last executing test programs: 9.956663852s ago: executing program 3 (id=1656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 9.956165892s ago: executing program 2 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, 0x0, &(0x7f0000000000), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close(r0) 8.532749673s ago: executing program 3 (id=1661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="ffffffff0203010300ffff400000000001000005"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x400, 0x4, 0x0, 0xff, "d9000000000000000b00000000000000008000"}) write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000003980)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000005fc0)={0x2020}, 0xfeb4) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r7, 0x89e3, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x27}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x15}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x22080001) syz_io_uring_setup(0x7cf4, 0x0, &(0x7f0000000080), &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000000), 0x10, 0xc8080) close_range(r0, 0xffffffffffffffff, 0x0) 7.876164892s ago: executing program 0 (id=1665): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0x11, 0x2, 0x88) r0 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x27, 0x4, 0x0, 0x0) 7.812842013s ago: executing program 2 (id=1666): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000002b80)=""/4118, 0x1016}, {&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000840)=""/236, 0xec}, {&(0x7f0000000440)=""/210, 0xd2}], 0x5}, 0x80000000}], 0x4, 0x10100, 0x0) 7.720110695s ago: executing program 0 (id=1668): getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) 7.532879817s ago: executing program 2 (id=1670): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 6.662586811s ago: executing program 3 (id=1672): r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x400000bce) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='wlan0\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write(r6, &(0x7f00000002c0)="e1", 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xfd, 0x1, 0x6, 0xfe, 0xbd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x58, 0x0, 0x96}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 5.555738137s ago: executing program 2 (id=1674): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x12}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.148517328s ago: executing program 2 (id=1675): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x2) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x26020480) dup(0xffffffffffffffff) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x4000, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) 3.719939805s ago: executing program 3 (id=1677): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa2b1a616700000081000c000806020189170600000affffffffffffaaaaaaaaaabb60"], 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) 3.523084488s ago: executing program 1 (id=1678): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) write(r0, 0x0, 0x0) 3.34863314s ago: executing program 3 (id=1679): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x1, 0x264ab99327e0dedc) 3.32825626s ago: executing program 4 (id=1680): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0x11, 0x2, 0x88) r0 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x27, 0x4, 0x0, 0x0) 3.065670135s ago: executing program 3 (id=1681): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000373010b000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.943655286s ago: executing program 4 (id=1682): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) 2.943156236s ago: executing program 0 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2808810, &(0x7f0000000280)=ANY=[@ANYRESDEC]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000680)={0x2020}, 0x2020) 1.785836004s ago: executing program 4 (id=1684): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1.785379104s ago: executing program 1 (id=1685): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@code={0x1, 0x67, {"b9960b000048b800100000000000000f23c00f21f835010000000f23f8f3480f2c76ae48b870512caba8d04c780f23d80f21f835000000b00f23f88fa9f812c10f01c5470f78a4ee54000000676564670f01c9460f07"}}], 0x67}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) 1.784651504s ago: executing program 0 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1.714085895s ago: executing program 1 (id=1687): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) 1.265631981s ago: executing program 1 (id=1688): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea608641602f36504001a00381931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb3678a40cb53fc8d8faaafe63e09e8b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)=""/254, 0xfe}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000003980)=""/4059, 0xfdb}, {&(0x7f0000000380)=""/210, 0xd2}, {0x0}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/225, 0xe1}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000000)=""/112, 0x70}], 0xb}, 0x40012100) 652.632631ms ago: executing program 0 (id=1689): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 550.114172ms ago: executing program 4 (id=1690): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_emit_ethernet(0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa2b1a616700000081000c000806020189170600000affffffffffffaaaaaaaaaabb60"], 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) 498.776943ms ago: executing program 1 (id=1691): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x1, 0x264ab99327e0dedc) 407.092014ms ago: executing program 0 (id=1692): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udplite(0x11, 0x2, 0x88) r0 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x27, 0x4, 0x0, 0x0) 344.920395ms ago: executing program 4 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket(0x72, 0x80000, 0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0xc96efc7ec79f8e33}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4084081}, 0x20000090) 344.359365ms ago: executing program 1 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40008c4, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000380)={0x2, 'dvmrp1\x00', {0x3}, 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) chown(0x0, 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x2e}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x22020600) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) 278.514826ms ago: executing program 2 (id=1695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) read(r1, &(0x7f0000000000)=""/60, 0x3c) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x1c, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x8001) syz_init_net_socket$ax25(0x3, 0x2, 0xce) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @null, @bpq0, 0xb49, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 0s ago: executing program 4 (id=1696): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="0300"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000069c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x2, 0xcc, 0x5, 0xd}]}) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65"], 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100037040200"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d0003000000501a87e8578519d3b918806805c2a46eb5e5179d8b1746e51f4b523385b792faf87f0dd1cf447d4372d8552d18dedf36dc295edf417f3a7f64d1001f31ddb9d38c2e5b86dac702c3d7c51414b7cff4f23527653b72c0940838a7f01a"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 652442][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 140.586364][ T5441] loop2: detected capacity change from 0 to 128 [ 140.598408][ T5441] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.613793][ T5441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 140.622549][ T5441] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.631244][ T5446] fuse: Bad value for 'fd' [ 140.713731][ T5448] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.877289][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 140.931997][ T5456] binder: 5455:5456 ioctl c0306201 0 returned -14 [ 141.033906][ T4307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.101388][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 141.228725][ T4307] usb 2-1: Using ep0 maxpacket: 32 [ 141.237761][ T4307] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 141.247791][ T4307] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 141.261443][ T4307] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.271853][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.280211][ T4307] usb 2-1: Product: syz [ 141.285696][ T4307] usb 2-1: Manufacturer: syz [ 141.290298][ T4307] usb 2-1: SerialNumber: syz [ 141.492178][ T4623] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.509946][ T4624] usb 2-1: USB disconnect, device number 4 [ 141.682248][ T4623] usb 1-1: Using ep0 maxpacket: 16 [ 141.692460][ T4623] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.709177][ T4623] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.730889][ T4623] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.740244][ T4623] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 141.753267][ T4623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.774007][ T4623] usb 1-1: config 0 descriptor?? [ 142.448577][ T4623] hid (null): nested delimiters [ 142.505360][ T5481] fuse: Unknown parameter 'group_i00000000000000000000' [ 142.605139][ T5485] binder: 5484:5485 ioctl c0306201 0 returned -14 [ 142.657563][ T4618] usb 1-1: USB disconnect, device number 4 [ 142.817436][ T5489] loop4: detected capacity change from 0 to 128 [ 142.841330][ T5489] EXT4-fs (loop4): Test dummy encryption mode enabled [ 143.015945][ T5489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.027141][ T5489] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.492358][ T126] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.519236][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 143.681703][ T5494] loop2: detected capacity change from 0 to 32768 [ 143.706103][ T5494] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.716313][ T5494] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 143.725043][ T5494] BTRFS info (device loop2): setting nodatacow, compression disabled [ 143.733187][ T5494] BTRFS info (device loop2): max_inline at 0 [ 143.739173][ T5494] BTRFS info (device loop2): enabling disk space caching [ 143.746201][ T5494] BTRFS info (device loop2): turning off barriers [ 143.752860][ T5494] BTRFS info (device loop2): turning on flush-on-commit [ 143.759784][ T5494] BTRFS info (device loop2): doing ref verification [ 143.766397][ T5494] BTRFS info (device loop2): force clearing of disk cache [ 143.773543][ T5494] BTRFS info (device loop2): enabling ssd optimizations [ 143.780475][ T5494] BTRFS info (device loop2): max_inline at 4096 [ 143.786733][ T5494] BTRFS info (device loop2): disk space caching is enabled [ 143.822118][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 143.829028][ T126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.839613][ T126] usb 4-1: config 0 has no interfaces? [ 143.847675][ T126] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 143.893896][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.921599][ T126] usb 4-1: Product: syz [ 143.926548][ T126] usb 4-1: Manufacturer: syz [ 143.931203][ T126] usb 4-1: SerialNumber: syz [ 143.943037][ T126] usb 4-1: config 0 descriptor?? [ 143.982777][ T5494] BTRFS info (device loop2): rebuilding free space tree [ 143.999654][ T5494] BTRFS info (device loop2): disabling free space tree [ 144.007114][ T5494] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.016856][ T5494] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.177583][ T26] audit: type=1800 audit(1750899074.870:8): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.370" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 144.484850][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 144.653813][ T4258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.242160][ T4301] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.304099][ T4300] usb 4-1: USB disconnect, device number 7 [ 146.422859][ T4301] usb 5-1: Using ep0 maxpacket: 32 [ 146.439710][ T4301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 146.480023][ T5546] binder: 5545:5546 ioctl c0306201 0 returned -14 [ 146.510871][ T5548] fuse: Unknown parameter 'group_i00000000000000000000' [ 146.536514][ T4301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 146.573090][ T4301] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 146.583359][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 146.591863][ T4301] usb 5-1: Product: syz [ 146.606401][ T4301] usb 5-1: Manufacturer: syz [ 146.611035][ T4301] usb 5-1: SerialNumber: syz [ 146.749425][ T5555] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.853593][ T4300] usb 5-1: USB disconnect, device number 6 [ 146.962290][ T4301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 147.804051][ T4301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.862143][ T4301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.895742][ T4301] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 147.917992][ T5576] fuse: Unknown parameter '00000000000000000000003' [ 147.929401][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.950772][ T4301] usb 2-1: config 0 descriptor?? [ 148.367459][ T4301] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 148.386010][ T4301] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 148.433163][ T4301] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input5 [ 148.474303][ T4300] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 148.498621][ T4301] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 148.591910][ T4301] usb 2-1: USB disconnect, device number 5 [ 148.702748][ T4300] usb 1-1: Using ep0 maxpacket: 8 [ 148.717758][ T4300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.758454][ T4300] usb 1-1: config 0 has no interfaces? [ 148.805111][ T4300] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 149.792829][ T5593] sched: RT throttling activated [ 149.824798][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.849487][ T4300] usb 1-1: Product: syz [ 149.860924][ T4300] usb 1-1: Manufacturer: syz [ 149.883514][ T5599] fuse: Unknown parameter 'group_id00000000000000000000' [ 149.894878][ T4300] usb 1-1: SerialNumber: syz [ 150.108514][ T5578] loop2: detected capacity change from 0 to 32768 [ 150.122273][ T5591] fido_id[5591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.144238][ T4300] usb 1-1: config 0 descriptor?? [ 150.195669][ T5578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.386 (5578) [ 150.321436][ T5578] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.331397][ T5604] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.355589][ T5578] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 150.389857][ T5578] BTRFS info (device loop2): setting nodatacow, compression disabled [ 150.427029][ T5578] BTRFS info (device loop2): max_inline at 0 [ 150.437230][ T5578] BTRFS info (device loop2): enabling disk space caching [ 150.465927][ T5578] BTRFS info (device loop2): turning off barriers [ 150.483582][ T5578] BTRFS info (device loop2): turning on flush-on-commit [ 150.492032][ T5578] BTRFS info (device loop2): doing ref verification [ 150.500085][ T5578] BTRFS info (device loop2): force clearing of disk cache [ 150.509264][ T5578] BTRFS info (device loop2): enabling ssd optimizations [ 150.517773][ T5578] BTRFS info (device loop2): max_inline at 4096 [ 150.556376][ T5578] BTRFS info (device loop2): disk space caching is enabled [ 150.647657][ T5623] fuse: Unknown parameter '00000000000000000000003' [ 150.682130][ T4301] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.729967][ T5578] BTRFS info (device loop2): rebuilding free space tree [ 150.774042][ T5578] BTRFS info (device loop2): disabling free space tree [ 150.791925][ T5578] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.802849][ T5578] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.872237][ T4301] usb 5-1: Using ep0 maxpacket: 32 [ 150.991737][ T26] audit: type=1800 audit(1750899081.680:9): pid=5578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.386" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 151.191060][ T4301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 151.201642][ T4301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 151.214318][ T4301] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.233691][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.241906][ T4301] usb 5-1: Product: syz [ 151.262128][ T4301] usb 5-1: Manufacturer: syz [ 151.272396][ T4301] usb 5-1: SerialNumber: syz [ 151.401011][ T4258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.487294][ T5640] loop3: detected capacity change from 0 to 128 [ 151.503697][ T5640] EXT4-fs (loop3): Test dummy encryption mode enabled [ 151.726280][ T4301] usb 5-1: USB disconnect, device number 7 [ 152.067637][ T5640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.082614][ T5640] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.209147][ T126] usb 1-1: USB disconnect, device number 5 [ 152.446432][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 153.195871][ T5657] fuse: Unknown parameter 'group_id00000000000000000000' [ 153.442420][ T4345] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.468544][ T5667] fuse: Unknown parameter '00000000000000000000003' [ 153.652404][ T4345] usb 1-1: Using ep0 maxpacket: 16 [ 153.702022][ T4345] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 153.868323][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.009629][ T4345] usb 1-1: Product: syz [ 154.111977][ T4345] usb 1-1: Manufacturer: syz [ 154.132478][ T4345] usb 1-1: SerialNumber: syz [ 154.188954][ T4345] usb 1-1: config 0 descriptor?? [ 154.627274][ T5650] mmap: syz.0.405 (5650) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.447568][ T5650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 155.636114][ T4345] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 155.651253][ T4345] usb 1-1: USB disconnect, device number 6 [ 155.883663][ T5692] loop2: detected capacity change from 0 to 128 [ 156.538777][ T5692] EXT4-fs (loop2): Test dummy encryption mode enabled [ 156.582159][ T4307] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.589830][ T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.600853][ T5692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.609669][ T5692] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.830092][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 156.830253][ T4307] usb 2-1: Using ep0 maxpacket: 8 [ 156.853114][ T4307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.870522][ T4307] usb 2-1: config 0 has no interfaces? [ 156.870770][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 156.883549][ T22] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 156.908626][ T4307] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 156.933059][ T22] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 156.960216][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.006663][ T22] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 157.016455][ T4307] usb 2-1: Product: syz [ 157.020726][ T4307] usb 2-1: Manufacturer: syz [ 157.025531][ T4307] usb 2-1: SerialNumber: syz [ 157.032931][ T22] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 157.055251][ T4307] usb 2-1: config 0 descriptor?? [ 157.060488][ T22] usb 5-1: Product: syz [ 157.067421][ T22] usb 5-1: Manufacturer: syz [ 157.079105][ T22] usb 5-1: SerialNumber: syz [ 157.313472][ T126] usb 5-1: USB disconnect, device number 8 [ 157.399615][ T5700] fuse: Unknown parameter 'group_id00000000000000000000' [ 157.426096][ T5704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'. [ 158.337068][ T7] usb 2-1: USB disconnect, device number 6 [ 159.288821][ T5734] loop0: detected capacity change from 0 to 128 [ 159.320963][ T5734] EXT4-fs (loop0): Test dummy encryption mode enabled [ 159.477375][ T4298] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.696442][ T5734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 159.713794][ T5734] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 159.883543][ T5742] loop1: detected capacity change from 0 to 512 [ 159.997862][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 160.072171][ T4298] usb 4-1: Using ep0 maxpacket: 16 [ 160.083814][ T4298] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 160.094628][ T5742] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.433: invalid indirect mapped block 256 (level 2) [ 160.107916][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.116003][ T4298] usb 4-1: Product: syz [ 160.144225][ T4298] usb 4-1: Manufacturer: syz [ 160.148867][ T4298] usb 4-1: SerialNumber: syz [ 160.184308][ T5742] EXT4-fs (loop1): 2 truncates cleaned up [ 160.197103][ T5742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 160.203117][ T4298] usb 4-1: config 0 descriptor?? [ 160.403963][ T951] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.479252][ T5755] fuse: Bad value for 'user_id' [ 160.602326][ T951] usb 3-1: Using ep0 maxpacket: 32 [ 160.615003][ T951] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 160.785681][ T951] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 160.976949][ T951] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.104484][ T951] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.111171][ T4298] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -71 [ 161.129632][ T4298] usb 4-1: USB disconnect, device number 8 [ 161.148172][ T951] usb 3-1: Product: syz [ 161.170127][ T951] usb 3-1: Manufacturer: syz [ 161.191590][ T951] usb 3-1: SerialNumber: syz [ 161.315481][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 161.427385][ T4306] usb 3-1: USB disconnect, device number 6 [ 161.810558][ T5777] fuse: Unknown parameter 'fd00000000000000000000003' [ 161.949334][ T5783] loop4: detected capacity change from 0 to 128 [ 161.966326][ T5783] EXT4-fs (loop4): Test dummy encryption mode enabled [ 162.115689][ T5783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.126055][ T5783] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.488031][ T4298] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.601239][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 162.682114][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 162.698590][ T4298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.729259][ T4298] usb 4-1: config 0 has no interfaces? [ 162.766025][ T4298] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 162.791816][ T5791] loop2: detected capacity change from 0 to 512 [ 162.933974][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.939937][ T5791] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.451: invalid indirect mapped block 256 (level 2) [ 162.942521][ T4298] usb 4-1: Product: syz [ 162.959636][ T4298] usb 4-1: Manufacturer: syz [ 162.964356][ T4298] usb 4-1: SerialNumber: syz [ 162.971191][ T4298] usb 4-1: config 0 descriptor?? [ 163.006770][ T5791] EXT4-fs (loop2): 2 truncates cleaned up [ 163.013545][ T5791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.112329][ T4301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 163.322271][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 163.342266][ T4301] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 163.425629][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.494956][ T4301] usb 2-1: Product: syz [ 163.540454][ T4301] usb 2-1: Manufacturer: syz [ 163.572400][ T4301] usb 2-1: SerialNumber: syz [ 163.637947][ T4301] usb 2-1: config 0 descriptor?? [ 163.900569][ T5806] fuse: Bad value for 'user_id' [ 164.420135][ T4301] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -71 [ 164.421946][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 164.429365][ T4301] usb 2-1: USB disconnect, device number 7 [ 164.705629][ T126] usb 4-1: USB disconnect, device number 9 [ 164.806523][ T5822] loop2: detected capacity change from 0 to 128 [ 164.857844][ T5822] EXT4-fs (loop2): Test dummy encryption mode enabled [ 165.003009][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.014176][ T5822] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.490602][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 165.872127][ T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 166.812300][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 166.825937][ T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 166.863663][ T126] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.584898][ T126] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.594204][ T126] usb 4-1: Product: syz [ 167.598650][ T126] usb 4-1: Manufacturer: syz [ 167.603615][ T126] usb 4-1: SerialNumber: syz [ 167.626028][ T5826] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.780780][ T5850] loop1: detected capacity change from 0 to 512 [ 167.793332][ T26] audit: type=1326 audit(1750899098.490:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa578e929 code=0x7ffc0000 [ 167.852740][ T26] audit: type=1326 audit(1750899098.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa578e929 code=0x7ffc0000 [ 167.877953][ T951] usb 4-1: USB disconnect, device number 10 [ 167.897854][ T5850] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.470: invalid indirect mapped block 256 (level 2) [ 167.909422][ T26] audit: type=1326 audit(1750899098.510:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2aa578e929 code=0x7ffc0000 [ 167.939057][ T5850] EXT4-fs (loop1): 2 truncates cleaned up [ 167.952509][ T5850] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.961674][ T26] audit: type=1326 audit(1750899098.510:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa578e929 code=0x7ffc0000 [ 167.981334][ T5857] binder_alloc: 5856: pid 5856 spamming oneway? 2 buffers allocated for a total size of 5120 [ 167.996478][ T26] audit: type=1326 audit(1750899098.510:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5848 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa578e929 code=0x7ffc0000 [ 168.003967][ T5857] binder_alloc: 5856: pid 5856 spamming oneway? 3 buffers allocated for a total size of 5128 [ 168.749844][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 168.841099][ T4301] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.969712][ T5869] loop0: detected capacity change from 0 to 128 [ 168.985932][ T5869] EXT4-fs (loop0): Test dummy encryption mode enabled [ 169.561503][ T5869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.571354][ T5869] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.624418][ T4301] usb 5-1: Using ep0 maxpacket: 8 [ 169.643652][ T4301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.836096][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 169.842821][ T4301] usb 5-1: config 0 has no interfaces? [ 169.886167][ T4301] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 169.948461][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.957134][ T4301] usb 5-1: Product: syz [ 169.961652][ T4301] usb 5-1: Manufacturer: syz [ 169.971760][ T4301] usb 5-1: SerialNumber: syz [ 169.999108][ T4301] usb 5-1: config 0 descriptor?? [ 170.897705][ T5893] tmpfs: Unknown parameter 'usrquota' [ 171.337443][ T5898] Bluetooth: MGMT ver 1.22 [ 171.735902][ T7] usb 5-1: USB disconnect, device number 9 [ 171.830148][ T5901] loop4: detected capacity change from 0 to 512 [ 171.916801][ T5901] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.485: invalid indirect mapped block 256 (level 2) [ 172.080805][ T5901] EXT4-fs (loop4): 2 truncates cleaned up [ 172.102331][ T5901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.789202][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 174.018697][ T5939] binder_alloc: 5938: pid 5938 spamming oneway? 2 buffers allocated for a total size of 5120 [ 174.032288][ T5939] binder_alloc: 5938: pid 5938 spamming oneway? 3 buffers allocated for a total size of 5128 [ 174.186991][ T951] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.372158][ T951] usb 4-1: Using ep0 maxpacket: 8 [ 174.380752][ T951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.407543][ T951] usb 4-1: config 0 has no interfaces? [ 174.425971][ T951] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 174.449884][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.463208][ T951] usb 4-1: Product: syz [ 174.467509][ T951] usb 4-1: Manufacturer: syz [ 174.480963][ T951] usb 4-1: SerialNumber: syz [ 174.501012][ T951] usb 4-1: config 0 descriptor?? [ 177.305934][ T7] usb 4-1: USB disconnect, device number 11 [ 178.374139][ T5981] binder: 5979:5981 ioctl 4018620d 0 returned -22 [ 179.842136][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.913994][ T6000] loop0: detected capacity change from 0 to 128 [ 180.275387][ T6000] EXT4-fs (loop0): Test dummy encryption mode enabled [ 180.595859][ T6000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.604943][ T6000] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.723501][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 180.746928][ T126] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 180.830128][ T126] usb 3-1: config 0 has no interface number 0 [ 180.861523][ T126] usb 3-1: config 0 interface 213 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 180.901527][ T126] usb 3-1: config 0 interface 213 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 180.931494][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 181.069853][ T126] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=c5.ad [ 181.079148][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.087711][ T126] usb 3-1: Product: syz [ 181.091960][ T126] usb 3-1: Manufacturer: syz [ 181.097741][ T126] usb 3-1: SerialNumber: syz [ 182.039313][ T6014] loop0: detected capacity change from 0 to 32768 [ 182.050620][ T6014] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.516 (6014) [ 182.541166][ T6014] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.551480][ T6014] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 182.560667][ T6014] BTRFS info (device loop0): setting nodatacow, compression disabled [ 182.568796][ T6014] BTRFS info (device loop0): max_inline at 0 [ 182.574785][ T6014] BTRFS info (device loop0): enabling disk space caching [ 182.581789][ T6014] BTRFS info (device loop0): turning off barriers [ 182.588216][ T6014] BTRFS info (device loop0): turning on flush-on-commit [ 182.595156][ T6014] BTRFS info (device loop0): doing ref verification [ 182.601726][ T6014] BTRFS info (device loop0): force clearing of disk cache [ 182.608879][ T6014] BTRFS info (device loop0): enabling ssd optimizations [ 182.615836][ T6014] BTRFS info (device loop0): max_inline at 4096 [ 182.622114][ T6014] BTRFS info (device loop0): disk space caching is enabled [ 182.650851][ T126] usb 3-1: config 0 descriptor?? [ 182.701466][ T126] usb 3-1: can't set config #0, error -71 [ 182.745374][ T6026] binder: 6025:6026 ioctl 4018620d 0 returned -22 [ 182.782172][ T4298] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 182.800652][ T126] usb 3-1: USB disconnect, device number 7 [ 182.935571][ T6014] BTRFS info (device loop0): rebuilding free space tree [ 182.949412][ T6014] BTRFS info (device loop0): disabling free space tree [ 182.956390][ T6014] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.966096][ T6014] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 183.002272][ T4298] usb 4-1: Using ep0 maxpacket: 8 [ 183.072891][ T26] audit: type=1800 audit(1750899113.760:15): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.516" name="bus" dev="loop0" ino=264 res=0 errno=0 [ 183.222215][ T4261] Bluetooth: hci0: command 0x0401 tx timeout [ 183.222254][ T4263] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 183.263354][ T4298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.329932][ T4298] usb 4-1: config 0 has no interfaces? [ 183.390339][ T4298] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 183.429251][ T4253] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.444880][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.470210][ T4298] usb 4-1: Product: syz [ 183.481191][ T4298] usb 4-1: Manufacturer: syz [ 183.494343][ T4298] usb 4-1: SerialNumber: syz [ 183.523542][ T4298] usb 4-1: config 0 descriptor?? [ 183.957755][ T6062] loop2: detected capacity change from 0 to 128 [ 184.204882][ T6062] EXT4-fs (loop2): Test dummy encryption mode enabled [ 184.637966][ T6062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 184.647396][ T6062] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.735067][ T6072] binder: 6071:6072 ioctl 4018620d 0 returned -22 [ 184.802875][ T6074] netlink: 'syz.4.532': attribute type 12 has an invalid length. [ 184.820954][ T6074] netlink: 'syz.4.532': attribute type 29 has an invalid length. [ 184.872325][ T6074] netlink: 148 bytes leftover after parsing attributes in process `syz.4.532'. [ 185.180594][ T6078] loop1: detected capacity change from 0 to 32768 [ 185.345860][ T6081] tmpfs: Unknown parameter 'grpquota' [ 185.400995][ T6078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.534 (6078) [ 185.430911][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 185.805486][ T126] usb 4-1: USB disconnect, device number 12 [ 185.858089][ T6078] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.868308][ T6078] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 185.877087][ T6078] BTRFS info (device loop1): setting nodatacow, compression disabled [ 185.885193][ T6078] BTRFS info (device loop1): max_inline at 0 [ 185.891373][ T6078] BTRFS info (device loop1): enabling disk space caching [ 185.898770][ T6078] BTRFS info (device loop1): turning off barriers [ 185.905271][ T6078] BTRFS info (device loop1): turning on flush-on-commit [ 185.912225][ T6078] BTRFS info (device loop1): doing ref verification [ 185.918797][ T6078] BTRFS info (device loop1): force clearing of disk cache [ 185.925968][ T6078] BTRFS info (device loop1): enabling ssd optimizations [ 185.933201][ T6078] BTRFS info (device loop1): max_inline at 4096 [ 185.939940][ T6078] BTRFS info (device loop1): disk space caching is enabled [ 186.096766][ T6078] BTRFS info (device loop1): rebuilding free space tree [ 186.116278][ T6078] BTRFS info (device loop1): disabling free space tree [ 186.123275][ T6078] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.132969][ T6078] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.241200][ T26] audit: type=1800 audit(1750899116.930:16): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.534" name="bus" dev="loop1" ino=265 res=0 errno=0 [ 186.599302][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.736505][ T6132] loop4: detected capacity change from 0 to 128 [ 188.337962][ T6132] EXT4-fs (loop4): Test dummy encryption mode enabled [ 188.864529][ T6133] binder: 6126:6133 ioctl c0306201 0 returned -14 [ 188.921776][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.946771][ T6132] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.220332][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 189.279539][ T6148] fuse: Bad value for 'fd' [ 189.352153][ T4620] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.528302][ T6150] loop4: detected capacity change from 0 to 32768 [ 189.543983][ T6150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.552 (6150) [ 189.559210][ T6150] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.569381][ T6150] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 189.578109][ T6150] BTRFS info (device loop4): setting nodatacow, compression disabled [ 189.586204][ T6150] BTRFS info (device loop4): max_inline at 0 [ 189.592185][ T6150] BTRFS info (device loop4): enabling disk space caching [ 189.599205][ T6150] BTRFS info (device loop4): turning off barriers [ 189.605645][ T6150] BTRFS info (device loop4): turning on flush-on-commit [ 189.612596][ T6150] BTRFS info (device loop4): doing ref verification [ 189.619169][ T6150] BTRFS info (device loop4): force clearing of disk cache [ 189.626520][ T6150] BTRFS info (device loop4): enabling ssd optimizations [ 189.633535][ T6150] BTRFS info (device loop4): max_inline at 4096 [ 189.639758][ T6150] BTRFS info (device loop4): disk space caching is enabled [ 189.672230][ T4620] usb 1-1: Using ep0 maxpacket: 8 [ 189.679656][ T4620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.706328][ T4620] usb 1-1: config 0 has no interfaces? [ 189.739640][ T4620] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 189.768341][ T4620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.782363][ T4620] usb 1-1: Product: syz [ 189.786654][ T4620] usb 1-1: Manufacturer: syz [ 189.791505][ T4620] usb 1-1: SerialNumber: syz [ 189.805578][ T4620] usb 1-1: config 0 descriptor?? [ 189.905388][ T6150] BTRFS info (device loop4): rebuilding free space tree [ 189.919755][ T6150] BTRFS info (device loop4): disabling free space tree [ 189.926734][ T6150] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.936642][ T6150] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.069709][ T26] audit: type=1800 audit(1750899120.760:17): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.552" name="bus" dev="loop4" ino=265 res=0 errno=0 [ 190.246450][ T4251] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.718718][ T6190] binder: 6189:6190 ioctl c0306201 0 returned -14 [ 190.729773][ T6192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.559'. [ 192.895518][ T4618] usb 1-1: USB disconnect, device number 7 [ 193.798520][ T6206] netlink: 188 bytes leftover after parsing attributes in process `syz.1.565'. [ 194.058535][ T6215] loop4: detected capacity change from 0 to 32768 [ 194.105112][ T6215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.568 (6215) [ 194.119676][ T6215] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.129909][ T6215] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 194.138897][ T6215] BTRFS info (device loop4): setting nodatacow, compression disabled [ 194.147033][ T6215] BTRFS info (device loop4): max_inline at 0 [ 194.153045][ T6215] BTRFS info (device loop4): enabling disk space caching [ 194.160052][ T6215] BTRFS info (device loop4): turning off barriers [ 194.166488][ T6215] BTRFS info (device loop4): turning on flush-on-commit [ 194.173483][ T6215] BTRFS info (device loop4): doing ref verification [ 194.180054][ T6215] BTRFS info (device loop4): force clearing of disk cache [ 194.187250][ T6215] BTRFS info (device loop4): enabling ssd optimizations [ 194.194218][ T6215] BTRFS info (device loop4): max_inline at 4096 [ 194.200456][ T6215] BTRFS info (device loop4): disk space caching is enabled [ 194.581810][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.593587][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.729826][ T6215] BTRFS info (device loop4): rebuilding free space tree [ 194.751913][ T6215] BTRFS info (device loop4): disabling free space tree [ 194.758866][ T6215] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.768539][ T6215] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.378218][ T26] audit: type=1800 audit(1750899126.070:18): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.568" name="bus" dev="loop4" ino=265 res=0 errno=0 [ 195.599409][ T6248] binder: BINDER_SET_CONTEXT_MGR already set [ 195.607492][ T6248] binder: 6247:6248 ioctl 4018620d 200000000040 returned -16 [ 195.776694][ T4251] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.796082][ T6255] binder: 6253:6255 ioctl c0306201 0 returned -14 [ 196.650925][ T4545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop4 scanned by udevd (4545) [ 196.662856][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 196.662896][ T4255] Bluetooth: hci2: command 0x0406 tx timeout [ 196.662922][ T4255] Bluetooth: hci3: command 0x0406 tx timeout [ 196.672512][ T4255] Bluetooth: hci1: command 0x0406 tx timeout [ 196.686970][ T4261] Bluetooth: hci4: command 0x0406 tx timeout [ 196.712927][ T6259] netlink: 44 bytes leftover after parsing attributes in process `syz.1.576'. [ 197.678570][ T4301] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.932885][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 197.948129][ T4301] usb 3-1: config 0 has no interfaces? [ 197.990024][ T4301] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 198.036703][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.345485][ T4301] usb 3-1: Product: syz [ 198.349901][ T4301] usb 3-1: Manufacturer: syz [ 198.354976][ T4301] usb 3-1: SerialNumber: syz [ 198.362032][ T4301] usb 3-1: config 0 descriptor?? [ 198.583543][ T4255] Bluetooth: hci2: Unknown advertising packet type: 0x4b00 [ 198.583631][ T4255] Bluetooth: hci2: Unknown advertising packet type: 0x100 [ 198.584379][ T6270] usb 3-1: USB disconnect, device number 8 [ 198.591262][ T4255] Bluetooth: hci2: Malformed LE Event: 0x0d [ 199.728606][ T6300] fuse: Bad value for 'rootmode' [ 199.967673][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 200.654406][ T6307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.595'. [ 200.919930][ T6317] netlink: 1964 bytes leftover after parsing attributes in process `syz.4.593'. [ 200.984665][ T6317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.593'. [ 201.533929][ T6270] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.762705][ T6270] usb 1-1: Using ep0 maxpacket: 16 [ 201.934668][ T6270] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 201.944532][ T6270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.953225][ T6270] usb 1-1: Product: syz [ 201.957448][ T6270] usb 1-1: Manufacturer: syz [ 201.962694][ T6270] usb 1-1: SerialNumber: syz [ 201.968932][ T6270] usb 1-1: config 0 descriptor?? [ 202.427416][ T6339] loop2: detected capacity change from 0 to 128 [ 203.463623][ T6270] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -110 [ 203.536782][ T6339] EXT4-fs (loop2): Test dummy encryption mode enabled [ 203.673120][ T6339] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 203.682156][ T6339] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.002424][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 204.801604][ T6352] capability: warning: `syz.3.607' uses deprecated v2 capabilities in a way that may be insecure [ 205.153006][ T6353] device batadv0 entered promiscuous mode [ 205.612709][ T14] usb 1-1: USB disconnect, device number 8 [ 208.342170][ T6270] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 208.662404][ T6270] usb 2-1: Using ep0 maxpacket: 16 [ 208.748066][ T6270] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 208.768720][ T6270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.785130][ T6270] usb 2-1: Product: syz [ 208.789802][ T6270] usb 2-1: Manufacturer: syz [ 208.794616][ T6270] usb 2-1: SerialNumber: syz [ 208.844554][ T6270] usb 2-1: config 0 descriptor?? [ 209.333166][ T6270] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 209.355548][ T6270] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.378531][ T6417] binder: BINDER_SET_CONTEXT_MGR already set [ 209.390424][ T6270] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 209.392219][ T6417] binder: 6416:6417 ioctl 4018620d 200000000040 returned -16 [ 209.399848][ T6270] usb 2-1: media controller created [ 209.458610][ T6270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.053409][ T6270] zl10353_read_register: readreg error (reg=127, ret==0) [ 210.089663][ T6270] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 210.132166][ T6396] dtv5100: wlen = 0, aborting. [ 210.283938][ T6270] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 210.349777][ T6432] binder: BINDER_SET_CONTEXT_MGR already set [ 210.389703][ T6270] usb 2-1: USB disconnect, device number 8 [ 210.405157][ T6432] binder: 6431:6432 ioctl 4018620d 200000000040 returned -16 [ 210.449707][ T6270] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 210.697681][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.640'. [ 211.535378][ T6459] fuse: Unknown parameter 'use00000000000000000000' [ 213.443841][ T6480] binder_alloc: 6478: pid 6478 spamming oneway? 2 buffers allocated for a total size of 5120 [ 213.480644][ T6480] binder_alloc: 6478: pid 6478 spamming oneway? 3 buffers allocated for a total size of 5128 [ 213.832378][ T4307] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 214.032428][ T4307] usb 2-1: Using ep0 maxpacket: 16 [ 214.047168][ T4307] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 214.056960][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.067388][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.661'. [ 214.067660][ T4307] usb 2-1: Product: syz [ 214.080856][ T4307] usb 2-1: Manufacturer: syz [ 214.085650][ T4307] usb 2-1: SerialNumber: syz [ 214.093904][ T4307] usb 2-1: config 0 descriptor?? [ 214.785505][ T4307] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 214.886232][ T4307] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.935536][ T4307] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 215.069579][ T6506] loop0: detected capacity change from 0 to 32768 [ 215.152683][ T6506] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 215.172821][ T6484] dtv5100: wlen = 0, aborting. [ 215.203844][ T4307] usb 2-1: media controller created [ 215.262305][ T4307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.316568][ T4540] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.380648][ T4307] zl10353_read_register: readreg error (reg=127, ret==0) [ 215.402547][ T4307] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 215.467267][ T6516] overlayfs: missing 'lowerdir' [ 215.655015][ T4307] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 215.865247][ T4307] usb 2-1: USB disconnect, device number 9 [ 215.899536][ T4307] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 216.652614][ T6528] binder: 6527:6528 ioctl c0306201 0 returned -14 [ 217.677779][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 219.987277][ T6561] loop1: detected capacity change from 0 to 32768 [ 219.995222][ T6561] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 220.072968][ T4545] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 220.154811][ T6564] overlayfs: missing 'lowerdir' [ 220.362186][ T4621] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.691448][ T6569] binder: 6568:6569 ioctl c0306201 0 returned -14 [ 220.712394][ T4621] usb 3-1: Using ep0 maxpacket: 16 [ 220.728972][ T4621] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 220.769301][ T4621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.884301][ T4621] usb 3-1: Product: syz [ 220.928893][ T4621] usb 3-1: Manufacturer: syz [ 220.981192][ T4621] usb 3-1: SerialNumber: syz [ 221.118445][ T4621] usb 3-1: config 0 descriptor?? [ 221.603315][ T4621] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 221.738482][ T4621] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.813933][ T6559] dtv5100: wlen = 0, aborting. [ 221.880013][ T4621] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 221.998583][ T4621] usb 3-1: media controller created [ 222.107695][ T4621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.166662][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 222.202963][ T4621] zl10353_read_register: readreg error (reg=127, ret==0) [ 222.211292][ T4621] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 222.237104][ T4621] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 222.279657][ T4621] usb 3-1: USB disconnect, device number 9 [ 222.352751][ T4621] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 223.133887][ T6606] binder: 6605:6606 ioctl c0306201 0 returned -14 [ 225.217554][ T6639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.708'. [ 225.262142][ T4621] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 225.313596][ T5350] tipc: Subscription rejected, illegal request [ 225.452316][ T4621] usb 1-1: Using ep0 maxpacket: 16 [ 225.471015][ T4621] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 225.491361][ T4621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.513625][ T4621] usb 1-1: Product: syz [ 225.534690][ T4621] usb 1-1: Manufacturer: syz [ 225.539332][ T4621] usb 1-1: SerialNumber: syz [ 225.567659][ T4621] usb 1-1: config 0 