [ 1763.567599][T21370] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1763.612544][T21373] loop8: detected capacity change from 0 to 16 [ 1763.734386][T21373] erofs (device loop8): mounted with root inode @ nid 36. [ 1763.872178][T21373] syz.8.3916: attempt to access beyond end of device [ 1763.872178][T21373] loop8: rw=8388608, sector=1936876908, nr_sectors = 1 limit=16 [ 1763.958459][T21373] syz.8.3916: attempt to access beyond end of device [ 1763.958459][T21373] loop8: rw=8388608, sector=3955228672, nr_sectors = 1 limit=16 [ 1764.497532][T21380] syz.8.3916: attempt to access beyond end of device [ 1764.497532][T21380] loop8: rw=8388608, sector=1936876908, nr_sectors = 1 limit=16 [ 1764.758842][T21380] syz.8.3916: attempt to access beyond end of device [ 1764.758842][T21380] loop8: rw=8388608, sector=3955228672, nr_sectors = 1 limit=16 [ 1764.776531][T21384] loop7: detected capacity change from 0 to 512 [ 1764.840889][T21384] EXT4-fs: Ignoring removed bh option [ 1764.928659][T21384] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1764.963276][T21384] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1766.080141][T21384] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 1766.343685][T21384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1766.376198][T21384] System zones: 0-2, 18-18, 34-35 [ 1766.949267][T21384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1767.472400][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.677950][ T29] audit: type=1326 audit(1770744709.010:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1767.746000][ T29] audit: type=1326 audit(1770744709.050:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1767.948592][ T29] audit: type=1326 audit(1770744709.050:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1767.972546][ T29] audit: type=1326 audit(1770744709.050:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1768.185949][ T29] audit: type=1326 audit(1770744709.050:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x0 [ 1768.208271][ T29] audit: type=1326 audit(1770744709.060:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1768.992498][ T29] audit: type=1326 audit(1770744709.060:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1769.015540][ T29] audit: type=1326 audit(1770744709.060:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1769.233799][ T29] audit: type=1326 audit(1770744709.110:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1769.290118][ T29] audit: type=1326 audit(1770744709.110:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21419 comm="syz.7.3931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9126b9bf79 code=0x7ffc0000 [ 1771.234146][ T24] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1771.683196][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1771.706019][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1772.055286][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1772.066043][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1772.094207][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1772.145701][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.557641][ T24] usb 8-1: config 0 descriptor?? [ 1773.763740][ T24] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1775.120933][ T5835] usb 8-1: USB disconnect, device number 74 [ 1775.708322][T21493] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3953'. [ 1777.425174][T21506] loop8: detected capacity change from 0 to 512 [ 1777.475583][T21506] EXT4-fs: Ignoring removed bh option [ 1777.527044][T21506] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1777.564328][T21506] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 1777.725284][T21510] loop7: detected capacity change from 0 to 1024 [ 1777.746726][T21506] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1778.082161][T21506] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1778.248997][T21506] System zones: 0-2, 18-18, 34-35 [ 1778.300903][T21506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1778.888034][T21523] hfsplus: xattr search failed [ 1779.117335][ T81] hfsplus: b-tree write err: -5, ino 4 [ 1779.681600][T21520] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 1779.885507][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1782.604095][T21561] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3969'. [ 1783.101395][T21570] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3974'. [ 1783.141051][ T24] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1783.190498][T21573] overlayfs: missing 'lowerdir' [ 1783.332229][ T24] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 1783.358117][ T24] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1783.380816][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1783.919488][T21575] random: crng reseeded on system resumption [ 1784.038425][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1784.057257][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1784.088049][ T24] usb 9-1: Product: syz [ 1784.092494][ T24] usb 9-1: Manufacturer: syz [ 1784.296458][ T24] usb 9-1: SerialNumber: syz [ 1784.312087][ T24] usb 9-1: config 0 descriptor?? [ 1784.324710][ T24] usb 9-1: selecting invalid altsetting 0 [ 1784.465590][T21585] netlink: 'syz.1.3978': attribute type 2 has an invalid length. [ 1785.996047][ T24] usb 9-1: USB disconnect, device number 50 [ 1786.084830][T21599] fuse: Bad value for 'fd' [ 1786.411516][T21603] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3983'. [ 1788.371380][T21615] overlayfs: missing 'lowerdir' [ 1788.453750][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3988'. [ 1788.515531][T21624] loop7: detected capacity change from 0 to 512 [ 1788.612947][T21626] CIFS mount error: No usable UNC path provided in device string! [ 1788.612947][T21626] [ 1788.623190][T21626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1789.144837][T21624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1789.260247][T21624] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1791.668819][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.688295][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.694901][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.213720][T21659] Cannot find add_set index 0 as target [ 1793.361598][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4002'. [ 1796.958611][T21695] loop8: detected capacity change from 0 to 2048 [ 1797.083800][T21702] Cannot find add_set index 0 as target [ 1797.163223][T21695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1799.062297][T21719] netlink: 'syz.3.4016': attribute type 39 has an invalid length. [ 1806.093107][T21776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4035'. [ 1809.718055][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1810.461550][T15849] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1810.865877][T15849] usb 9-1: Using ep0 maxpacket: 8 [ 1810.888711][T15849] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1810.898191][T15849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.906527][T15849] usb 9-1: Product: syz [ 1810.911286][T15849] usb 9-1: Manufacturer: syz [ 1810.915950][T15849] usb 9-1: SerialNumber: syz [ 1810.925038][T15849] usb 9-1: config 0 descriptor?? [ 1811.737553][T21819] loop7: detected capacity change from 0 to 128 [ 1811.762570][T21819] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1811.812693][T15849] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1811.858776][T21823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1813.448800][ T5835] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1813.510850][T21843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'. [ 1813.600200][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 1813.615539][ T5835] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.627466][ T5835] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1813.639458][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.354136][T15849] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1814.392599][T15849] usb 9-1: USB disconnect, device number 51 [ 1816.847611][ T5835] usb 8-1: USB disconnect, device number 75 [ 1817.641450][T21883] cgroup: Unknown subsys name 'cpuset' [ 1818.477319][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1818.574663][T21895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4071'. [ 1820.502484][T21912] loop8: detected capacity change from 0 to 512 [ 1820.575225][T21912] __quota_error: 61 callbacks suppressed [ 1820.575249][T21912] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1820.651816][T21912] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1820.710232][T21912] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.4076: Failed to acquire dquot type 1 [ 1820.734413][T21912] loop8: lost filesystem error report for type 5 error -117 [ 1820.735991][T21912] EXT4-fs (loop8): 1 truncate cleaned up [ 1820.751495][T21912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1820.766063][T21912] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1821.696778][T15849] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1821.718370][T21915] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 1821.780364][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.902466][T15849] usb 8-1: Using ep0 maxpacket: 8 [ 1821.912364][T21927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1821.924563][T15849] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.953881][T15849] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1821.991733][T15849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.907319][ T24] usb 8-1: USB disconnect, device number 76 [ 1823.929961][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4089'. [ 1823.966112][T21962] loop7: detected capacity change from 0 to 512 [ 1824.080309][T21962] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1824.220177][T21962] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1824.264518][T21962] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.4092: Failed to acquire dquot type 1 [ 1824.402430][T21962] loop7: lost filesystem error report for type 5 error -117 [ 1824.409364][T21962] EXT4-fs (loop7): 1 truncate cleaned up [ 1824.416819][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1824.416836][ C1] EXT4-fs (loop7): last error at time 1770744765: ext4_acquire_dquot:7003 [ 