descriptor?? [ 226.763262][ T4621] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -110 [ 228.607476][ T6270] usb 1-1: USB disconnect, device number 9 [ 228.638715][ T6681] binder_alloc: 6680: binder_alloc_buf, no vma [ 228.735922][ T6687] binder_alloc: 6680: binder_alloc_buf, no vma [ 229.407153][ T6270] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 229.683162][ T6270] usb 3-1: Using ep0 maxpacket: 16 [ 229.696986][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 229.708666][ T6270] usb 3-1: config 0 has an invalid interface number: 213 but max is 0 [ 229.828579][ T6270] usb 3-1: config 0 has no interface number 0 [ 229.930381][ T6270] usb 3-1: config 0 interface 213 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 229.997821][ T6270] usb 3-1: config 0 interface 213 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 230.030830][ T6270] usb 3-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=c5.ad [ 230.068491][ T6270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.101440][ T6270] usb 3-1: Product: syz [ 230.118837][ T6270] usb 3-1: Manufacturer: syz [ 230.158838][ T6270] usb 3-1: SerialNumber: syz [ 230.189382][ T6270] usb 3-1: config 0 descriptor?? [ 230.209970][ T6694] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.728737][ T6726] binder_alloc: 6725: binder_alloc_buf, no vma [ 230.872407][ T6182] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 230.949294][ T6732] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.072821][ T6182] usb 2-1: Using ep0 maxpacket: 16 [ 231.088580][ T6182] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 231.138473][ T6182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.150480][ T6182] usb 2-1: Product: syz [ 231.158275][ T6182] usb 2-1: Manufacturer: syz [ 231.165298][ T6182] usb 2-1: SerialNumber: syz [ 231.172598][ T6182] usb 2-1: config 0 descriptor?? [ 231.805990][ T6182] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 231.834141][ T6182] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.889830][ T6270] usb 3-1: USB disconnect, device number 10 [ 231.901535][ T6182] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 231.934591][ T6182] usb 2-1: media controller created [ 231.979713][ T6182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.016316][ T6720] dtv5100: wlen = 0, aborting. [ 232.131161][ T6182] zl10353_read_register: readreg error (reg=127, ret==0) [ 232.138442][ T6182] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 232.173454][ T4544] udevd[4544]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.213/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.239241][ T6182] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 232.359220][ T6182] usb 2-1: USB disconnect, device number 10 [ 232.381353][ T6182] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 233.421900][ T6766] fuse: Bad value for 'fd' [ 235.812218][ T41] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 235.874924][ T6817] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 235.881991][ T6817] /dev/nullb0: Can't open blockdev [ 237.982794][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 238.002503][ T41] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 238.016617][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.101944][ T41] usb 3-1: Product: syz [ 238.116196][ T41] usb 3-1: Manufacturer: syz [ 238.135441][ T41] usb 3-1: SerialNumber: syz [ 238.174961][ T41] usb 3-1: config 0 descriptor?? [ 238.974393][ T41] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 238.990814][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.008004][ T41] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 239.027257][ T41] usb 3-1: media controller created [ 239.057679][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.143300][ T6842] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 240.275837][ T41] zl10353_read_register: readreg error (reg=127, ret==0) [ 240.283017][ T41] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 240.290961][ T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 240.294097][ T6805] dtv5100: wlen = 0, aborting. [ 240.378581][ T41] usb 3-1: USB disconnect, device number 11 [ 240.451668][ T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 242.774249][ T6899] netlink: 'syz.3.790': attribute type 27 has an invalid length. [ 243.402248][ T4301] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.612316][ T4301] usb 3-1: Using ep0 maxpacket: 16 [ 243.627663][ T4301] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 243.641846][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.654986][ T4301] usb 3-1: Product: syz [ 243.659323][ T4301] usb 3-1: Manufacturer: syz [ 243.664733][ T4301] usb 3-1: SerialNumber: syz [ 243.680056][ T4301] usb 3-1: config 0 descriptor?? [ 244.140398][ T4301] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 244.314923][ T4301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.353950][ T6904] dtv5100: wlen = 0, aborting. [ 244.528271][ T4301] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 244.551232][ T6926] fuse: Unknown parameter '0x0000000000000003' [ 244.716582][ T4301] usb 3-1: media controller created [ 244.736867][ T4301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.787108][ T4301] zl10353_read_register: readreg error (reg=127, ret==0) [ 244.797085][ T4301] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 244.816706][ T4301] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 244.845356][ T4301] usb 3-1: USB disconnect, device number 12 [ 244.885772][ T4301] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 246.003793][ T6951] netlink: 'syz.2.806': attribute type 27 has an invalid length. [ 246.302220][ T126] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 247.345512][ T6970] fuse: Unknown parameter '0x0000000000000003' [ 247.484406][ T126] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.496180][ T126] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.506168][ T126] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.648192][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.817'. [ 247.942177][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.776885][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.792544][ T6974] block device autoloading is deprecated and will be removed. [ 248.838931][ T126] usb 2-1: can't set config #27, error -71 [ 248.846719][ T126] usb 2-1: USB disconnect, device number 11 [ 249.325501][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 249.337183][ T7] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 249.347341][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.360391][ T7] usb 5-1: Product: syz [ 249.364868][ T7] usb 5-1: Manufacturer: syz [ 249.369641][ T7] usb 5-1: SerialNumber: syz [ 249.380243][ T7] usb 5-1: config 0 descriptor?? [ 249.890631][ T4301] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 249.900664][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 249.923437][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.951070][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 249.961417][ T7] usb 5-1: media controller created [ 249.982148][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.035028][ T7005] netlink: 'syz.0.824': attribute type 27 has an invalid length. [ 250.142174][ T4301] usb 4-1: Using ep0 maxpacket: 8 [ 250.151503][ T4301] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 250.269370][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.278801][ T4301] usb 4-1: Product: syz [ 250.286800][ T4301] usb 4-1: Manufacturer: syz [ 250.291822][ T4301] usb 4-1: SerialNumber: syz [ 250.305120][ T4301] usb 4-1: config 0 descriptor?? [ 250.317785][ T4301] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 250.327175][ T4301] usb 4-1: setting power ON [ 250.336334][ T4301] dvb-usb: bulk message failed: -22 (2/0) [ 250.357105][ T4301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.367298][ T4301] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 250.376059][ T4301] usb 4-1: media controller created [ 250.476408][ T4301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.570900][ T4301] usb 4-1: selecting invalid altsetting 6 [ 250.577111][ T4301] usb 4-1: digital interface selection failed (-22) [ 250.588531][ T4301] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 250.600957][ T4301] usb 4-1: setting power OFF [ 250.607045][ T4301] dvb-usb: bulk message failed: -22 (2/0) [ 250.614284][ T4301] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 250.624162][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 250.631223][ T6978] dtv5100: wlen = 0, aborting. [ 250.637210][ T4301] (NULL device *): no alternate interface [ 250.652554][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 250.667276][ T6993] dtv5100: wlen = 0, aborting. [ 250.696782][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 250.709885][ T4301] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 250.721637][ T7] usb 5-1: USB disconnect, device number 10 [ 250.732116][ T4301] usb 4-1: USB disconnect, device number 13 [ 250.802994][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 250.882296][ T4621] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 251.693569][ T4621] usb 2-1: Using ep0 maxpacket: 16 [ 251.720327][ T4621] usb 2-1: config 0 has an invalid interface number: 213 but max is 0 [ 251.863079][ T7017] loop0: detected capacity change from 0 to 32768 [ 251.875656][ T4621] usb 2-1: config 0 has no interface number 0 [ 251.882143][ T4621] usb 2-1: config 0 interface 213 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 251.901317][ T7017] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 251.935327][ T4621] usb 2-1: config 0 interface 213 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 251.951174][ T4621] usb 2-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice=c5.ad [ 251.960490][ T4621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.007966][ T4545] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.022439][ T4621] usb 2-1: Product: syz [ 252.028922][ T4621] usb 2-1: Manufacturer: syz [ 252.034565][ T4621] usb 2-1: SerialNumber: syz [ 252.045389][ T4621] usb 2-1: config 0 descriptor?? [ 252.050864][ T7010] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 252.120395][ T7024] overlayfs: missing 'workdir' [ 252.263664][ T7025] binder: BINDER_SET_CONTEXT_MGR already set [ 252.285303][ T7026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'. [ 252.424771][ T7025] binder: 7019:7025 ioctl 4018620d 200000000040 returned -16 [ 254.195415][ T7033] binder: BINDER_SET_CONTEXT_MGR already set [ 254.221387][ T7033] binder: 7032:7033 ioctl 4018620d 200000000040 returned -16 [ 255.000035][ T6182] kernel write not supported for file /429/attr/sockcreate (pid: 6182 comm: kworker/1:9) [ 255.656569][ T7055] netlink: 'syz.3.838': attribute type 27 has an invalid length. [ 255.665882][ T4621] usb 2-1: USB disconnect, device number 12 [ 255.984448][ T7061] loop1: detected capacity change from 0 to 32768 [ 255.992505][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.998806][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.017245][ T7061] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 256.118596][ T7062] overlayfs: missing 'workdir' [ 256.320508][ T6182] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 256.775257][ T7065] fuse: Unknown parameter '0x0000000000000003' [ 256.899128][ T7072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.845'. [ 256.916249][ T6182] usb 3-1: Using ep0 maxpacket: 16 [ 256.955687][ T6182] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.982744][ T6182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.990789][ T6182] usb 3-1: Product: syz [ 257.000253][ T6182] usb 3-1: Manufacturer: syz [ 257.004612][ T7074] binder_alloc: 7073: binder_alloc_buf, no vma [ 257.022161][ T6182] usb 3-1: SerialNumber: syz [ 257.030236][ T6182] usb 3-1: config 0 descriptor?? [ 257.056531][ T4540] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 257.559265][ T7086] loop0: detected capacity change from 0 to 32768 [ 257.569466][ T7086] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 257.580542][ T6182] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 257.597242][ T6182] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.607248][ T6182] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 257.615262][ T6182] usb 3-1: media controller created [ 257.630683][ T6182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.680565][ T4540] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.706773][ T7091] netlink: 'syz.4.854': attribute type 27 has an invalid length. [ 257.776923][ T7092] overlayfs: missing 'lowerdir' [ 258.718870][ T7110] binder_alloc: 7109: binder_alloc_buf, no vma [ 258.742316][ T6182] zl10353_read_register: readreg error (reg=127, ret==0) [ 258.745783][ T7058] dtv5100: wlen = 0, aborting. [ 258.759971][ T6182] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 258.781886][ T6182] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 258.830817][ T6182] usb 3-1: USB disconnect, device number 13 [ 258.898285][ T6182] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 259.117706][ T7126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 259.499270][ T7132] loop3: detected capacity change from 0 to 32768 [ 259.514234][ T7132] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 259.611326][ T4545] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 259.687521][ T7135] overlayfs: missing 'lowerdir' [ 261.368153][ T4255] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 263.044628][ T7170] loop8: detected capacity change from 0 to 5 [ 263.199387][ T7169] loop2: detected capacity change from 0 to 32768 [ 263.229626][ T7169] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 263.301642][ T7174] overlayfs: missing 'lowerdir' [ 263.992725][ T7182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.887'. [ 264.225103][ T4540] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 264.251419][ T7190] loop6: detected capacity change from 0 to 7 [ 264.284172][ T7190] Dev loop6: unable to read RDB block 7 [ 264.327568][ T7190] loop6: unable to read partition table [ 264.353945][ T7190] loop6: partition table beyond EOD, truncated [ 264.375822][ T7190] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 264.556326][ T7199] binder: BINDER_SET_CONTEXT_MGR already set [ 264.565852][ T7199] binder: 7198:7199 ioctl 4018620d 200000000040 returned -16 [ 264.910649][ T4624] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 267.682145][ T4624] usb 3-1: Using ep0 maxpacket: 8 [ 267.689191][ T4624] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.718227][ T4624] usb 3-1: config 0 has no interfaces? [ 267.752696][ T4624] usb 3-1: string descriptor 0 read error: -71 [ 267.766061][ T41] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 267.799665][ T4624] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 267.918334][ T4624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.961924][ T4624] usb 3-1: config 0 descriptor?? [ 267.984060][ T4624] usb 3-1: can't set config #0, error -71 [ 268.017982][ T4624] usb 3-1: USB disconnect, device number 14 [ 268.930983][ T7216] loop1: detected capacity change from 0 to 32768 [ 268.943425][ T7216] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 269.129610][ T4545] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.220547][ T7228] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 269.229513][ T7228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 269.769077][ T7233] binder: BINDER_SET_CONTEXT_MGR already set [ 269.830517][ T7233] binder: 7232:7233 ioctl 4018620d 200000000040 returned -16 [ 270.119069][ T7246] fuse: Bad value for 'group_id' [ 273.153552][ T4624] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 273.162646][ T4301] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 273.412293][ T4624] usb 5-1: Using ep0 maxpacket: 16 [ 273.418041][ T7266] device syzkaller0 entered promiscuous mode [ 273.424296][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 273.437844][ T4301] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 273.448338][ T4624] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 273.599067][ T7271] loop0: detected capacity change from 0 to 32768 [ 273.611267][ T7271] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 273.685161][ T7273] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 273.694220][ T7273] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 273.709926][ T4624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.710026][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.731672][ T4301] usb 3-1: Product: syz [ 273.776626][ T4301] usb 3-1: Manufacturer: syz [ 273.837693][ T4301] usb 3-1: SerialNumber: syz [ 273.947615][ T4624] usb 5-1: Product: syz [ 273.970600][ T4301] usb 3-1: config 0 descriptor?? [ 274.000816][ T4624] usb 5-1: Manufacturer: syz [ 274.060568][ T4624] usb 5-1: SerialNumber: syz [ 274.081472][ T4301] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 274.174702][ T4624] usb 5-1: config 0 descriptor?? [ 274.191428][ T4301] usb 3-1: setting power ON [ 274.252944][ T4301] dvb-usb: bulk message failed: -22 (2/0) [ 274.304131][ T4301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.333984][ T4301] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 274.371168][ T4301] usb 3-1: media controller created [ 274.376643][ T4545] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 274.488522][ T4301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.521583][ T4301] usb 3-1: selecting invalid altsetting 6 [ 274.530244][ T4301] usb 3-1: digital interface selection failed (-22) [ 274.541015][ T4301] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 274.575699][ T7279] binder: BINDER_SET_CONTEXT_MGR already set [ 274.577879][ T4301] usb 3-1: setting power OFF [ 274.583482][ T7279] binder: 7278:7279 ioctl 4018620d 200000000040 returned -16 [ 274.598016][ T4301] dvb-usb: bulk message failed: -22 (2/0) [ 274.604696][ T4301] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 274.625947][ T4301] (NULL device *): no alternate interface [ 274.631919][ T4624] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 274.682894][ T4624] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.694861][ T4301] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 274.705315][ T4624] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 274.729840][ T4624] usb 5-1: media controller created [ 274.737529][ T4301] usb 3-1: USB disconnect, device number 15 [ 274.768086][ T4624] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.776927][ T7281] fuse: Bad value for 'group_id' [ 274.814308][ T7283] binder: BINDER_SET_CONTEXT_MGR already set [ 274.838667][ T7283] binder: 7282:7283 ioctl 4018620d 200000000040 returned -16 [ 274.862497][ T4624] zl10353_read_register: readreg error (reg=127, ret==0) [ 274.869610][ T4624] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 274.908520][ T4624] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 274.961867][ T4624] usb 5-1: USB disconnect, device number 11 [ 275.043377][ T4624] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 276.737468][ T7305] loop2: detected capacity change from 0 to 32768 [ 276.776260][ T7305] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 276.877881][ T4545] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.981758][ T7309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 276.990810][ T7309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 277.615164][ T7319] fuse: Unknown parameter 'fd0x0000000000000003' [ 277.652565][ T7320] fuse: Bad value for 'group_id' [ 277.748630][ T7323] binder: BINDER_SET_CONTEXT_MGR already set [ 277.766220][ T7323] binder: 7322:7323 ioctl 4018620d 200000000040 returned -16 [ 281.241891][ T7354] loop1: detected capacity change from 0 to 32768 [ 281.260555][ T7354] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 281.987578][ T4545] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 282.266558][ T7362] fuse: Unknown parameter 'fd0x0000000000000003' [ 282.505483][ T7370] binder: BINDER_SET_CONTEXT_MGR already set [ 282.548680][ T7370] binder: 7369:7370 ioctl 4018620d 200000000040 returned -16 [ 283.540358][ T7385] loop3: detected capacity change from 0 to 32768 [ 283.551749][ T7385] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 12 [ 285.832791][ T4306] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.022418][ T4306] usb 5-1: Using ep0 maxpacket: 16 [ 286.040215][ T4306] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 286.050833][ T4306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.062275][ T4306] usb 5-1: Product: syz [ 286.066874][ T4306] usb 5-1: Manufacturer: syz [ 286.079727][ T4306] usb 5-1: SerialNumber: syz [ 286.095886][ T4306] usb 5-1: config 0 descriptor?? [ 286.154778][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'. [ 286.268076][ T7418] device hsr_slave_1 left promiscuous mode [ 286.512937][ T4306] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 286.650959][ T7423] loop0: detected capacity change from 0 to 32768 [ 286.675189][ T7423] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 286.733686][ T7407] dtv5100: wlen = 0, aborting. [ 287.679748][ T4306] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.692013][ T4306] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 287.700229][ T4306] usb 5-1: media controller created [ 287.717899][ T4306] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.773562][ T4306] zl10353_read_register: readreg error (reg=127, ret==0) [ 287.780783][ T4306] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 287.810839][ T4306] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 287.827739][ T4306] usb 5-1: USB disconnect, device number 12 [ 288.030626][ T4540] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 288.077838][ T4306] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 290.465628][ T7470] loop1: detected capacity change from 0 to 32768 [ 290.583387][ T7470] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 291.768556][ T7491] tipc: Started in network mode [ 291.795093][ T4545] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 291.807356][ T7491] tipc: Node identity ac1414aa, cluster identity 4711 [ 291.835504][ T7491] tipc: Enabled bearer , priority 10 [ 291.890483][ T7491] tipc: Enabled bearer , priority 0 [ 292.726495][ T41] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.049494][ T4622] tipc: Node number set to 2886997162 [ 293.067165][ T7505] loop2: detected capacity change from 0 to 32768 [ 293.074602][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 293.083714][ T7505] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 293.110462][ T41] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 293.843330][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.921709][ T41] usb 4-1: Product: syz [ 293.952731][ T41] usb 4-1: Manufacturer: syz [ 293.957750][ T41] usb 4-1: SerialNumber: syz [ 293.987634][ T41] usb 4-1: config 0 descriptor?? [ 294.406684][ T41] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 294.473183][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.490190][ T41] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 294.499085][ T41] usb 4-1: media controller created [ 294.536402][ T4545] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 294.538386][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 295.123263][ T41] zl10353_read_register: readreg error (reg=127, ret==0) [ 295.130741][ T7489] dtv5100: wlen = 0, aborting. [ 295.160121][ T41] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 295.373049][ T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 295.622281][ T41] usb 4-1: USB disconnect, device number 14 [ 295.808873][ T41] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 298.129361][ T7555] loop0: detected capacity change from 0 to 32768 [ 298.145124][ T7555] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 12 [ 299.053873][ T7563] binder: BINDER_SET_CONTEXT_MGR already set [ 299.060074][ T7563] binder: 7562:7563 ioctl 4018620d 200000000040 returned -16 [ 300.682226][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 300.859572][ T7588] device syzkaller0 entered promiscuous mode [ 300.883741][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 300.988627][ T14] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 301.236923][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.878949][ T14] usb 4-1: Product: syz [ 301.883615][ T14] usb 4-1: Manufacturer: syz [ 301.888225][ T14] usb 4-1: SerialNumber: syz [ 301.927416][ T14] usb 4-1: config 0 descriptor?? [ 302.338791][ T7613] loop4: detected capacity change from 0 to 32768 [ 302.361647][ T7613] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 302.372157][ T7613] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 302.380884][ T7613] BTRFS info (device loop4): setting nodatacow, compression disabled [ 302.389207][ T7613] BTRFS info (device loop4): max_inline at 0 [ 302.395201][ T7613] BTRFS info (device loop4): enabling disk space caching [ 302.402248][ T7613] BTRFS info (device loop4): turning off barriers [ 302.408641][ T7613] BTRFS info (device loop4): turning on flush-on-commit [ 302.415807][ T7613] BTRFS info (device loop4): doing ref verification [ 302.422405][ T7613] BTRFS info (device loop4): force clearing of disk cache [ 302.429523][ T7613] BTRFS info (device loop4): enabling ssd optimizations [ 302.436489][ T7613] BTRFS info (device loop4): max_inline at 4096 [ 302.442951][ T7613] BTRFS info (device loop4): disk space caching is enabled [ 302.451745][ T14] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 302.490786][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.635222][ T14] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 302.655762][ T7579] dtv5100: wlen = 0, aborting. [ 302.774657][ T14] usb 4-1: media controller created [ 302.955204][ T7613] BTRFS info (device loop4): rebuilding free space tree [ 302.975758][ T7613] BTRFS info (device loop4): disabling free space tree [ 302.983750][ T7613] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 302.993430][ T7613] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 303.087010][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.182523][ T14] zl10353_read_register: readreg error (reg=127, ret==0) [ 303.201879][ T14] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 303.222235][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 303.401143][ T14] usb 4-1: USB disconnect, device number 15 [ 303.528182][ T26] audit: type=1800 audit(1750899234.220:19): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1030" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 303.892815][ T14] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 304.501368][ T4251] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 308.017621][ T7684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.118555][ T7688] loop1: detected capacity change from 0 to 32768 [ 309.146758][ T7688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1044 (7688) [ 309.165555][ T7688] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 309.175740][ T7688] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 309.184498][ T7688] BTRFS info (device loop1): setting nodatacow, compression disabled [ 309.192637][ T7688] BTRFS info (device loop1): max_inline at 0 [ 309.198603][ T7688] BTRFS info (device loop1): enabling disk space caching [ 309.205659][ T7688] BTRFS info (device loop1): turning off barriers [ 309.212109][ T7688] BTRFS info (device loop1): turning on flush-on-commit [ 309.219031][ T7688] BTRFS info (device loop1): doing ref verification [ 309.225623][ T7688] BTRFS info (device loop1): force clearing of disk cache [ 309.233306][ T7688] BTRFS info (device loop1): enabling ssd optimizations [ 309.240329][ T7688] BTRFS info (device loop1): max_inline at 4096 [ 309.246661][ T7688] BTRFS info (device loop1): disk space caching is enabled [ 309.566913][ T7688] BTRFS info (device loop1): rebuilding free space tree [ 309.580958][ T7688] BTRFS info (device loop1): disabling free space tree [ 309.587891][ T7688] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 309.597547][ T7688] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 310.428538][ T26] audit: type=1800 audit(1750899241.120:20): pid=7712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1044" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 310.892332][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.475819][ T4545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 13 /dev/loop1 scanned by udevd (4545) [ 314.995710][ T7683] bridge0: port 3(syz_tun) entered blocking state [ 315.002553][ T7683] bridge0: port 3(syz_tun) entered disabled state [ 315.011085][ T7683] device syz_tun entered promiscuous mode [ 315.017427][ T7683] bridge0: port 3(syz_tun) entered blocking state [ 315.024175][ T7683] bridge0: port 3(syz_tun) entered forwarding state [ 316.282819][ T7743] tipc: Started in network mode [ 316.328585][ T7743] tipc: Node identity ac1414aa, cluster identity 4711 [ 316.372568][ T7743] tipc: Enabled bearer , priority 10 [ 316.487929][ T7761] tipc: Enabled bearer , priority 0 [ 316.601304][ T7765] syz.1.1059 uses obsolete (PF_INET,SOCK_PACKET) [ 317.305780][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.312424][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.514499][ T22] tipc: Node number set to 2886997162 [ 319.719754][ T7806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1072'. [ 322.629542][ T7829] program syz.3.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.629370][ T7847] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1085'. [ 323.659957][ T7847] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1085'. [ 323.672284][ T7824] delete_channel: no stack [ 323.715146][ T7847] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1085'. [ 327.842981][ T7886] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.852312][ T7886] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.862038][ T7886] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.872404][ T7886] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.598662][ T7901] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1101'. [ 328.706257][ T7901] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1101'. [ 328.754924][ T7902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1101'. [ 330.928530][ T7919] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 332.685950][ T7919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.582488][ T7919] device veth3 entered promiscuous mode [ 333.621668][ T7919] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 334.776683][ T7949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1115'. [ 334.785941][ T7949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1115'. [ 334.811092][ T7949] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1115'. [ 336.194890][ T7960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1118'. [ 336.458265][ T7973] fuse: Bad value for 'user_id' [ 338.059319][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1129'. [ 338.076737][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1129'. [ 338.103231][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1129'. [ 340.257611][ T8011] fuse: Bad value for 'fd' [ 342.282205][ T8030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1143'. [ 342.856221][ T8030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1143'. [ 342.866417][ T8039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1143'. [ 344.342903][ T4621] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 344.531204][ T8058] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.540123][ T8058] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.548907][ T8058] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.558003][ T8058] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.714066][ T4621] usb 2-1: Using ep0 maxpacket: 32 [ 344.765438][ T4621] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.1f [ 344.774667][ T4621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.799220][ T4621] usb 2-1: config 0 descriptor?? [ 345.011532][ T4621] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 