1824.456662][T21962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.486758][T21962] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.983928][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1827.114932][T21976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4096'. [ 1831.432571][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4109'. [ 1833.669616][T22059] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4120'. [ 1833.707246][T22059] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4120'. [ 1835.071733][T22068] loop7: detected capacity change from 0 to 512 [ 1835.082774][T22057] loop8: detected capacity change from 0 to 32768 [ 1835.114335][T22068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1835.132881][T22068] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1836.305102][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.520551][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 1839.262547][T22111] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4137'. [ 1840.184935][T22124] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1841.718891][T22140] sctp: [Deprecated]: syz.3.4145 (pid 22140) Use of int in max_burst socket option. [ 1841.718891][T22140] Use struct sctp_assoc_value instead [ 1842.083973][T22146] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4146'. [ 1842.859153][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4150'. [ 1845.046004][T22175] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1845.101243][T22175] sctp: [Deprecated]: syz.8.4158 (pid 22175) Use of int in max_burst socket option. [ 1845.101243][T22175] Use struct sctp_assoc_value instead [ 1845.658330][ T24] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1845.810120][ T5835] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1845.860868][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1846.350159][ T5835] usb 9-1: Using ep0 maxpacket: 8 [ 1846.362035][ T5835] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1846.383249][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1846.399933][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.414210][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1846.429961][ T5835] usb 9-1: Product: syz [ 1846.434147][ T5835] usb 9-1: Manufacturer: syz [ 1846.454992][ T24] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1846.464977][ T5835] usb 9-1: SerialNumber: syz [ 1846.480548][ T5835] usb 9-1: config 0 descriptor?? [ 1846.485679][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.555162][ T24] usb 8-1: config 0 descriptor?? [ 1846.870087][ T5835] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1848.107960][T22183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.240802][T22183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.398625][ T24] ft260 0003:0403:6030.001B: unknown main item tag 0x7 [ 1848.654449][ T5835] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1848.716986][ T5835] usb 9-1: USB disconnect, device number 52 [ 1848.747374][ T24] ft260 0003:0403:6030.001B: failed to retrieve chip version [ 1848.784205][ T24] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -5 [ 1849.635399][T22218] sctp: [Deprecated]: syz.6.4172 (pid 22218) Use of int in max_burst socket option. [ 1849.635399][T22218] Use struct sctp_assoc_value instead [ 1849.923510][T22223] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4173'. [ 1850.851866][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4174'. [ 1851.665930][T15849] usb 8-1: USB disconnect, device number 77 [ 1852.077110][T22239] netlink: 'syz.7.4178': attribute type 1 has an invalid length. [ 1852.084921][T22239] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4178'. [ 1852.180137][ T29] audit: type=1326 audit(1770744793.440:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.183852][T22245] tipc: Enabling of bearer rejected, failed to enable media [ 1852.257032][ T29] audit: type=1326 audit(1770744793.450:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.340854][ T29] audit: type=1326 audit(1770744793.450:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.436219][ T29] audit: type=1326 audit(1770744793.450:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.505684][ T29] audit: type=1326 audit(1770744793.450:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.557979][ T29] audit: type=1326 audit(1770744793.450:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.642584][ T29] audit: type=1326 audit(1770744793.450:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.740015][ T3412] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1852.788654][ T29] audit: type=1326 audit(1770744793.450:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.825100][ T29] audit: type=1326 audit(1770744793.450:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.848477][ T29] audit: type=1326 audit(1770744793.450:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22243 comm="syz.6.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f3919bf79 code=0x7ffc0000 [ 1852.890423][ T3412] usb 8-1: Using ep0 maxpacket: 8 [ 1852.932484][ T3412] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1852.960020][ T3412] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.984868][ T3412] usb 8-1: Product: syz [ 1852.998331][ T3412] usb 8-1: Manufacturer: syz [ 1853.010628][ T3412] usb 8-1: SerialNumber: syz [ 1853.048202][ T3412] usb 8-1: config 0 descriptor?? [ 1853.062231][T22260] sctp: [Deprecated]: syz.1.4185 (pid 22260) Use of int in max_burst socket option. [ 1853.062231][T22260] Use struct sctp_assoc_value instead [ 1853.119530][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.126387][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.393139][T22263] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4186'. [ 1853.524517][ T3412] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1855.189422][T22278] netlink: 'syz.8.4191': attribute type 1 has an invalid length. [ 1855.197347][T22278] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4191'. [ 1856.133147][ T3412] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1856.171382][ T3412] usb 8-1: USB disconnect, device number 78 [ 1857.302702][T22293] loop7: detected capacity change from 0 to 512 [ 1857.383572][T22293] __quota_error: 13 callbacks suppressed [ 1857.383598][T22293] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1857.536261][T22293] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1857.672451][T22298] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4197'. [ 1857.778514][T22293] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.4196: Failed to acquire dquot type 1 [ 1857.860550][T22293] loop7: lost filesystem error report for type 5 error -117 [ 1857.861779][T22293] EXT4-fs (loop7): 1 truncate cleaned up [ 1857.874983][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1857.875015][ C1] EXT4-fs (loop7): last error at time 1770744799: ext4_acquire_dquot:7003 [ 1857.946643][T22293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1857.990923][T22293] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1859.672503][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1861.084980][T22314] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.468610][T22318] netlink: 'syz.6.4203': attribute type 1 has an invalid length. [ 1861.962058][T22318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1863.029662][T22320] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1863.657710][T22331] sctp: [Deprecated]: syz.1.4206 (pid 22331) Use of int in max_burst socket option. [ 1863.657710][T22331] Use struct sctp_assoc_value instead [ 1863.753616][T22314] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.061602][T22335] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4208'. [ 1864.301394][T22314] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.573479][T22345] netlink: 'syz.1.4211': attribute type 5 has an invalid length. [ 1864.581383][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4211'. [ 1865.204163][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1865.389530][T22314] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.573811][T22352] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.823527][T22352] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.190151][T22352] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.214407][ T81] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.385316][T22352] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.495748][ T616] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.706458][ T616] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.798345][ T616] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.960060][ T616] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.969532][ T616] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.488814][T18160] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.548162][T18160] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1867.689178][T22368] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1867.754480][T22371] sctp: [Deprecated]: syz.8.4217 (pid 22371) Use of int in max_burst socket option. [ 1867.754480][T22371] Use struct sctp_assoc_value instead [ 1868.291164][ T5835] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1868.318013][T22376] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1868.480400][ T5835] usb 8-1: device descriptor read/64, error -71 [ 1868.730081][ T5835] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1868.980189][ T5835] usb 8-1: device descriptor read/64, error -71 [ 1869.206676][ T5835] usb usb8-port1: attempt power cycle [ 1869.294312][T22387] netlink: 'syz.8.4223': attribute type 5 has an invalid length. [ 1869.327534][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4223'. [ 1869.639989][ T5835] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1869.659757][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4224'. [ 1869.691901][ T5835] usb 8-1: device descriptor read/8, error -71 [ 1869.846068][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4225'. [ 1870.053726][ T5835] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1870.082459][ T5835] usb 8-1: device descriptor read/8, error -71 [ 1870.850532][ T5835] usb usb8-port1: unable to enumerate USB device [ 1870.878320][T22404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4228'. [ 1871.272530][T22411] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4231'. [ 1872.068105][T22421] sctp: [Deprecated]: syz.3.4233 (pid 22421) Use of int in max_burst socket option. [ 1872.068105][T22421] Use struct sctp_assoc_value instead [ 1873.032524][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1874.822074][T22453] loop8: detected capacity change from 0 to 32768 [ 1874.831110][T22453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4243 (22453) [ 1874.849672][T22453] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1874.859935][T22453] BTRFS info (device loop8): using sha256 checksum algorithm [ 1874.873189][T22458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1875.013663][T22453] BTRFS info (device loop8): enabling ssd optimizations [ 1875.020806][T22453] BTRFS info (device loop8): turning on async discard [ 1875.027634][T22453] BTRFS info (device loop8): enabling free space tree [ 1875.316010][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 1875.358303][ T29] audit: type=1800 audit(1770744816.680:2716): pid=22479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4243" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 1875.695997][T22483] sctp: [Deprecated]: syz.1.4246 (pid 22483) Use of int in max_burst socket option. [ 1875.695997][T22483] Use struct sctp_assoc_value instead [ 1875.740859][T15849] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1875.939706][T15849] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.986149][T15849] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1876.045614][T15849] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1876.099264][T15849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.135059][T15849] usb 9-1: Product: syz [ 1876.166385][T15849] usb 9-1: Manufacturer: syz [ 1876.936220][T15849] usb 9-1: SerialNumber: syz [ 1877.576571][T22495] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1878.008934][T22500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4250'. [ 1880.395909][T22525] sctp: [Deprecated]: syz.6.4257 (pid 22525) Use of int in max_burst socket option. [ 1880.395909][T22525] Use struct sctp_assoc_value instead [ 1880.529631][ T5835] usb 9-1: USB disconnect, device number 53 [ 1881.889373][T14374] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1883.801380][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4262'. [ 1886.054783][T22570] mkiss: ax0: crc mode is auto. [ 1887.347410][T22576] sctp: [Deprecated]: syz.8.4268 (pid 22576) Use of int in max_burst socket option. [ 1887.347410][T22576] Use struct sctp_assoc_value instead [ 1891.070029][ T24] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1891.243204][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1891.259923][ T24] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1891.284467][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1891.369238][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.400502][ T24] usb 9-1: Product: syz [ 1891.418153][ T24] usb 9-1: Manufacturer: syz [ 1891.433103][ T24] usb 9-1: SerialNumber: syz [ 1893.096316][T20642] usb 9-1: USB disconnect, device number 54 [ 1894.783227][T22628] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1894.814493][T22628] sctp: [Deprecated]: syz.7.4282 (pid 22628) Use of int in max_burst socket option. [ 1894.814493][T22628] Use struct sctp_assoc_value instead [ 1897.423799][T20642] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1898.099987][T20642] usb 8-1: Using ep0 maxpacket: 32 [ 1898.173224][T20642] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1898.319952][T20642] usb 8-1: config 0 has no interface number 0 [ 1898.329951][T20642] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1898.357198][T20642] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1898.372511][T20642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.122845][T20642] usb 8-1: Product: syz [ 1899.127077][T20642] usb 8-1: Manufacturer: syz [ 1899.131847][T20642] usb 8-1: SerialNumber: syz [ 1899.151465][T20642] usb 8-1: config 0 descriptor?? [ 1899.186187][T22641] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1899.310057][T20642] usb 8-1: can't set config #0, error -71 [ 1899.366113][T20642] usb 8-1: USB disconnect, device number 83 [ 1899.508513][T22653] loop7: detected capacity change from 0 to 256 [ 1899.531273][T22653] exfat: Deprecated parameter 'utf8' [ 1899.536680][T22653] exfat: Unknown parameter 'k+ÑèÛÔeep@last_dots' [ 1899.955055][T22658] loop8: detected capacity change from 0 to 512 [ 1899.982437][T22658] EXT4-fs: Ignoring removed bh option [ 1900.018131][T22658] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1900.036468][T22658] EXT4-fs (loop8): 1 truncate cleaned up [ 1900.046881][T22658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1900.437631][ T29] audit: type=1800 audit(1770744841.770:2717): pid=22664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4290" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1905.042437][ T3412] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1905.260008][ T3412] usb 8-1: Using ep0 maxpacket: 32 [ 1905.286199][ T3412] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 1905.333158][ T3412] usb 8-1: config 0 has no interface number 0 [ 1905.365897][ T3412] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1905.405087][ T3412] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1905.430091][ T3412] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.450432][ T3412] usb 8-1: Product: syz [ 1905.454626][ T3412] usb 8-1: Manufacturer: syz [ 1905.475233][ T3412] usb 8-1: SerialNumber: syz [ 1905.512089][ T3412] usb 8-1: config 0 descriptor?? [ 1905.517885][T22690] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1905.635739][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1905.792774][T22690] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1905.844135][T22702] loop8: detected capacity change from 0 to 256 [ 1905.991028][T22702] exfat: Deprecated parameter 'utf8' [ 1906.019973][T22702] exfat: Unknown parameter 'k+ÑèÛÔeep@last_dots' [ 1906.655041][ T3412] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1906.750040][ T3412] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1906.766368][ T3412] asix 8-1:0.188: probe with driver asix failed with error -61 [ 1907.589699][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'. [ 1908.136356][ T3412] usb 8-1: USB disconnect, device number 84 [ 1909.892369][T22740] loop8: detected capacity change from 0 to 512 [ 1909.961892][T22740] EXT4-fs: Ignoring removed bh option [ 1910.193598][T22740] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1910.320676][T22740] EXT4-fs (loop8): 1 truncate cleaned up [ 1910.415483][T22740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1910.826933][ T29] audit: type=1800 audit(1770744852.160:2718): pid=22754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4312" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1912.082697][T22763] tipc: Enabling of bearer rejected, failed to enable media [ 1912.673299][T22774] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4321'. [ 1912.947289][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.558329][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.565238][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.953492][ T3412] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1916.948787][ T3412] usb 9-1: device descriptor read/64, error -71 [ 1917.379981][ T3412] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1917.519960][ T3412] usb 9-1: device descriptor read/64, error -71 [ 1918.280136][ T3412] usb usb9-port1: attempt power cycle [ 1918.627588][T22816] tipc: Enabling of bearer rejected, failed to enable media [ 1918.650003][ T3412] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1918.690706][ T3412] usb 9-1: device descriptor read/8, error -71 [ 1918.970161][T22819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1919.879632][T22834] mkiss: ax0: crc mode is auto. [ 1924.977532][T22851] loop7: detected capacity change from 0 to 256 [ 1925.006122][T22851] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1925.724034][T22859] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4345'. [ 1926.189971][T12235] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1926.278706][T22863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1926.330322][T12235] usb 8-1: device descriptor read/64, error -71 [ 1926.423545][T22865] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.503254][T22865] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.568284][T22865] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.590214][T12235] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1926.664457][T22865] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1926.773259][ T6822] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.783311][T12235] usb 8-1: device descriptor read/64, error -71 [ 1926.791381][ T6822] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.816518][ T6822] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.840957][ T6822] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1926.901472][T12235] usb usb8-port1: attempt power cycle [ 1927.870749][T12235] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1927.902492][T12235] usb 8-1: device descriptor read/8, error -71 [ 1928.028093][T22873] loop8: detected capacity change from 0 to 512 [ 1928.051651][T22873] EXT4-fs: Ignoring removed bh option [ 1928.076948][T22873] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1928.157731][T22873] EXT4-fs (loop8): 1 truncate cleaned up [ 1928.160332][T12235] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1928.172067][T22873] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1928.200958][T12235] usb 8-1: device descriptor read/8, error -71 [ 1928.317291][T12235] usb usb8-port1: unable to enumerate USB device [ 1929.115609][ T29] audit: type=1800 audit(1770744870.450:2719): pid=22887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4351" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1930.166639][T22893] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4356'. [ 1930.467108][T22895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4358'. [ 1931.234133][T22907] sctp: [Deprecated]: syz.6.4362 (pid 22907) Use of int in max_burst socket option. [ 1931.234133][T22907] Use struct sctp_assoc_value instead [ 1931.428957][T22909] sctp: [Deprecated]: syz.1.4352 (pid 22909) Use of int in max_burst socket option. [ 1931.428957][T22909] Use struct sctp_assoc_value instead [ 1932.543887][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1934.213723][T22935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1934.349101][T22942] sctp: [Deprecated]: syz.1.4373 (pid 