345.049428][ T4621] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.093308][ T4621] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 345.112696][ T4621] usb 2-1: media controller created [ 345.142699][ T4621] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.031282][ T4621] az6027: usb out operation failed. (-71) [ 346.061235][ T4621] az6027: usb out operation failed. (-71) [ 346.079691][ T4621] stb0899_attach: Driver disabled by Kconfig [ 346.124444][ T4621] az6027: no front-end attached [ 346.124444][ T4621] [ 346.172724][ T4621] az6027: usb out operation failed. (-71) [ 346.178493][ T4621] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 346.266745][ T4621] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 346.352001][ T4621] dvb-usb: schedule remote query interval to 400 msecs. [ 346.374749][ T4621] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 346.447697][ T4621] usb 2-1: USB disconnect, device number 14 [ 346.790757][ T4621] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 346.802233][ T4618] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 346.972481][ T4618] usb 4-1: device descriptor read/64, error -71 [ 347.267983][ T4618] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 347.442434][ T4618] usb 4-1: device descriptor read/64, error -71 [ 347.786665][ T4618] usb usb4-port1: attempt power cycle [ 348.234702][ T4618] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 348.672968][ T4618] usb 4-1: device descriptor read/8, error -71 [ 348.952374][ T4618] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 349.108476][ T4618] usb 4-1: device descriptor read/8, error -71 [ 349.376166][ T4618] usb usb4-port1: unable to enumerate USB device [ 350.644308][ T8121] delete_channel: no stack [ 353.527561][ T8167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1186'. [ 353.542180][ T8167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1186'. [ 353.554460][ T8167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1186'. [ 353.578104][ T8169] binder: BINDER_SET_CONTEXT_MGR already set [ 353.592189][ T8169] binder: 8168:8169 ioctl 4018620d 200000000040 returned -16 [ 353.915082][ T8178] 9pnet_fd: Insufficient options for proto=fd [ 355.961595][ T8207] binder: BINDER_SET_CONTEXT_MGR already set [ 355.980421][ T8210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1200'. [ 355.982373][ T8207] binder: 8206:8207 ioctl 4018620d 200000000040 returned -16 [ 356.028704][ T8210] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1200'. [ 356.079072][ T8213] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1200'. [ 356.247948][ T8215] loop1: detected capacity change from 0 to 32768 [ 356.260588][ T8215] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 356.271296][ T8215] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 356.280055][ T8215] BTRFS info (device loop1): setting nodatacow, compression disabled [ 356.288162][ T8215] BTRFS info (device loop1): max_inline at 0 [ 356.294178][ T8215] BTRFS info (device loop1): enabling disk space caching [ 356.301181][ T8215] BTRFS info (device loop1): turning off barriers [ 356.307634][ T8215] BTRFS info (device loop1): turning on flush-on-commit [ 356.314647][ T8215] BTRFS info (device loop1): doing ref verification [ 356.321216][ T8215] BTRFS info (device loop1): force clearing of disk cache [ 356.328387][ T8215] BTRFS info (device loop1): enabling ssd optimizations [ 356.335768][ T8215] BTRFS info (device loop1): max_inline at 4096 [ 356.342017][ T8215] BTRFS info (device loop1): disk space caching is enabled [ 357.583208][ T8215] BTRFS info (device loop1): rebuilding free space tree [ 357.608121][ T8215] BTRFS info (device loop1): disabling free space tree [ 357.615117][ T8215] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 357.624993][ T8215] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 358.171581][ T26] audit: type=1800 audit(1750899288.860:21): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1203" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 358.571826][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 358.769446][ T8260] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1213'. [ 358.932551][ T4545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 13 /dev/loop1 scanned by udevd (4545) [ 359.114803][ T8269] binder: BINDER_SET_CONTEXT_MGR already set [ 359.170277][ T8269] binder: 8268:8269 ioctl 4018620d 200000000040 returned -16 [ 360.282943][ T8283] loop6: detected capacity change from 0 to 524287999 [ 360.326338][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.335809][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.345359][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.354579][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.508564][ T8286] loop2: detected capacity change from 0 to 32768 [ 360.516611][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.525886][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.534150][ T8286] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 360.875530][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.884733][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.009438][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.018703][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.765122][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.774346][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.790467][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.799698][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.810451][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.819663][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.827860][ T8283] ldm_validate_partition_table(): Disk read failed. [ 361.835824][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.845014][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 361.896546][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.905779][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 362.003048][ T8283] Dev loop6: unable to read RDB block 0 [ 362.018974][ T8283] loop6: unable to read partition table [ 362.057423][ T8283] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 362.621003][ T6743] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 13 [ 364.172550][ T8324] binder: 8322:8324 ioctl c0306201 0 returned -14 [ 364.849315][ T8334] loop1: detected capacity change from 0 to 32768 [ 364.869284][ T8334] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.879500][ T8334] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 364.888285][ T8334] BTRFS info (device loop1): setting nodatacow, compression disabled [ 364.896600][ T8334] BTRFS info (device loop1): max_inline at 0 [ 364.902909][ T8334] BTRFS info (device loop1): enabling disk space caching [ 364.909923][ T8334] BTRFS info (device loop1): turning off barriers [ 364.916365][ T8334] BTRFS info (device loop1): turning on flush-on-commit [ 364.923312][ T8334] BTRFS info (device loop1): doing ref verification [ 364.929878][ T8334] BTRFS info (device loop1): force clearing of disk cache [ 364.937421][ T8334] BTRFS info (device loop1): enabling ssd optimizations [ 364.944414][ T8334] BTRFS info (device loop1): max_inline at 4096 [ 364.950635][ T8334] BTRFS info (device loop1): disk space caching is enabled [ 364.983350][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 365.020466][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 365.812467][ T8334] BTRFS info (device loop1): rebuilding free space tree [ 365.850324][ T8334] BTRFS info (device loop1): disabling free space tree [ 365.857691][ T8334] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 365.867424][ T8334] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 366.065296][ T26] audit: type=1800 audit(1750899296.770:22): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1234" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 366.327985][ T8376] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 366.371869][ T8378] binder: 8377:8378 ioctl c0306201 0 returned -14 [ 366.382168][ T7] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 366.424920][ T8376] VFS: Can't find a romfs filesystem on dev nullb0. [ 366.424920][ T8376] [ 366.500097][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.577903][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 366.604207][ T7] usb 3-1: device descriptor read/all, error -61 [ 366.618151][ T8382] fuse: Invalid rootmode [ 366.742383][ T4255] Bluetooth: hci4: command 0x0405 tx timeout [ 367.438465][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 367.667621][ T7] usb 3-1: device descriptor read/64, error -71 [ 367.792992][ T7] usb usb3-port1: attempt power cycle [ 368.897493][ T8409] loop4: detected capacity change from 0 to 32768 [ 368.904911][ T7] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 368.922496][ T8409] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1255 (8409) [ 368.961394][ T8409] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.971851][ T8409] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 368.980580][ T8409] BTRFS info (device loop4): setting nodatacow, compression disabled [ 368.988755][ T8409] BTRFS info (device loop4): max_inline at 0 [ 368.994962][ T8409] BTRFS info (device loop4): enabling disk space caching [ 369.001967][ T8409] BTRFS info (device loop4): turning off barriers [ 369.008387][ T8409] BTRFS info (device loop4): turning on flush-on-commit [ 369.015415][ T8409] BTRFS info (device loop4): doing ref verification [ 369.021988][ T8409] BTRFS info (device loop4): force clearing of disk cache [ 369.029812][ T8409] BTRFS info (device loop4): enabling ssd optimizations [ 369.036815][ T8409] BTRFS info (device loop4): max_inline at 4096 [ 369.043078][ T8409] BTRFS info (device loop4): disk space caching is enabled [ 369.286699][ T7] usb 3-1: device not accepting address 18, error -71 [ 369.683739][ T8409] BTRFS info (device loop4): rebuilding free space tree [ 369.703075][ T8409] BTRFS info (device loop4): disabling free space tree [ 369.710005][ T8409] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 369.719837][ T8409] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 369.935029][ T26] audit: type=1800 audit(1750899300.630:23): pid=8435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1255" name="bus" dev="loop4" ino=269 res=0 errno=0 [ 370.460501][ T8440] binder: 8439:8440 ioctl c0306201 0 returned -14 [ 371.149537][ T4251] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.034620][ T8462] program syz.0.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.494749][ T8457] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 374.511918][ T8461] delete_channel: no stack [ 374.751529][ T8481] binder: 8473:8481 ioctl c0306201 0 returned -14 [ 374.952619][ T8457] usb 3-1: Using ep0 maxpacket: 16 [ 374.978819][ T8457] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 374.989346][ T8457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.000508][ T8457] usb 3-1: Product: syz [ 375.009131][ T8457] usb 3-1: Manufacturer: syz [ 375.031585][ T8457] usb 3-1: SerialNumber: syz [ 375.121037][ T8457] usb 3-1: config 0 descriptor?? [ 375.692119][ T8457] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 375.755457][ T8457] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.813667][ T8457] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 375.821676][ T8457] usb 3-1: media controller created [ 376.155786][ T8468] dtv5100: wlen = 0, aborting. [ 376.602180][ T8457] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.652892][ T8457] zl10353_read_register: readreg error (reg=127, ret==0) [ 376.660006][ T8457] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 376.692809][ T8457] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 376.736679][ T8457] usb 3-1: USB disconnect, device number 20 [ 377.142916][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 377.233419][ T8457] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 378.582252][ T4263] Bluetooth: hci4: command 0x0405 tx timeout [ 378.744295][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.750615][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.344629][ T8505] loop3: detected capacity change from 0 to 32768 [ 379.371290][ T8505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1275 (8505) [ 380.551131][ T8527] fuse: Bad value for 'rootmode' [ 380.708465][ T8532] program syz.1.1282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.691073][ T8540] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 381.700262][ T8540] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 381.732633][ T8531] delete_channel: no stack [ 385.262114][ T4620] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 385.557095][ T4620] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 385.575460][ T4620] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.603426][ T4620] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 385.618869][ T4620] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 385.627250][ T4620] usb 4-1: Manufacturer: syz [ 385.634081][ T4620] usb 4-1: config 0 descriptor?? [ 385.848516][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.872361][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.902181][ T4620] rc_core: IR keymap rc-hauppauge not found [ 385.914095][ T4620] Registered IR keymap rc-empty [ 385.919842][ T4620] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 385.969898][ T4620] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 386.157118][ T4620] usb 4-1: USB disconnect, device number 20 [ 386.597152][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 387.336857][ T8607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1305'. [ 387.375627][ T8607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1305'. [ 387.439269][ T8607] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1305'. [ 387.508240][ T8611] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20003 [ 388.935373][ T8631] binder: 8630:8631 ioctl 4018620d 0 returned -22 [ 392.472817][ T8664] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 393.452596][ T8683] binder: 8682:8683 ioctl c0306201 0 returned -14 [ 396.065066][ T8718] loop3: detected capacity change from 0 to 32768 [ 396.087634][ T8718] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.097855][ T8718] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 396.106639][ T8718] BTRFS info (device loop3): setting nodatacow, compression disabled [ 396.114777][ T8718] BTRFS info (device loop3): max_inline at 0 [ 396.120745][ T8718] BTRFS info (device loop3): enabling disk space caching [ 396.127818][ T8718] BTRFS info (device loop3): turning off barriers [ 396.134269][ T8718] BTRFS info (device loop3): turning on flush-on-commit [ 396.141219][ T8718] BTRFS info (device loop3): doing ref verification [ 396.147836][ T8718] BTRFS info (device loop3): force clearing of disk cache [ 396.155018][ T8718] BTRFS info (device loop3): enabling ssd optimizations [ 396.161952][ T8718] BTRFS info (device loop3): max_inline at 4096 [ 396.168570][ T8718] BTRFS info (device loop3): disk space caching is enabled [ 397.350759][ T8743] binder: 8741:8743 ioctl c0306201 0 returned -14 [ 397.472021][ T8718] BTRFS info (device loop3): rebuilding free space tree [ 397.511188][ T8718] BTRFS info (device loop3): disabling free space tree [ 397.518156][ T8718] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 397.527876][ T8718] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 397.654209][ T26] audit: type=1800 audit(1750899328.350:24): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1336" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 398.693087][ T4266] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 400.639545][ T8786] binder: 8784:8786 ioctl c0306201 0 returned -14 [ 401.900837][ T8798] loop1: detected capacity change from 0 to 32768 [ 401.935211][ T8798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1354 (8798) [ 401.953645][ T8798] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 401.964050][ T8798] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 401.972797][ T8798] BTRFS info (device loop1): setting nodatacow, compression disabled [ 401.980873][ T8798] BTRFS info (device loop1): max_inline at 0 [ 401.986888][ T8798] BTRFS info (device loop1): enabling disk space caching [ 401.994141][ T8798] BTRFS info (device loop1): turning off barriers [ 402.000535][ T8798] BTRFS info (device loop1): turning on flush-on-commit [ 402.007657][ T8798] BTRFS info (device loop1): doing ref verification [ 402.014346][ T8798] BTRFS info (device loop1): force clearing of disk cache [ 402.021467][ T8798] BTRFS info (device loop1): enabling ssd optimizations [ 402.028651][ T8798] BTRFS info (device loop1): max_inline at 4096 [ 402.034900][ T8798] BTRFS info (device loop1): disk space caching is enabled [ 402.868418][ T8798] BTRFS info (device loop1): rebuilding free space tree [ 402.883613][ T8798] BTRFS info (device loop1): disabling free space tree [ 402.890563][ T8798] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 402.900750][ T8798] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 403.040488][ T26] audit: type=1800 audit(1750899333.730:25): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1354" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 403.409857][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 403.593436][ T4298] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 403.792899][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.847558][ T4298] usb 1-1: config 0 has no interfaces? [ 403.905454][ T4298] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 403.958780][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.467582][ T4298] usb 1-1: config 0 descriptor?? [ 405.653637][ T8885] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1376'. [ 406.595560][ T8887] loop1: detected capacity change from 0 to 32768 [ 406.640577][ T8887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1377 (8887) [ 406.654563][ T8887] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 406.664731][ T8887] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 406.673458][ T8887] BTRFS info (device loop1): setting nodatacow, compression disabled [ 406.681557][ T8887] BTRFS info (device loop1): max_inline at 0 [ 406.687551][ T8887] BTRFS info (device loop1): enabling disk space caching [ 406.694592][ T8887] BTRFS info (device loop1): turning off barriers [ 406.701006][ T8887] BTRFS info (device loop1): turning on flush-on-commit [ 406.707951][ T8887] BTRFS info (device loop1): doing ref verification [ 406.714974][ T8887] BTRFS info (device loop1): force clearing of disk cache [ 406.722150][ T8887] BTRFS info (device loop1): enabling ssd optimizations [ 406.729151][ T8887] BTRFS info (device loop1): max_inline at 4096 [ 406.735449][ T8887] BTRFS info (device loop1): disk space caching is enabled [ 406.820171][ T4620] usb 1-1: USB disconnect, device number 10 [ 406.985705][ T8887] BTRFS info (device loop1): rebuilding free space tree [ 407.011600][ T8887] BTRFS info (device loop1): disabling free space tree [ 407.018626][ T8887] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 407.028746][ T8887] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 407.696002][ T26] audit: type=1800 audit(1750899338.390:26): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1377" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 408.719000][ T8928] netlink: 'syz.0.1387': attribute type 12 has an invalid length. [ 408.786494][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 410.753575][ T8957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1393'. [ 411.224254][ T8957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1393'. [ 411.343695][ T8959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1393'. [ 415.520574][ T9019] loop1: detected capacity change from 0 to 32768 [ 415.549518][ T9019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1417 (9019) [ 415.569077][ T9019] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 415.579487][ T9019] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 415.588240][ T9019] BTRFS info (device loop1): setting nodatacow, compression disabled [ 415.596399][ T9019] BTRFS info (device loop1): max_inline at 0 [ 415.602392][ T9019] BTRFS info (device loop1): enabling disk space caching [ 415.609396][ T9019] BTRFS info (device loop1): turning off barriers [ 415.615853][ T9019] BTRFS info (device loop1): turning on flush-on-commit [ 415.623183][ T9019] BTRFS info (device loop1): doing ref verification [ 415.629772][ T9019] BTRFS info (device loop1): force clearing of disk cache [ 415.636965][ T9019] BTRFS info (device loop1): enabling ssd optimizations [ 415.643940][ T9019] BTRFS info (device loop1): max_inline at 4096 [ 415.650162][ T9019] BTRFS info (device loop1): disk space caching is enabled [ 417.308845][ T9019] BTRFS info (device loop1): rebuilding free space tree [ 417.326836][ T9019] BTRFS info (device loop1): disabling free space tree [ 417.333805][ T9019] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 417.343493][ T9019] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 417.486995][ T26] audit: type=1800 audit(1750899348.180:27): pid=9021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1417" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 417.994839][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.321524][ T9148] binder: 9146:9148 ioctl c0306201 0 returned -14 [ 426.117216][ T9169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1463'. [ 426.157875][ T9169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1463'. [ 426.182687][ T9173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1463'. [ 426.426117][ T9180] binder: 9179:9180 ioctl c0306201 0 returned -14 [ 428.235450][ T9213] binder: 9211:9213 ioctl 4018620d 0 returned -22 [ 428.577028][ T9221] binder: 9219:9221 ioctl c0306201 0 returned -14 [ 431.181751][ T9258] binder: 9255:9258 ioctl 4018620d 0 returned -22 [ 431.438235][ T9262] affs: No valid root block on device nullb0 [ 432.133232][ T4263] Bluetooth: hci4: ACL packet too small [ 434.137184][ T9309] loop3: detected capacity change from 0 to 32768 [ 434.150243][ T9309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1510 (9309) [ 434.171900][ T9309] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 434.182257][ T9309] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 434.190972][ T9309] BTRFS info (device loop3): setting nodatacow, compression disabled [ 434.199195][ T9309] BTRFS info (device loop3): max_inline at 0 [ 434.205255][ T9309] BTRFS info (device loop3): enabling disk space caching [ 434.212338][ T9309] BTRFS info (device loop3): turning off barriers [ 434.218745][ T9309] BTRFS info (device loop3): turning on flush-on-commit [ 434.225754][ T9309] BTRFS info (device loop3): doing ref verification [ 434.232420][ T9309] BTRFS info (device loop3): force clearing of disk cache [ 434.239568][ T9309] BTRFS info (device loop3): enabling ssd optimizations [ 434.246690][ T9309] BTRFS info (device loop3): max_inline at 4096 [ 434.253016][ T9309] BTRFS info (device loop3): disk space caching is enabled [ 434.777026][ T9309] BTRFS info (device loop3): rebuilding free space tree [ 434.793523][ T9309] BTRFS info (device loop3): disabling free space tree [ 434.800451][ T9309] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 434.810184][ T9309] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 434.910145][ T26] audit: type=1800 audit(1750899365.600:28): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1510" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 435.442634][ T9347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1517'. [ 435.483749][ T9347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1517'. [ 435.495051][ T9348] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1517'. [ 435.517674][ T4266] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 435.809848][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 435.852514][ T9350] binder: 9349:9350 ioctl 4018620d 200000000040 returned -16 [ 436.402550][ T9369] Cannot find add_set index 0 as target [ 436.858068][ T4302] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 438.129515][ T9370] hugetlbfs: syz.3.1523 (9370): Using mlock ulimits for SHM_HUGETLB is obsolete [ 438.242337][ T4302] usb 2-1: device descriptor read/64, error -71 [ 438.872281][ T4302] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 439.476406][ T4302] usb 2-1: device descriptor read/64, error -71 [ 439.662392][ T4302] usb usb2-port1: attempt power cycle [ 439.825959][ T9385] block device autoloading is deprecated and will be removed. [ 440.184343][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.190799][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.647077][ T9382] loop2: detected capacity change from 0 to 32768 [ 440.659409][ T9382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1527 (9382) [ 440.694631][ T9382] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 440.704865][ T9382] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 440.714181][ T9382] BTRFS info (device loop2): setting nodatacow, compression disabled [ 440.722348][ T9382] BTRFS info (device loop2): max_inline at 0 [ 440.728316][ T9382] BTRFS info (device loop2): enabling disk space caching [ 440.735380][ T9382] BTRFS info (device loop2): turning off barriers [ 440.741814][ T9382] BTRFS info (device loop2): turning on flush-on-commit [ 440.749012][ T9382] BTRFS info (device loop2): doing ref verification [ 440.755647][ T9382] BTRFS info (device loop2): force clearing of disk cache [ 440.763003][ T9382] BTRFS info (device loop2): enabling ssd optimizations [ 440.769980][ T9382] BTRFS info (device loop2): max_inline at 4096 [ 440.776510][ T9382] BTRFS info (device loop2): disk space caching is enabled [ 440.802693][ T9382] BTRFS info (device loop2): rebuilding free space tree [ 440.821013][ T9382] BTRFS info (device loop2): disabling free space tree [ 440.827991][ T9382] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 440.837930][ T9382] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 440.964090][ T26] audit: type=1800 audit(1750899371.660:29): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1527" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 440.984621][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.320859][ T9412] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1531'. [ 441.339968][ T9412] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1531'. [ 441.383230][ T9415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1531'. [ 441.401866][ T4258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.633374][ T9417] binder: BINDER_SET_CONTEXT_MGR already set [ 441.639752][ T9417] binder: 9416:9417 ioctl 4018620d 200000000040 returned -16 [ 441.682133][ T4545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 13 /dev/loop2 scanned by udevd (4545) [ 443.742739][ T9434] syz.4.1537 (9434): attempted to duplicate a private mapping with mremap. This is not supported. [ 444.706499][ T9459] loop1: detected capacity change from 0 to 32768 [ 444.731998][ T9459] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 445.378536][ T9464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1543'. [ 445.388559][ T9464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1543'. [ 445.399163][ T9464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1543'. [ 445.705087][ T4540] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 447.149372][ T9496] loop1: detected capacity change from 0 to 32768 [ 447.161544][ T9496] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 13 [ 447.245026][ T4545] blk_print_req_error: 9 callbacks suppressed [ 447.245045][ T4545] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.091769][ T9533] loop0: detected capacity change from 0 to 32768 [ 451.122812][ T9541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1573'. [ 451.131849][ T9541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1573'. [ 451.144428][ T9533] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 13 [ 451.168190][ T9541] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1573'. [ 451.597249][ T9547] binder: BINDER_SET_CONTEXT_MGR already set [ 451.652613][ T9547] binder: 9546:9547 ioctl 4018620d 200000000040 returned -16 [ 452.596542][ T9547] binder: 9546:9547 ioctl c0306201 0 returned -14 [ 453.565664][ T4545] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 13 [ 453.607426][ T7655] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 453.830984][ T7655] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.876232][ T7655] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 453.941676][ T7655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.967302][ T7655] usb 1-1: Product: syz [ 453.983477][ T7655] usb 1-1: Manufacturer: syz [ 453.988369][ T7655] usb 1-1: SerialNumber: syz [ 454.055518][ T7655] usb 1-1: config 0 descriptor?? [ 454.217665][ T7655] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 454.276139][ T7655] usb 1-1: USB disconnect, device number 11 [ 454.307877][ T4540] udevd[4540]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.604404][ T9588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 457.613318][ T9588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.621005][ T9588] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.611887][ T9593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1588'. [ 458.632219][ T9593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1588'. [ 458.698570][ T9593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1588'. [ 459.623485][ T9597] loop2: detected capacity change from 0 to 32768 [ 459.659422][ T9597] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 459.669634][ T9597] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 459.678611][ T9597] BTRFS info (device loop2): setting nodatacow, compression disabled [ 459.686794][ T9597] BTRFS info (device loop2): max_inline at 0 [ 459.692829][ T9597] BTRFS info (device loop2): enabling disk space caching [ 459.699856][ T9597] BTRFS info (device loop2): turning off barriers [ 459.706415][ T9597] BTRFS info (device loop2): turning on flush-on-commit [ 459.713395][ T9597] BTRFS info (device loop2): doing ref verification [ 459.719975][ T9597] BTRFS info (device loop2): force clearing of disk cache [ 459.727152][ T9597] BTRFS info (device loop2): enabling ssd optimizations [ 459.734272][ T9597] BTRFS info (device loop2): max_inline at 4096 [ 459.740498][ T9597] BTRFS info (device loop2): disk space caching is enabled [ 460.006346][ T9620] binder: 9602:9620 ioctl c0306201 0 returned -14 [ 460.083300][ T9615] binder: BINDER_SET_CONTEXT_MGR already set [ 460.089439][ T9615] binder: 9602:9615 ioctl 4018620d 2000000000c0 returned -16 [ 460.845172][ T9597] BTRFS info (device loop2): rebuilding free space tree [ 460.856325][ T9597] BTRFS info (device loop2): disabling free space tree [ 460.863556][ T9597] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 460.873399][ T9597] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 461.012869][ T26] audit: type=1800 audit(1750899391.710:30): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1590" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 461.033335][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.355937][ T4258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 461.688566][ T4545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 13 /dev/loop2 scanned by udevd (4545) [ 462.001858][ T9647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1601'. [ 462.032329][ T9647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1601'. [ 462.083008][ T9647] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1601'. [ 463.974004][ T9652] netlink: 'syz.1.1602': attribute type 32 has an invalid length. [ 464.088885][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 464.437678][ T9673] binder: 9672:9673 ioctl c0306201 0 returned -14 [ 466.698627][ T9699] binder: 9697:9699 ioctl c0306201 0 returned -14 [ 467.882280][ T8863] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 468.072294][ T8863] usb 3-1: Using ep0 maxpacket: 8 [ 468.087607][ T8863] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 468.120551][ T8863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.183715][ T8863] pvrusb2: Hardware description: Terratec Grabster AV400 [ 468.201115][ T8863] pvrusb2: ********** [ 468.205731][ T8863] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 468.236644][ T8863] pvrusb2: Important functionality might not be entirely working. [ 468.251492][ T8863] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 468.267252][ T8863] pvrusb2: ********** [ 468.462845][ T2309] pvrusb2: Invalid write control endpoint [ 469.958992][ T9711] pvrusb2: Invalid write control endpoint [ 470.024726][ T4624] usb 3-1: USB disconnect, device number 21 [ 470.186780][ T2309] pvrusb2: Invalid write control endpoint [ 470.211804][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 470.245948][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 470.255745][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 470.665728][ T2309] pvrusb2: Device being rendered inoperable [ 472.978369][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 473.008110][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 473.201603][ T2309] pvrusb2: Attached sub-driver cx25840 [ 473.242213][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 473.422375][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 474.468877][ T9765] 8021q: VLANs not supported on sit0 [ 474.738737][ T9770] binder: 9769:9770 ioctl c0306201 0 returned -14 [ 474.862704][ T9772] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1640'. [ 475.504544][ T9773] use of bytesused == 0 is deprecated and will be removed in the future, [ 475.514004][ T9773] use the actual size instead. [ 475.861830][ T9773] vivid-000: kernel_thread() failed [ 477.391591][ T9783] o2cb: This node has not been configured. [ 477.397935][ T9783] o2cb: Cluster check failed. Fix errors before retrying. [ 477.405267][ T9783] (syz.3.1644,9783,1):user_dlm_register:674 ERROR: status = -22 [ 477.412953][ T9783] (syz.3.1644,9783,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 478.239726][ T9794] mkiss: ax0: crc mode is auto. [ 478.562704][ T9806] usb usb8: usbfs: process 9806 (syz.2.1649) did not claim interface 0 before use [ 479.388534][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 479.494034][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 479.592819][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1653'. [ 481.620345][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1663'. [ 481.630652][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1663'. [ 481.645749][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1663'. [ 483.126140][ T6270] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 484.165855][ T6270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.282857][ T6270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.293355][ T6270] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 484.302920][ T6270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.477231][ T6270] usb 5-1: config 0 descriptor?? [ 485.738823][ T6270] usbhid 5-1:0.0: can't add hid device: -71 [ 485.747474][ T6270] usbhid: probe of 5-1:0.0 failed with error -71 [ 485.765067][ T6270] usb 5-1: USB disconnect, device number 13 [ 485.836453][ T9880] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1676'. [ 485.856128][ T9880] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1676'. [ 485.894372][ T9882] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1676'. [ 488.077850][ T4614] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 488.509375][ T4614] usb 4-1: Using ep0 maxpacket: 8 [ 488.621550][ T4614] usb 4-1: config 0 has no interfaces? [ 488.962419][ T9918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1688'. [ 488.972482][ T9918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1688'. [ 489.017250][ T4614] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 489.036839][ T9918] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1688'. [ 489.070486][ T4614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.130863][ T4614] usb 4-1: Product: syz [ 489.137806][ T9920] binder: BINDER_SET_CONTEXT_MGR already set [ 489.146608][ T4614] usb 4-1: Manufacturer: syz [ 489.151284][ T4614] usb 4-1: SerialNumber: syz [ 489.151529][ T9920] binder: 9919:9920 ioctl 4018620d 200000000040 returned -16 [ 489.200854][ T4614] usb 4-1: config 0 descriptor?? [ 489.618810][ T9899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.639078][ T9899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.695599][ T9934] ------------[ cut here ]------------ [ 489.701773][ T9934] WARNING: CPU: 0 PID: 9934 at net/sched/sch_taprio.c:1020 taprio_get_start_time+0x139/0x160 [ 489.712398][ T9934] Modules linked in: [ 489.716429][ T9934] CPU: 0 PID: 9934 Comm: syz.1.1694 Not tainted 6.1.141-syzkaller #0 [ 489.724837][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.735098][ T9934] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 489.741434][ T9934] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cc 1f 86 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 a6 34 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 489.761791][ T9934] RSP: 0018:ffffc9000343ed88 EFLAGS: 00010287 [ 489.768101][ T9934] RAX: ffffffff884c2ff9 RBX: ffffc9000343ee98 RCX: 0000000000080000 [ 489.776403][ T9934] RDX: ffffc9000f7c6000 RSI: 0000000000002c86 RDI: 0000000000002c87 [ 489.784725][ T9934] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff211707b [ 489.793005][ T9934] R10: fffffbfff211707b R11: 1ffffffff211707a R12: 000000720221856f [ 489.801094][ T9934] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.809709][ T9934] FS: 00007f418b18b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 489.818969][ T9934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.825937][ T9934] CR2: 000000110c2e02e1 CR3: 000000001a2f2000 CR4: 00000000003506f0 [ 489.835277][ T9934] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 489.844602][ T9934] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 489.852838][ T9934] Call Trace: [ 489.856596][ T9934] [ 489.859608][ T9934] taprio_change+0x3daa/0x50f0 [ 489.864682][ T9934] ? taprio_destroy+0x4b0/0x4b0 [ 489.869597][ T9934] ? qdisc_create+0x7cb/0x1090 [ 489.874793][ T9934] ? ____sys_sendmsg+0x59b/0x970 [ 489.879810][ T9934] ? ___sys_sendmsg+0x21c/0x290 [ 489.884869][ T9934] ? __se_sys_sendmsg+0x19e/0x270 [ 489.890118][ T9934] ? do_syscall_64+0x4c/0xa0 [ 489.894971][ T9934] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.901224][ T9934] ? qdisc_alloc+0x95/0xa50 [ 489.906049][ T9934] ? fifo_init+0x3ab/0x650 [ 489.910585][ T9934] ? qdisc_peek_head+0x40/0x40 [ 489.915584][ T9934] ? qdisc_alloc+0x77a/0xa50 [ 489.920555][ T9934] ? mutex_is_locked+0xe/0x40 [ 489.925481][ T9934] ? taprio_peek+0x590/0x590 [ 489.930195][ T9934] qdisc_create+0x7cb/0x1090 [ 489.935701][ T9934] ? qdisc_notify+0x370/0x370 [ 489.940906][ T9934] tc_modify_qdisc+0xb0f/0x1be0 [ 489.947188][ T9934] ? qdisc_offload_query_caps+0x140/0x140 [ 489.953342][ T9934] ? qdisc_offload_query_caps+0x140/0x140 [ 489.959505][ T9934] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 489.965272][ T9934] rtnetlink_rcv_msg+0x79b/0xed0 [ 489.970412][ T9934] ? rtnetlink_bind+0x80/0x80 [ 489.975426][ T9934] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 489.981480][ T9934] ? lock_chain_count+0x20/0x20 [ 489.986513][ T9934] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 489.992634][ T9934] ? lockdep_hardirqs_on+0x94/0x140 [ 489.997882][ T9934] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 490.004178][ T9934] ? _raw_spin_unlock+0x40/0x40 [ 490.009196][ T9934] ? __dev_queue_xmit+0x15c9/0x3760 [ 490.014582][ T9934] ? rcu_preempt_deferred_qs_irqrestore+0x830/0xc00 [ 490.021221][ T9934] ? __dev_queue_xmit+0x26f/0x3760 [ 490.026491][ T9934] ? rcu_read_unlock_special+0x500/0x500 [ 490.032701][ T9934] ? __copy_skb_header+0x417/0x5a0 [ 490.037985][ T9934] netlink_rcv_skb+0x1de/0x420 [ 490.043683][ T9934] ? rtnetlink_bind+0x80/0x80 [ 490.048448][ T9934] ? netlink_ack+0x1100/0x1100 [ 490.053424][ T9934] ? __rcu_read_unlock+0x78/0xd0 [ 490.058501][ T9934] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.064902][ T9934] netlink_unicast+0x74c/0x8c0 [ 490.070276][ T9934] netlink_sendmsg+0x89e/0xbc0 [ 490.075256][ T9934] ? netlink_getsockopt+0x540/0x540 [ 490.080995][ T9934] ? aa_sock_msg_perm+0x94/0x150 [ 490.086369][ T9934] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 490.091802][ T9934] ? security_socket_sendmsg+0x7c/0xa0 [ 490.097746][ T9934] ? netlink_getsockopt+0x540/0x540 [ 490.103086][ T9934] ____sys_sendmsg+0x59b/0x970 [ 490.107997][ T9934] ? __sys_sendmsg_sock+0x30/0x30 [ 490.113189][ T9934] ? __import_iovec+0x315/0x500 [ 490.118219][ T9934] ? import_iovec+0x6f/0xa0 [ 490.122884][ T9934] ___sys_sendmsg+0x21c/0x290 [ 490.127626][ T9934] ? __sys_sendmsg+0x270/0x270 [ 490.132516][ T9934] ? futex_wake+0x409/0x4b0 [ 490.137119][ T9934] ? __ia32_sys_get_robust_list+0x80/0x80 [ 490.142956][ T9934] ? __fdget+0x146/0x200 [ 490.147267][ T9934] __se_sys_sendmsg+0x19e/0x270 [ 490.152209][ T9934] ? __se_sys_futex+0x14a/0x440 [ 490.157113][ T9934] ? __x64_sys_sendmsg+0x80/0x80 [ 490.162284][ T9934] ? lockdep_hardirqs_on+0x94/0x140 [ 490.167622][ T9934] do_syscall_64+0x4c/0xa0 [ 490.172245][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 490.177139][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 490.181889][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.188001][ T9934] RIP: 0033:0x7f418a38e929 [ 490.193148][ T9934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.213476][ T9934] RSP: 002b:00007f418b18b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.225106][ T9934] RAX: ffffffffffffffda RBX: 00007f418a5b6160 RCX: 00007f418a38e929 [ 490.234516][ T9934] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 490.243325][ T9934] RBP: 00007f418a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 490.251452][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.259845][ T9934] R13: 0000000000000000 R14: 00007f418a5b6160 R15: 00007ffd07d014b8 [ 490.268095][ T9934] [ 490.271223][ T9934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.278709][ T9934] CPU: 0 PID: 9934 Comm: syz.1.1694 Not tainted 6.1.141-syzkaller #0 [ 490.286847][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.296918][ T9934] Call Trace: [ 490.300254][ T9934] [ 490.303181][ T9934] dump_stack_lvl+0x168/0x22e [ 490.307891][ T9934] ? memcpy+0x3c/0x60 [ 490.312225][ T9934] ? show_regs_print_info+0x12/0x12 [ 490.317552][ T9934] ? load_image+0x3b0/0x3b0 [ 490.322275][ T9934] panic+0x2c9/0x710 [ 490.326207][ T9934] ? bpf_jit_dump+0xd0/0xd0 [ 490.330839][ T9934] ? __warn+0x2e0/0x4f0 [ 490.335033][ T9934] __warn+0x2f8/0x4f0 [ 490.339227][ T9934] ? taprio_get_start_time+0x139/0x160 [ 490.344843][ T9934] ? taprio_get_start_time+0x139/0x160 [ 490.350561][ T9934] report_bug+0x2ba/0x4f0 [ 490.355125][ T9934] ? taprio_get_start_time+0x139/0x160 [ 490.360706][ T9934] handle_bug+0x3a/0x70 [ 490.364890][ T9934] exc_invalid_op+0x16/0x40 [ 490.369396][ T9934] asm_exc_invalid_op+0x16/0x20 [ 490.374314][ T9934] RIP: 0010:taprio_get_start_time+0x139/0x160 [ 490.380401][ T9934] Code: 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cc 1f 86 f9 4c 89 23 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 77 a6 34 f9 <0f> 0b b8 f2 ff ff ff eb e7 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c [ 490.400759][ T9934] RSP: 0018:ffffc9000343ed88 EFLAGS: 00010287 [ 490.406826][ T9934] RAX: ffffffff884c2ff9 RBX: ffffc9000343ee98 RCX: 0000000000080000 [ 490.414878][ T9934] RDX: ffffc9000f7c6000 RSI: 0000000000002c86 RDI: 0000000000002c87 [ 490.422864][ T9934] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff211707b [ 490.430943][ T9934] R10: fffffbfff211707b R11: 1ffffffff211707a R12: 000000720221856f [ 490.439003][ T9934] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 490.446978][ T9934] ? taprio_get_start_time+0x139/0x160 [ 490.452475][ T9934] ? taprio_get_start_time+0x139/0x160 [ 490.457947][ T9934] taprio_change+0x3daa/0x50f0 [ 490.462718][ T9934] ? taprio_destroy+0x4b0/0x4b0 [ 490.467561][ T9934] ? qdisc_create+0x7cb/0x1090 [ 490.472523][ T9934] ? ____sys_sendmsg+0x59b/0x970 [ 490.477455][ T9934] ? ___sys_sendmsg+0x21c/0x290 [ 490.482318][ T9934] ? __se_sys_sendmsg+0x19e/0x270 [ 490.487363][ T9934] ? do_syscall_64+0x4c/0xa0 [ 490.491953][ T9934] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.498350][ T9934] ? qdisc_alloc+0x95/0xa50 [ 490.502980][ T9934] ? fifo_init+0x3ab/0x650 [ 490.507480][ T9934] ? qdisc_peek_head+0x40/0x40 [ 490.512352][ T9934] ? qdisc_alloc+0x77a/0xa50 [ 490.517508][ T9934] ? mutex_is_locked+0xe/0x40 [ 490.523571][ T9934] ? taprio_peek+0x590/0x590 [ 490.528389][ T9934] qdisc_create+0x7cb/0x1090 [ 490.533364][ T9934] ? qdisc_notify+0x370/0x370 [ 490.538079][ T9934] tc_modify_qdisc+0xb0f/0x1be0 [ 490.543032][ T9934] ? qdisc_offload_query_caps+0x140/0x140 [ 490.548891][ T9934] ? qdisc_offload_query_caps+0x140/0x140 [ 490.554739][ T9934] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 490.560037][ T9934] rtnetlink_rcv_msg+0x79b/0xed0 [ 490.564999][ T9934] ? rtnetlink_bind+0x80/0x80 [ 490.569691][ T9934] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 490.575782][ T9934] ? lock_chain_count+0x20/0x20 [ 490.580636][ T9934] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 490.586549][ T9934] ? lockdep_hardirqs_on+0x94/0x140 [ 490.591753][ T9934] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 490.597643][ T9934] ? _raw_spin_unlock+0x40/0x40 [ 490.602489][ T9934] ? __dev_queue_xmit+0x15c9/0x3760 [ 490.607805][ T9934] ? rcu_preempt_deferred_qs_irqrestore+0x830/0xc00 [ 490.614662][ T9934] ? __dev_queue_xmit+0x26f/0x3760 [ 490.619824][ T9934] ? rcu_read_unlock_special+0x500/0x500 [ 490.625885][ T9934] ? __copy_skb_header+0x417/0x5a0 [ 490.631009][ T9934] netlink_rcv_skb+0x1de/0x420 [ 490.636036][ T9934] ? rtnetlink_bind+0x80/0x80 [ 490.640730][ T9934] ? netlink_ack+0x1100/0x1100 [ 490.645523][ T9934] ? __rcu_read_unlock+0x78/0xd0 [ 490.650485][ T9934] ? netlink_deliver_tap+0x2e/0x1b0 [ 490.655693][ T9934] netlink_unicast+0x74c/0x8c0 [ 490.660552][ T9934] netlink_sendmsg+0x89e/0xbc0 [ 490.665321][ T9934] ? netlink_getsockopt+0x540/0x540 [ 490.670520][ T9934] ? aa_sock_msg_perm+0x94/0x150 [ 490.675539][ T9934] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 490.680835][ T9934] ? security_socket_sendmsg+0x7c/0xa0 [ 490.686306][ T9934] ? netlink_getsockopt+0x540/0x540 [ 490.691702][ T9934] ____sys_sendmsg+0x59b/0x970 [ 490.696572][ T9934] ? __sys_sendmsg_sock+0x30/0x30 [ 490.701597][ T9934] ? __import_iovec+0x315/0x500 [ 490.706463][ T9934] ? import_iovec+0x6f/0xa0 [ 490.711050][ T9934] ___sys_sendmsg+0x21c/0x290 [ 490.716168][ T9934] ? __sys_sendmsg+0x270/0x270 [ 490.720947][ T9934] ? futex_wake+0x409/0x4b0 [ 490.725553][ T9934] ? __ia32_sys_get_robust_list+0x80/0x80 [ 490.731360][ T9934] ? __fdget+0x146/0x200 [ 490.735608][ T9934] __se_sys_sendmsg+0x19e/0x270 [ 490.740459][ T9934] ? __se_sys_futex+0x14a/0x440 [ 490.745480][ T9934] ? __x64_sys_sendmsg+0x80/0x80 [ 490.750424][ T9934] ? lockdep_hardirqs_on+0x94/0x140 [ 490.755616][ T9934] do_syscall_64+0x4c/0xa0 [ 490.761011][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 490.765967][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 490.770666][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.776569][ T9934] RIP: 0033:0x7f418a38e929 [ 490.780983][ T9934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.800600][ T9934] RSP: 002b:00007f418b18b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.809019][ T9934] RAX: ffffffffffffffda RBX: 00007f418a5b6160 RCX: 00007f418a38e929 [ 490.817003][ T9934] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 490.824980][ T9934] RBP: 00007f418a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 490.832962][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.840937][ T9934] R13: 0000000000000000 R14: 00007f418a5b6160 R15: 00007ffd07d014b8 [ 490.848924][ T9934] [ 490.852290][ T9934] Kernel Offset: disabled [ 490.856704][ T9934] Rebooting in 86400 seconds..