22942) Use of int in max_burst socket option. [ 1934.349101][T22942] Use struct sctp_assoc_value instead [ 1934.503300][T20642] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1934.534098][T22945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4372'. [ 1934.904432][T20642] usb 8-1: Using ep0 maxpacket: 32 [ 1934.940305][T20642] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1934.971988][T20642] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1934.997363][T22949] sctp: [Deprecated]: syz.3.4374 (pid 22949) Use of int in max_burst socket option. [ 1934.997363][T22949] Use struct sctp_assoc_value instead [ 1935.014471][T20642] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1935.041108][T20642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.190273][T20642] usb 8-1: config 0 descriptor?? [ 1935.635215][T22936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.646008][T22936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1935.671308][T20642] ft260 0003:0403:6030.001C: unknown main item tag 0x7 [ 1935.934221][T20642] ft260 0003:0403:6030.001C: failed to retrieve chip version [ 1935.949018][T20642] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -32 [ 1937.910202][T22972] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1938.022291][T15849] usb 8-1: USB disconnect, device number 89 [ 1938.175286][T22979] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4383'. [ 1938.652609][T22981] loop8: detected capacity change from 0 to 32768 [ 1938.673040][T22981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4384 (22981) [ 1938.729216][T22983] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1938.742264][T22983] sctp: [Deprecated]: syz.7.4385 (pid 22983) Use of int in max_burst socket option. [ 1938.742264][T22983] Use struct sctp_assoc_value instead [ 1938.760271][T22981] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1938.770762][T22981] BTRFS info (device loop8): using sha256 checksum algorithm [ 1938.901919][T22981] BTRFS info (device loop8): enabling ssd optimizations [ 1938.908916][T22981] BTRFS info (device loop8): turning on async discard [ 1938.915837][T22981] BTRFS info (device loop8): enabling free space tree [ 1939.075767][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4386'. [ 1939.122358][T23002] netlink: 'syz.6.4386': attribute type 18 has an invalid length. [ 1939.180979][T23002] netlink: 'syz.6.4386': attribute type 18 has an invalid length. [ 1939.210106][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'. [ 1939.254754][ T29] audit: type=1800 audit(1770744880.580:2720): pid=23005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4384" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 1939.931361][T23009] loop7: detected capacity change from 0 to 40427 [ 1939.949955][T23009] F2FS-fs (loop7): invalid crc value [ 1940.055899][T23009] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1940.071617][T23009] F2FS-fs (loop7): Start checkpoint disabled! [ 1940.099558][T23009] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1940.107554][T23009] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1940.137462][T23009] syz.7.4387: attempt to access beyond end of device [ 1940.137462][T23009] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1940.457715][T18174] kworker/u8:19: attempt to access beyond end of device [ 1940.457715][T18174] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1940.516864][T18174] CPU: 0 UID: 0 PID: 18174 Comm: kworker/u8:19 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.516903][T18174] Tainted: [L]=SOFTLOCKUP [ 1940.516922][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1940.516937][T18174] Workqueue: writeback wb_workfn (flush-7:7) [ 1940.516973][T18174] Call Trace: [ 1940.516982][T18174] [ 1940.516992][T18174] dump_stack_lvl+0xe8/0x150 [ 1940.517025][T18174] f2fs_handle_critical_error+0x37c/0x540 [ 1940.517063][T18174] f2fs_write_end_io+0xcdb/0xff0 [ 1940.517116][T18174] __submit_merged_bio+0x256/0x700 [ 1940.517153][T18174] __submit_merged_write_cond+0x3c3/0x4e0 [ 1940.517191][T18174] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1940.517246][T18174] f2fs_write_data_pages+0x2975/0x35e0 [ 1940.517277][T18174] ? unwind_next_frame+0xa5/0x23c0 [ 1940.517307][T18174] ? lock_release+0x4b/0x3d0 [ 1940.517373][T18174] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1940.517421][T18174] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1940.517484][T18174] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1940.517559][T18174] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1940.517588][T18174] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1940.517622][T18174] do_writepages+0x32e/0x550 [ 1940.517661][T18174] ? reacquire_held_locks+0x104/0x190 [ 1940.517692][T18174] ? writeback_sb_inodes+0x43d/0x19a0 [ 1940.517726][T18174] __writeback_single_inode+0x133/0x11a0 [ 1940.517756][T18174] ? do_raw_spin_unlock+0xf5/0x210 [ 1940.517784][T18174] writeback_sb_inodes+0x944/0x19a0 [ 1940.517818][T18174] ? ret_from_fork_asm+0x1a/0x30 [ 1940.517870][T18174] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1940.517895][T18174] ? do_raw_spin_lock+0x12b/0x2f0 [ 1940.517972][T18174] ? rcu_is_watching+0x15/0xb0 [ 1940.518021][T18174] wb_writeback+0x456/0xb70 [ 1940.518053][T18174] ? queue_io+0x291/0x4a0 [ 1940.518090][T18174] ? __pfx_wb_writeback+0x10/0x10 [ 1940.518114][T18174] ? do_raw_spin_lock+0x12b/0x2f0 [ 1940.518156][T18174] wb_workfn+0x414/0xf50 [ 1940.518180][T18174] ? look_up_lock_class+0x57/0x110 [ 1940.518224][T18174] ? __pfx_wb_workfn+0x10/0x10 [ 1940.518251][T18174] ? do_raw_spin_lock+0x12b/0x2f0 [ 1940.518277][T18174] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1940.518326][T18174] ? process_one_work+0x87c/0x1650 [ 1940.518353][T18174] process_one_work+0x949/0x1650 [ 1940.518405][T18174] ? __pfx_process_one_work+0x10/0x10 [ 1940.518429][T18174] ? do_raw_spin_lock+0x12b/0x2f0 [ 1940.518471][T18174] worker_thread+0xb46/0x1140 [ 1940.518511][T18174] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1940.518555][T18174] kthread+0x388/0x470 [ 1940.518578][T18174] ? __pfx_worker_thread+0x10/0x10 [ 1940.518604][T18174] ? __pfx_kthread+0x10/0x10 [ 1940.518628][T18174] ret_from_fork+0x51e/0xb90 [ 1940.518661][T18174] ? __pfx_ret_from_fork+0x10/0x10 [ 1940.518687][T18174] ? __switch_to+0xc7d/0x1450 [ 1940.518717][T18174] ? __pfx_kthread+0x10/0x10 [ 1940.518741][T18174] ret_from_fork_asm+0x1a/0x30 [ 1940.518792][T18174] [ 1940.518801][T18174] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1942.918335][T23038] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4395'. [ 1943.094277][T14374] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1943.211635][T23045] sctp: [Deprecated]: syz.6.4397 (pid 23045) Use of int in max_burst socket option. [ 1943.211635][T23045] Use struct sctp_assoc_value instead [ 1946.819436][T23082] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1947.112797][T23087] sctp: [Deprecated]: syz.6.4409 (pid 23087) Use of int in max_burst socket option. [ 1947.112797][T23087] Use struct sctp_assoc_value instead [ 1950.249798][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4419'. [ 1952.877717][T23125] mkiss: ax0: crc mode is auto. [ 1957.831659][T23166] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4432'. [ 1957.847566][T23159] sctp: [Deprecated]: syz.6.4431 (pid 23159) Use of int in max_burst socket option. [ 1957.847566][T23159] Use struct sctp_assoc_value instead [ 1958.768245][T23176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1959.934090][T23192] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1960.339416][T23200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4442'. [ 1960.351051][T23200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4442'. [ 1960.360529][T23200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4442'. [ 1960.371599][T23200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4442'. [ 1962.424250][T23212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4446'. [ 1970.048203][T23263] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1970.079239][T23263] sctp: [Deprecated]: syz.7.4463 (pid 23263) Use of int in max_burst socket option. [ 1970.079239][T23263] Use struct sctp_assoc_value instead [ 1973.434491][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 1973.449443][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 1973.458736][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 1973.467915][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 1973.923598][T23304] sctp: [Deprecated]: syz.3.4475 (pid 23304) Use of int in max_burst socket option. [ 1973.923598][T23304] Use struct sctp_assoc_value instead [ 1973.960883][T23303] syzkaller0: entered promiscuous mode [ 1974.118647][T23303] syzkaller0: entered allmulticast mode [ 1976.018860][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.038184][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.058687][T23321] SET target dimension over the limit! [ 1978.747864][T23340] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1981.288640][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1981.298733][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1981.308036][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1981.317188][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1982.670406][T23364] Cannot find add_set index 0 as target [ 1985.177435][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1985.190648][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1985.199957][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1986.738212][T23391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'. [ 1986.926620][T23400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4503'. [ 1986.959060][T23400] netlink: 'syz.3.4503': attribute type 7 has an invalid length. [ 1987.009318][T23400] netlink: 'syz.3.4503': attribute type 8 has an invalid length. [ 1987.055361][T23400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4503'. [ 1988.724522][T15849] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1989.054213][T23412] mkiss: ax0: crc mode is auto. [ 1991.809983][T15849] usb 9-1: device descriptor read/all, error -71 [ 1992.851800][T23430] loop8: detected capacity change from 0 to 40427 [ 1993.457285][T23430] F2FS-fs (loop8): invalid crc value [ 1993.517148][T23430] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1993.528984][T23430] F2FS-fs (loop8): Start checkpoint disabled! [ 1993.546714][T23430] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 1993.554519][T23430] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1993.576537][T23429] syz.8.4511: attempt to access beyond end of device [ 1993.576537][T23429] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1993.646468][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4515'. [ 1993.664298][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4515'. [ 1993.673939][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4515'. [ 1993.683093][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4515'. [ 1993.805515][T18767] kworker/u8:23: attempt to access beyond end of device [ 1993.805515][T18767] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1993.860017][T18767] CPU: 1 UID: 0 PID: 18767 Comm: kworker/u8:23 Tainted: G L syzkaller #0 PREEMPT(full) [ 1993.860053][T18767] Tainted: [L]=SOFTLOCKUP [ 1993.860061][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1993.860075][T18767] Workqueue: writeback wb_workfn (flush-7:8) [ 1993.860106][T18767] Call Trace: [ 1993.860115][T18767] [ 1993.860125][T18767] dump_stack_lvl+0xe8/0x150 [ 1993.860157][T18767] f2fs_handle_critical_error+0x37c/0x540 [ 1993.860193][T18767] f2fs_write_end_io+0xcdb/0xff0 [ 1993.860244][T18767] __submit_merged_bio+0x256/0x700 [ 1993.860277][T18767] __submit_merged_write_cond+0x3c3/0x4e0 [ 1993.860310][T18767] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1993.860357][T18767] f2fs_write_data_pages+0x2975/0x35e0 [ 1993.860470][T18767] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1993.860510][T18767] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1993.860569][T18767] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1993.860635][T18767] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 1993.860660][T18767] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1993.860688][T18767] do_writepages+0x32e/0x550 [ 1993.860723][T18767] ? reacquire_held_locks+0x104/0x190 [ 1993.860754][T18767] ? writeback_sb_inodes+0x43d/0x19a0 [ 1993.860786][T18767] __writeback_single_inode+0x133/0x11a0 [ 1993.860825][T18767] ? do_raw_spin_unlock+0xf5/0x210 [ 1993.860852][T18767] writeback_sb_inodes+0x944/0x19a0 [ 1993.860883][T18767] ? ret_from_fork_asm+0x1a/0x30 [ 1993.860920][T18767] ? __lock_acquire+0x6b5/0x2cf0 [ 1993.860952][T18767] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1993.860975][T18767] ? do_raw_spin_lock+0x12b/0x2f0 [ 1993.861036][T18767] ? rcu_is_watching+0x15/0xb0 [ 1993.861074][T18767] wb_writeback+0x456/0xb70 [ 1993.861104][T18767] ? queue_io+0x291/0x4a0 [ 1993.861137][T18767] ? __pfx_wb_writeback+0x10/0x10 [ 1993.861158][T18767] ? do_raw_spin_lock+0x12b/0x2f0 [ 1993.861196][T18767] wb_workfn+0x414/0xf50 [ 1993.861218][T18767] ? look_up_lock_class+0x57/0x110 [ 1993.861258][T18767] ? __pfx_wb_workfn+0x10/0x10 [ 1993.861283][T18767] ? do_raw_spin_lock+0x12b/0x2f0 [ 1993.861305][T18767] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1993.861352][T18767] ? process_one_work+0x87c/0x1650 [ 1993.861378][T18767] process_one_work+0x949/0x1650 [ 1993.861428][T18767] ? __pfx_process_one_work+0x10/0x10 [ 1993.861451][T18767] ? do_raw_spin_lock+0x12b/0x2f0 [ 1993.861490][T18767] worker_thread+0xb46/0x1140 [ 1993.861545][T18767] kthread+0x388/0x470 [ 1993.861567][T18767] ? __pfx_worker_thread+0x10/0x10 [ 1993.861592][T18767] ? __pfx_kthread+0x10/0x10 [ 1993.861615][T18767] ret_from_fork+0x51e/0xb90 [ 1993.861646][T18767] ? __pfx_ret_from_fork+0x10/0x10 [ 1993.861672][T18767] ? __switch_to+0xc7d/0x1450 [ 1993.861699][T18767] ? __pfx_kthread+0x10/0x10 [ 1993.861720][T18767] ret_from_fork_asm+0x1a/0x30 [ 1993.861767][T18767] [ 1993.861777][T18767] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1993.868461][T23441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1997.680181][T15849] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1998.110000][T15849] usb 8-1: Using ep0 maxpacket: 32 [ 1998.118607][T23474] mkiss: ax0: crc mode is auto. [ 1998.282927][T15849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1998.459260][T15849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1998.558195][T15849] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1998.626531][T15849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.150940][T15849] usb 8-1: config 0 descriptor?? [ 2001.034624][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 2001.119159][T15849] usbhid 8-1:0.0: can't add hid device: -71 [ 2001.125249][T15849] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2001.149626][T15849] usb 8-1: USB disconnect, device number 90 [ 2004.543083][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4541'. [ 2004.553724][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4541'. [ 2004.562949][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4541'. [ 2004.572074][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4541'. [ 2005.223230][ T5835] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2005.529970][ T5835] usb 8-1: Using ep0 maxpacket: 32 [ 2005.537180][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2005.549733][ T5835] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2005.573985][ T5835] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2005.597044][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.715043][ T5835] usb 8-1: config 0 descriptor?? [ 2006.848856][T23551] sctp: [Deprecated]: syz.6.4555 (pid 23551) Use of int in max_burst socket option. [ 2006.848856][T23551] Use struct sctp_assoc_value instead [ 2007.478129][T23527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.517676][T23527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.558847][ T5835] ft260 0003:0403:6030.001D: unknown main item tag 0x7 [ 2007.776618][ T5835] ft260 0003:0403:6030.001D: failed to retrieve chip version [ 2007.784631][ T5835] ft260 0003:0403:6030.001D: probe with driver ft260 failed with error -5 [ 2009.704211][T15849] usb 8-1: USB disconnect, device number 91 [ 2009.798980][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4562'. [ 2009.834529][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4562'. [ 2009.850231][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4562'. [ 2009.866147][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4562'. [ 2009.993468][T23586] Bluetooth: MGMT ver 1.23 [ 2010.151516][T23592] sctp: [Deprecated]: syz.6.4566 (pid 23592) Use of int in max_burst socket option. [ 2010.151516][T23592] Use struct sctp_assoc_value instead [ 2010.254466][T23596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4569'. [ 2011.399918][T15849] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2011.921014][T15849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.932263][T15849] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2011.941704][T15849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.953806][T15849] usb 8-1: config 0 descriptor?? [ 2012.250178][T15849] usbhid 8-1:0.0: can't add hid device: -71 [ 2012.259420][T15849] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2012.369273][T23616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4574'. [ 2013.013940][T15849] usb 8-1: USB disconnect, device number 92 [ 2013.465168][T23613] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.567795][T23613] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.635733][T23613] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.896688][T23613] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.025494][T18160] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.062138][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 2014.161689][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 2014.171016][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 2014.180175][T23629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'. [ 2014.209049][T18160] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.234434][T18160] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.248485][T18160] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.292166][T23634] sctp: [Deprecated]: syz.3.4581 (pid 23634) Use of int in max_burst socket option. [ 2014.292166][T23634] Use struct sctp_assoc_value instead [ 2014.335656][T23638] loop8: detected capacity change from 0 to 512 [ 2014.787413][T23638] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2015.602079][T23638] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2015.665389][T23638] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.4582: Failed to acquire dquot type 1 [ 2016.193212][T23638] loop8: lost filesystem error report for type 5 error -117 [ 2016.199118][T23638] EXT4-fs (loop8): 1 truncate cleaned up [ 2016.206631][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 2016.206657][ C1] EXT4-fs (loop8): last error at time 1770744957: ext4_acquire_dquot:7003 [ 2016.252356][T23638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2016.443378][T23638] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2018.097450][T23649] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 2018.763022][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2019.750633][T23676] __nla_validate_parse: 1 callbacks suppressed [ 2019.750655][T23676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4590'. [ 2019.919909][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4590'. [ 2019.958846][T23673] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.071027][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4590'. [ 2020.145230][T23682] sctp: [Deprecated]: syz.3.4594 (pid 23682) Use of int in max_burst socket option. [ 2020.145230][T23682] Use struct sctp_assoc_value instead [ 2020.178150][T23673] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.194654][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4590'. [ 2020.248880][T23673] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.298117][T23673] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2020.398150][T18160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.407454][T18160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.415918][T18160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.429578][T18160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2020.555546][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 2020.566824][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 2020.576095][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 2020.585581][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4595'. [ 2022.409220][T23708] loop8: detected capacity change from 0 to 512 [ 2022.606963][T23708] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2022.698536][T23708] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 2022.740101][T23708] EXT4-fs error (device loop8): ext4_acquire_dquot:7003: comm syz.8.4600: Failed to acquire dquot type 1 [ 2023.754846][T23708] loop8: lost filesystem error report for type 5 error -117 [ 2023.756820][T23708] EXT4-fs (loop8): 1 truncate cleaned up [ 2023.764258][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 2023.764284][ C0] EXT4-fs (loop8): last error at time 1770744965: ext4_acquire_dquot:7003 [ 2023.787508][T23717] loop7: detected capacity change from 0 to 40427 [ 2023.832726][T23708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2023.920790][T23708] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2023.948576][T23721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.017742][T23717] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2024.027808][T23717] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2024.095888][T23721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.280848][T23721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2024.737309][T14374] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2024.885528][T23721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2025.043896][T18160] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.062115][T18160] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.070468][T18160] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.087979][T18160] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2027.537510][T23756] infiniband: Added to hash: ib_dev=ffff88807bec0000 (0)() ndev=ffff888037118000 (17)(vlan1) [ 2027.558042][T23756] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2027.979647][T23763] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2028.101663][T23765] sctp: [Deprecated]: syz.7.4606 (pid 23765) Use of int in max_burst socket option. [ 2028.101663][T23765] Use struct sctp_assoc_value instead [ 2030.175320][T23787] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4620'. [ 2032.375669][T23793] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4621'. [ 2033.660294][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'. [ 2033.671081][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'. [ 2033.680409][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'. [ 2033.689510][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'. [ 2035.063477][T23821] loop7: detected capacity change from 0 to 40427 [ 2035.143110][T23821] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2035.188711][T23821] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 2035.606788][T23828] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.4631'. [ 2037.515932][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.522452][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.701702][T23846] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2037.722066][T23846] sctp: [Deprecated]: syz.7.4632 (pid 23846) Use of int in max_burst socket option. [ 2037.722066][T23846] Use struct sctp_assoc_value instead [ 2039.057756][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4640'. [ 2039.129635][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4640'. [ 2039.149287][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4640'. [ 2039.163235][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4640'. [ 2041.495546][T23880] 9pnet_virtio: no channels available for device syz [ 2044.529232][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4649'. [ 2044.552690][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4649'. [ 2044.562985][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4649'. [ 2044.572342][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4649'. [ 2044.630014][T23896] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2044.823341][T23901] sctp: [Deprecated]: syz.8.4651 (pid 23901) Use of int in max_burst socket option. [ 2044.823341][T23901] Use struct sctp_assoc_value instead [ 2050.352422][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4661'. [ 2050.363431][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4661'. [ 2050.375100][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4661'. [ 2050.397370][T23927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4660'. [ 2050.411374][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4661'. [ 2053.644937][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4668'. [ 2053.655696][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4668'. [ 2053.664950][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4668'. [ 2053.674380][T23958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4668'. [ 2054.060392][T23962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4670'. [ 2058.611717][ T5840] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 2059.735482][T24004] __nla_validate_parse: 3 callbacks suppressed [ 2059.735504][T24004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4681'. [ 2060.035023][T24018] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4684'. [ 2062.140472][T24024] 9pnet_virtio: no channels available for device syz [ 2065.732102][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 2065.742853][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 2065.752279][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 2065.761713][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4693'. [ 2066.911705][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4696'. [ 2066.975379][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4696'. [ 2067.030584][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4696'. [ 2067.108210][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4696'. [ 2068.685688][T24065] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4698'. [ 2071.219378][T24087] 9pnet_virtio: no channels available for device syz [ 2076.810956][T24111] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4711'. [ 2077.929940][T24125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4717'. [ 2079.060339][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4710'. [ 2079.072475][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4710'. [ 2079.081712][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4710'. [ 2079.090947][T24140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4710'. [ 2080.433208][T24150] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4721'. [ 2083.648660][T24170] openvswitch: netlink: IP tunnel dst address not specified [ 2086.639577][T24189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4734'. [ 2087.638207][T24216] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4742'. [ 2092.514645][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 2093.356365][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 2093.429065][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 2093.506106][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'. [ 2093.806808][T24255] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4755'. [ 2093.909586][T24260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4756'. [ 2094.248844][T24261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4758'. [ 2095.864921][T24275] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.4761'. [ 2098.355280][T24296] team0 (unregistering): Port device team_slave_0 removed [ 2098.387659][T24296] team0 (unregistering): Port device team_slave_1 removed [ 2098.613923][T24300] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4769'. [ 2098.873820][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.880538][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.954762][T24304] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4772'. [ 2103.354359][T24349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4786'. [ 2107.366263][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4796'. [ 2107.388685][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4796'. [ 2107.397915][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4796'. [ 2107.407103][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4796'. [ 2113.998665][T24415] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4805'. [ 2124.419108][T24472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 2130.137030][T24507] netlink: 'syz.8.4823': attribute type 1 has an invalid length. [ 2130.159886][T24507] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4823'. [ 2131.331551][T24514] sctp: [Deprecated]: syz.6.4837 (pid 24514) Use of int in max_burst socket option. [ 2131.331551][T24514] Use struct sctp_assoc_value instead [ 2136.180483][T24552] sctp: [Deprecated]: syz.1.4848 (pid 24552) Use of int in max_burst socket option. [ 2136.180483][T24552] Use struct sctp_assoc_value instead [ 2137.899674][T24550] mkiss: ax0: crc mode is auto. [ 2138.906301][T24566] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.590326][T24566] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.689870][T24566] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.799669][T24566] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2141.098104][T18768] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.117954][T18768] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.134595][T18768] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.146125][T18768] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2142.158840][T24589] netlink: 'syz.8.4854': attribute type 1 has an invalid length. [ 2142.203777][T24589] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4854'. [ 2147.001607][T24619] sctp: [Deprecated]: syz.7.4862 (pid 24619) Use of int in max_burst socket option. [ 2147.001607][T24619] Use struct sctp_assoc_value instead [ 2147.017945][T24618] sctp: [Deprecated]: syz.1.4863 (pid 24618) Use of int in max_burst socket option. [ 2147.017945][T24618] Use struct sctp_assoc_value instead [ 2147.102202][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4864'. [ 2147.113182][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4864'. [ 2147.122426][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4864'. [ 2147.131533][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4864'. [ 2158.091859][T24688] netlink: 'syz.7.4881': attribute type 1 has an invalid length. [ 2158.099649][T24688] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4881'. [ 2160.318642][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.325119][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.654660][T24699] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.753801][T24699] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2160.934218][T24699] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.447222][T24699] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.464703][T18160] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.499854][T18160] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.727305][T18167] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.901946][T18160] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2168.651234][T24761] mkiss: ax0: crc mode is auto. [ 2168.907969][T24766] netlink: 'syz.8.4902': attribute type 1 has an invalid length. [ 2168.915781][T24766] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4902'. [ 2173.352948][T24782] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.547129][T24782] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.620827][T24782] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.828235][T24782] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2176.455998][T18174] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2176.513746][T18174] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2176.537631][T18174] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2176.546045][T18174] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2177.032023][T24808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4910'. [ 2180.623249][T24842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4923'. [ 2181.619861][T23718] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 2181.771374][T23718] usb 9-1: device descriptor read/64, error -71 [ 2182.063872][T23718] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 2182.319805][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4930'. [ 2182.479887][T23718] usb 9-1: device descriptor read/64, error -71 [ 2182.662917][T23718] usb usb9-port1: attempt power cycle [ 2183.153995][T23718] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 2183.183849][T23718] usb 9-1: device descriptor read/8, error -71 [ 2184.156312][T24880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4935'. [ 2185.099812][T23718] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 2185.442631][T23718] usb 9-1: device not accepting address 64, error -71 [ 2185.460534][T23718] usb usb9-port1: unable to enumerate USB device [ 2185.471784][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4938'. [ 2186.188698][T24904] infiniband: Added to hash: ib_dev=ffff888055c94000 (0)() ndev=ffff88804f4e4000 (17)(vlan1) [ 2186.201700][T24904] siw: device registration error -23 [ 2186.207176][T24904] infiniband: Removed from hash: ib_dev=ffff888055c94000 (0)() ndev=ffff88804f4e4000 (17)(vlan1) [ 2189.499674][T24927] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4948'. [ 2191.074789][T24946] netlink: 'syz.7.4953': attribute type 1 has an invalid length. [ 2191.082640][T24946] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4953'. [ 2193.936380][T24966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4959'. [ 2194.741693][T24974] infiniband: Added to hash: ib_dev=ffff88807cd9c000 (0)() ndev=ffff888032d1c000 (17)(vlan1) [ 2194.754768][T24974] siw: device registration error -23 [ 2194.760289][T24974] infiniband: Removed from hash: ib_dev=ffff88807cd9c000 (0)() ndev=ffff888032d1c000 (17)(vlan1) [ 2196.530321][T24978] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4962'. [ 2197.156898][T24989] netlink: 'syz.7.4966': attribute type 1 has an invalid length. [ 2197.164733][T24989] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4966'. [ 2197.384284][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 2197.396302][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 2197.470781][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 2197.480196][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4967'. [ 2197.768541][T24996] infiniband: Added to hash: ib_dev=ffff88807cd98000 (0)() ndev=ffff888076f84000 (17)(vlan1) [ 2197.779162][T24996] siw: device registration error -23 [ 2197.784628][T24996] infiniband: Removed from hash: ib_dev=ffff88807cd98000 (0)() ndev=ffff888076f84000 (17)(vlan1) [ 2199.596364][T25000] loop7: detected capacity change from 0 to 512 [ 2201.371438][T25000] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 2201.408969][T25000] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 2201.582941][T25000] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.4971: Failed to acquire dquot type 1 [ 2202.440830][T25000] loop7: lost filesystem error report for type 5 error -117 [ 2202.449761][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 2202.463669][ C1] EXT4-fs (loop7): last error at time 1770745143: ext4_acquire_dquot:7003 [ 2203.547339][T25000] EXT4-fs (loop7): 1 truncate cleaned up [ 2203.636918][T25000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2203.666715][T25000] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2204.869801][T25012] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 2205.835636][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2206.081157][T25038] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2206.118948][T25038] sctp: [Deprecated]: syz.7.4979 (pid 25038) Use of int in max_burst socket option. [ 2206.118948][T25038] Use struct sctp_assoc_value instead [ 2206.464901][T25043] loop8: detected capacity change from 0 to 40427 [ 2206.480508][T25043] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2206.488353][T25043] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2206.507315][T25043] F2FS-fs (loop8): invalid crc value [ 2206.575721][T25043] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2206.609676][T25043] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2206.616909][T25043] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2207.799820][ T29] audit: type=1800 audit(1770745148.360:2721): pid=25055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4980" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 2209.331762][T14374] syz-executor: attempt to access beyond end of device [ 2209.331762][T14374] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 2209.452974][T14374] CPU: 0 UID: 0 PID: 14374 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 2209.453010][T14374] Tainted: [L]=SOFTLOCKUP [ 2209.453020][T14374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2209.453032][T14374] Call Trace: [ 2209.453042][T14374] [ 2209.453052][T14374] dump_stack_lvl+0xe8/0x150 [ 2209.453087][T14374] f2fs_handle_critical_error+0x37c/0x540 [ 2209.453125][T14374] f2fs_write_end_io+0xcdb/0xff0 [ 2209.453179][T14374] __submit_merged_bio+0x256/0x700 [ 2209.453215][T14374] f2fs_submit_merged_write+0x282/0x390 [ 2209.453251][T14374] ? __pfx_f2fs_submit_merged_write+0x10/0x10 [ 2209.453302][T14374] f2fs_sync_node_pages+0x14bf/0x1680 [ 2209.453357][T14374] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 2209.453467][T14374] f2fs_write_checkpoint+0xea8/0x2680 [ 2209.453534][T14374] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 2209.453622][T14374] kill_f2fs_super+0x314/0x720 [ 2209.453663][T14374] ? __pfx_kill_f2fs_super+0x10/0x10 [ 2209.453711][T14374] ? lockdep_hardirqs_on+0x7a/0x110 [ 2209.453757][T14374] deactivate_locked_super+0xbc/0x130 [ 2209.453792][T14374] cleanup_mnt+0x437/0x4d0 [ 2209.453814][T14374] ? _raw_spin_unlock_irq+0x23/0x50 [ 2209.453844][T14374] task_work_run+0x1d9/0x270 [ 2209.453873][T14374] ? __pfx_task_work_run+0x10/0x10 [ 2209.453910][T14374] exit_to_user_mode_loop+0xed/0x480 [ 2209.453934][T14374] ? rcu_is_watching+0x15/0xb0 [ 2209.453966][T14374] do_syscall_64+0x32d/0xf80 [ 2209.453991][T14374] ? trace_irq_disable+0x3b/0x150 [ 2209.454018][T14374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.454039][T14374] ? clear_bhb_loop+0x40/0x90 [ 2209.454065][T14374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.454085][T14374] RIP: 0033:0x7f2d3c59d1d7 [ 2209.454105][T14374] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 2209.454122][T14374] RSP: 002b:00007ffc35e03048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2209.454146][T14374] RAX: 0000000000000000 RBX: 00007f2d3c631c3b RCX: 00007f2d3c59d1d7 [ 2209.454160][T14374] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc35e03100 [ 2209.454179][T14374] RBP: 00007ffc35e03100 R08: 00007ffc35e04100 R09: 00000000ffffffff [ 2209.454192][T14374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc35e04190 [ 2209.454205][T14374] R13: 00007f2d3c631c3b R14: 000000000021b54d R15: 00007ffc35e041d0 [ 2209.454242][T14374] [ 2209.489859][T14374] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 2210.985642][T25073] loop7: detected capacity change from 0 to 512 [ 2211.014966][T25073] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 2211.180022][T25073] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.4988: corrupted xattr entries [ 2211.459776][T25073] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 2211.469811][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 2211.485400][ C1] EXT4-fs (loop7): initial error at time 1770745152: xattr_find_entry:337: inode 15 [ 2211.494794][ C1] EXT4-fs (loop7): last error at time 1770745152: xattr_find_entry:337: inode 15 [ 2211.519544][T25073] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 2211.573468][T25073] EXT4-fs (loop7): 1 orphan inode deleted [ 2211.656134][T25073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2212.533431][T19913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2212.787182][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4989'. [ 2215.053768][T25109] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2215.120075][T25109] sctp: [Deprecated]: syz.8.4994 (pid 25109) Use of int in max_burst socket option. [ 2215.120075][T25109] Use struct sctp_assoc_value instead [ 2215.668731][T25113] loop8: detected capacity change from 0 to 32768 [ 2215.697113][T25113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4995 (25113) [ 2215.838786][T25113] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2215.848988][T25113] BTRFS info (device loop8): using sha256 checksum algorithm [ 2215.982761][T25113] BTRFS info (device loop8): enabling ssd optimizations [ 2215.989923][T25113] BTRFS info (device loop8): turning on async discard [ 2215.996730][T25113] BTRFS info (device loop8): enabling free space tree [ 2216.344038][T25136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4998'. [ 2216.440375][ T29] audit: type=1800 audit(1770745157.770:2722): pid=25139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4995" name="file2" dev="loop8" ino=261 res=0 errno=0 [ 2216.875290][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5000'. [ 2216.887403][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5000'. [ 2216.897360][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5000'. [ 2216.906518][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5000'. [ 2219.764182][T25162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5006'. [ 2220.444934][T25174] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5009'. [ 2220.955596][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 2220.967838][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 2220.977642][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 2220.986779][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5011'. [ 2221.311400][T14374] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2221.765571][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.772533][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.755799][T25189] openvswitch: netlink: IP tunnel dst address not specified [ 2227.713771][T25220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5023'. [ 2239.520709][T25282] netlink: 'syz.7.5040': attribute type 1 has an invalid length. [ 2239.529075][T25282] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5040'. [ 2241.481452][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5044'. [ 2246.200754][T25331] syzkaller0: entered promiscuous mode [ 2246.224775][T25331] syzkaller0: entered allmulticast mode [ 2247.514500][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5060'. [ 2248.353922][T25351] overlayfs: failed to resolve './file1': -2 [ 2248.920498][T25365] infiniband: Added to hash: ib_dev=ffff888064ee8000 (0)() ndev=ffff888076f84000 (17)(vlan1) [ 2248.931147][T25365] siw: device registration error -23 [ 2248.936548][T25365] infiniband: Removed from hash: ib_dev=ffff888064ee8000 (0)() ndev=ffff888076f84000 (17)(vlan1) [ 2251.227708][T25357] overlayfs: failed to resolve './file1': -2 [ 2251.573848][T25370] loop8: detected capacity change from 0 to 40427 [ 2251.597433][T25370] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2251.605274][T25370] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2251.620096][T25370] F2FS-fs (loop8): invalid crc value [ 2251.712077][T25370] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2251.732903][T25370] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2251.740299][T25370] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2252.743715][ T29] audit: type=1800 audit(1770745193.390:2723): pid=25378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5069" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 2254.080938][T24798] kworker/u8:0: attempt to access beyond end of device [ 2254.080938][T24798] loop8: rw=1, sector=77824, nr_sectors = 4096 limit=40427 [ 2254.220753][T24798] kworker/u8:0: attempt to access beyond end of device [ 2254.220753][T24798] loop8: rw=1, sector=49152, nr_sectors = 4096 limit=40427 [ 2254.413167][T24798] kworker/u8:0: attempt to access beyond end of device [ 2254.413167][T24798] loop8: rw=1, sector=57344, nr_sectors = 7672 limit=40427 [ 2261.188356][T25438] mkiss: ax0: crc mode is auto. [ 2269.477663][T25454] team0 (unregistering): Port device team_slave_0 removed [ 2269.516504][T25454] team0 (unregistering): Port device team_slave_1 removed [ 2270.052560][T25476] overlayfs: failed to resolve './file1': -2 [ 2272.818588][ T5840] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 2272.887505][T25496] infiniband: Added to hash: ib_dev=ffff888037394000 (0)() ndev=ffff888032d1c000 (17)(vlan1) [ 2272.898135][T25496] siw: device registration error -23 [ 2272.903657][T25496] infiniband: Removed from hash: ib_dev=ffff888037394000 (0)() ndev=ffff888032d1c000 (17)(vlan1) [ 2277.520140][T25512] mkiss: ax0: crc mode is auto. [ 2277.785709][T25516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2283.530246][T25550] random: crng reseeded on system resumption [ 2284.140795][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2284.159842][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2290.317179][T25570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2290.330970][T25570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2290.354518][T25570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2290.394895][T25570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2290.420037][T25570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2290.500500][T25574] netlink: 'syz.8.5116': attribute type 1 has an invalid length. [ 2291.965108][T25574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2292.100020][T25580] bond1: (slave bridge3): making interface the new active one [ 2292.109284][T25580] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 2292.549851][ T5840] Bluetooth: hci4: command tx timeout [ 2294.630245][ T5840] Bluetooth: hci4: command tx timeout [ 2296.317990][T18167] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.661479][T18167] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.711845][ T5840] Bluetooth: hci4: command tx timeout [ 2296.747352][T25568] chnl_net:caif_netlink_parms(): no params data found [ 2296.804027][T18167] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.722204][T18167] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.789995][ T5840] Bluetooth: hci4: command tx timeout [ 2298.986214][T25568] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.993741][T25568] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.001630][T25568] bridge_slave_0: entered allmulticast mode [ 2299.011246][T25568] bridge_slave_0: entered promiscuous mode [ 2299.036175][T25568] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.055986][T25568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2299.704781][T25568] bridge_slave_1: entered allmulticast mode [ 2299.722936][T25568] bridge_slave_1: entered promiscuous mode [ 2300.780925][T25568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2300.817350][T25568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2300.948626][T25568] team0: Port device team_slave_0 added [ 2300.962058][T25568] team0: Port device team_slave_1 added [ 2301.037712][T18167] bridge_slave_1: left allmulticast mode [ 2301.044033][T18167] bridge_slave_1: left promiscuous mode [ 2301.053299][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.064501][T18167] bridge_slave_0: left allmulticast mode [ 2301.074313][T18167] bridge_slave_0: left promiscuous mode [ 2301.082832][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.413023][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2301.424989][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2301.444580][T18167] bond0 (unregistering): Released all slaves [ 2301.476984][T25568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2301.485959][T25568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2301.512263][T25568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2301.526217][T25568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2301.534846][T25568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2301.562526][T25568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2301.654844][T25568] hsr_slave_0: entered promiscuous mode [ 2301.666765][T25568] hsr_slave_1: entered promiscuous mode [ 2301.688938][T25568] debugfs: 'hsr0' already exists in 'hsr' [ 2301.694984][T25568] Cannot create hsr debugfs directory [ 2301.865169][T18167] hsr_slave_0: left promiscuous mode [ 2301.874479][T18167] hsr_slave_1: left promiscuous mode [ 2301.887941][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2301.896739][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.905221][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2301.914018][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2301.927272][T18167] veth1_macvtap: left promiscuous mode [ 2301.933014][T18167] veth0_macvtap: left promiscuous mode [ 2301.938665][T18167] veth1_vlan: left promiscuous mode [ 2302.706552][T25568] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2302.740770][T25568] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2302.766706][T25568] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2302.800643][T25568] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2302.991976][T25568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2303.023273][T25568] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.051124][T24798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.058276][T24798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.082849][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.090051][T18167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.426816][T25568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2303.796403][T25568] veth0_vlan: entered promiscuous mode [ 2303.818073][T25568] veth1_vlan: entered promiscuous mode [ 2303.889716][T25568] veth0_macvtap: entered promiscuous mode [ 2303.909469][T25568] veth1_macvtap: entered promiscuous mode [ 2303.944172][T25568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2303.962853][T25568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2303.982417][T24798] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.992931][T24798] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.005849][T24798] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.016709][T24798] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.169877][ T6822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.177768][ T6822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2304.252087][ T6822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.266071][ T6822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2344.635500][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.641888][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.074540][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.081208][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.270063][T25570] Bluetooth: hci4: command 0x0406 tx timeout [ 2467.513813][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.520614][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.956971][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.963519][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.393418][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.399902][ T1296] ieee802154 phy1 wpan1: encryption failed: -22