last executing test programs: 14.966717367s ago: executing program 0 (id=922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x3, 0x81, 0x0, 0x3, "ad1b880cdc9bd88f571754546e9023b70a7ee6", 0x2, 0xe}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$alg(0x26, 0x5, 0x0) 11.64591587s ago: executing program 0 (id=926): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 11.389305802s ago: executing program 4 (id=928): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet(0x2b, 0x801, 0x0) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0), 0xc) r2 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 9.865294222s ago: executing program 2 (id=931): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) 9.767494013s ago: executing program 2 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 9.647599674s ago: executing program 2 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = dup(r0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000300)=0x4) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 9.402599326s ago: executing program 4 (id=935): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000002004000b70000000000007b8af8ff00000000b70800000002000000000000", @ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00c80de3d65332414ba4", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) dup(r2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x8001, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYRESDEC=r4, @ANYBLOB], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x34, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$alg(r6, &(0x7f0000000880)=""/92, 0x5c) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) 8.523332022s ago: executing program 2 (id=936): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x189080) unlink(&(0x7f00000001c0)='./file0\x00') madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) userfaultfd(0x80801) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 8.497316682s ago: executing program 0 (id=937): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/15, 0xf, 0xfff9, 0x0, 0x203}}, 0x11c) 8.201172634s ago: executing program 3 (id=938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x3, 0x81, 0x0, 0x3, "ad1b880cdc9bd88f571754546e9023b70a7ee6", 0x2, 0xe}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$alg(0x26, 0x5, 0x0) 6.710533214s ago: executing program 4 (id=940): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6.386673736s ago: executing program 1 (id=942): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000006c03000000000000224aa1b587cb00c2811a0911521bd46933a8ba8248d5e49fff020000000000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008740d3842b8538cd675b8b2982fc61", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) pwrite64(r0, &(0x7f0000000280)="68ddfa28d8f3ca78ed4c", 0xa, 0x8) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x5) accept4(r8, 0x0, 0x0, 0x0) 6.297281577s ago: executing program 3 (id=943): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000002004000b70000000000007b8af8ff00000000b70800000002000000000000", @ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00c80de3d65332414ba4", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) dup(r2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200), 0x0) 5.068166126s ago: executing program 4 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 3.800686574s ago: executing program 1 (id=945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c08}, 0x4008044) 3.729388534s ago: executing program 3 (id=946): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) fcntl$setpipe(r0, 0x407, 0x100000) 3.690780505s ago: executing program 1 (id=947): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = dup(r0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000300)=0x4) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 3.690457615s ago: executing program 4 (id=948): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 3.418432507s ago: executing program 0 (id=949): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x1, @rand_addr=' \x01\x00', @dev}}}}, 0x0) r2 = io_uring_setup(0x7bda, &(0x7f0000000080)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r1}, 0x38) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x40, 0x0) r6 = dup(r5) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, &(0x7f0000001640)={0x2020}, 0x2020) renameat2(r7, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00', 0x1) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000240)={0x0, 0x0, 0x186b4f52}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) 3.261596148s ago: executing program 2 (id=950): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000002004000b70000000000007b8af8ff00000000b70800000002000000000000", @ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00c80de3d65332414ba4", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) dup(r2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200), 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x8001, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYRESDEC=r4, @ANYBLOB], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="2ff8a81b133d", 0x0, 0x0, 0x34, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$alg(r6, &(0x7f0000000880)=""/92, 0x5c) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) 2.453814824s ago: executing program 4 (id=951): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_io_uring_setup(0x6cd5, &(0x7f0000000500)={0x0, 0x3, 0x0, 0x8000, 0x8b}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000180)={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x20) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000002c0)={0x2, 0x100, 0x7, {0x912e7128, 0x6, 0x403, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0xc004) ioperm(0x0, 0x2, 0x2) syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x8c11, 0x800, 0x3, 0xd4}, &(0x7f0000000240), &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 2.260291014s ago: executing program 1 (id=952): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}}, 0x4c}}, 0x20000080) 2.104708856s ago: executing program 3 (id=953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0)=0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00002b0000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x1, 0x3, 0x81, 0x0, 0x3, "ad1b880cdc9bd88f571754546e9023b70a7ee6", 0x2, 0xe}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$alg(0x26, 0x5, 0x0) 2.050580326s ago: executing program 1 (id=954): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.924547047s ago: executing program 0 (id=955): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.782633798s ago: executing program 0 (id=956): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000002004000b70000000000007b8af8ff00000000b70800000002000000000000", @ANYRES16=r0, @ANYBLOB="248cb6fd3cae9841342a91020a239b831aa49f3147853de0784db88acdc2bdd662f811bf6239c7cbb1cb5dd5f3f3f5c9f1f8c9ba4412e8c75da6ac7d342dc334c20f180790f910db7f3d381dae5a7d104561a1d80b392eb076165ec447533fcaccd8773160289a07020282d9cdf27d338872f9fb77d8248d882789fc6be4761995e690cd11241031cd29de391b8967d0e6b877aaeb5659d5a29028fa0c9b86a7b69cc723d1c7357cccf9653e13c2fe39f7dd0a9fdbe8118133bf6b9d85a98a5acefd522d9e018668516a3b00c80de3d65332414ba4", @ANYRESDEC=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) dup(r2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000200), 0x0) 1.212441942s ago: executing program 3 (id=957): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000006c03000000000000224aa1b587cb00c2811a0911521bd46933a8ba8248d5e49fff020000000000"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008740d3842b8538cd675b8b2982fc61", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r6, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) pwrite64(r0, &(0x7f0000000280)="68ddfa28d8f3ca78ed4c", 0xa, 0x8) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x5) accept4(r8, 0x0, 0x0, 0x0) 1.137124522s ago: executing program 1 (id=958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000e06850e0000000000000000000000070900020073797a3000000000050001000700007fa8bfb0e4defdcded15d58686aaf535610f8af342f0058309d38d2057f971ab11b055894230de45d1eb69321ff880b1e80af79d962055c5ff02ac4c72ce07ea7ba5428e34486fbafc525339ec6e7359ac60c07511fd4b483b79c846f5855f6cf611024cf2ef1409b7aaf4c3a088e469c45708e69b7728d9a32073594a71"], 0x28}, 0x1, 0x0, 0x0, 0xc040}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 963.630794ms ago: executing program 2 (id=959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x4d}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300)) setfsuid(0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_io_uring_setup(0x117, 0x0, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)='>', 0x1}], 0x1) 0s ago: executing program 3 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000006c03000000000000224aa1b587cb00c2811a0911521bd46933a8ba8248d5e49fff020000000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008740d3842b8538cd675b8b2982fc61", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(r7, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) pwrite64(r1, &(0x7f0000000280)="68ddfa28d8f3ca78ed4c", 0xa, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept4(r9, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): b 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.806900][ T4253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.831105][ T4253] usb 2-1: Product: syz [ 115.835501][ T4253] usb 2-1: Manufacturer: syz [ 115.849855][ T4253] usb 2-1: SerialNumber: syz [ 115.856532][ T4253] usb 2-1: config 0 descriptor?? [ 116.185232][ T4214] usb 2-1: USB disconnect, device number 3 [ 116.652268][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.661045][ T4764] dccp_close: ABORT with 56 bytes unread [ 116.671248][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.683690][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.691976][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.706493][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.717669][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.753598][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.762382][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.772175][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.780273][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.788496][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.809123][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.818297][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.838576][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 116.848053][ T4745] loop3: detected capacity change from 0 to 32768 [ 116.966113][ T4745] XFS: ikeep mount option is deprecated. [ 117.034181][ T23] hid-generic FFF9:0000:0203.0002: unknown main item tag 0x0 [ 117.075056][ T23] hid-generic FFF9:0000:0203.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 117.106553][ T4745] XFS (loop3): Mounting V5 Filesystem [ 117.417957][ T4745] XFS (loop3): Ending clean mount [ 117.446967][ T4745] XFS (loop3): Quotacheck needed: Please wait. [ 117.605630][ T4745] XFS (loop3): Quotacheck: Done. [ 117.900016][ T4167] XFS (loop3): Unmounting Filesystem [ 118.930252][ T4803] loop4: detected capacity change from 0 to 32768 [ 119.003151][ T4803] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.98 (4803) [ 119.047226][ T4803] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 119.098134][ T4803] BTRFS info (device loop4): force zlib compression, level 3 [ 119.114048][ T4803] BTRFS info (device loop4): force clearing of disk cache [ 119.202349][ T4803] BTRFS info (device loop4): setting nodatasum [ 119.222672][ T4803] BTRFS info (device loop4): doing ref verification [ 119.268278][ T4803] BTRFS info (device loop4): allowing degraded mounts [ 119.297769][ T4803] BTRFS info (device loop4): enabling disk space caching [ 119.305047][ T4803] BTRFS info (device loop4): disk space caching is enabled [ 119.312852][ T4803] BTRFS info (device loop4): has skinny extents [ 119.343906][ T4826] input: syz1 as /devices/virtual/input/input7 [ 119.414921][ T4834] trusted_key: encrypted_key: insufficient parameters specified [ 120.235497][ T4803] BTRFS info (device loop4): enabling ssd optimizations [ 120.284355][ T4803] BTRFS info (device loop4): clearing free space tree [ 120.349819][ T4803] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.425841][ T4803] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.910405][ T26] audit: type=1326 audit(1741385859.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.0.106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f095c96a169 code=0x0 [ 121.267733][ T4859] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.751238][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.758794][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.780624][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.788460][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.796788][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.805068][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.848813][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.864042][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.882035][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.890302][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.897911][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.916299][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.924396][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.937996][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 121.956023][ T21] hid-generic FFF9:0000:0203.0003: unknown main item tag 0x0 [ 122.007069][ T21] hid-generic FFF9:0000:0203.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.517549][ T4855] loop2: detected capacity change from 0 to 32768 [ 122.599776][ T4855] XFS: ikeep mount option is deprecated. [ 122.723990][ T4855] XFS (loop2): Mounting V5 Filesystem [ 122.740828][ T4863] loop0: detected capacity change from 0 to 32768 [ 122.769919][ T4863] XFS: ikeep mount option is deprecated. [ 122.844543][ T4863] XFS: ikeep mount option is deprecated. [ 122.851726][ T4855] XFS (loop2): Ending clean mount [ 122.896089][ T4855] XFS (loop2): Quotacheck needed: Please wait. [ 123.136897][ T4863] XFS (loop0): Mounting V5 Filesystem [ 124.196366][ T4855] XFS (loop2): Quotacheck: Done. [ 125.141516][ T4174] XFS (loop2): Unmounting Filesystem [ 125.506328][ T4863] XFS (loop0): Ending clean mount [ 125.524950][ T4863] XFS (loop0): Quotacheck needed: Please wait. [ 125.700100][ T4863] XFS (loop0): Quotacheck: Done. [ 125.751360][ T4179] XFS (loop0): Unmounting Filesystem [ 125.843478][ T4909] trusted_key: encrypted_key: insufficient parameters specified [ 126.342243][ T4908] loop1: detected capacity change from 0 to 32768 [ 126.619549][ T4911] loop4: detected capacity change from 0 to 32768 [ 126.825827][ T4911] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.121 (4911) [ 126.902846][ T4911] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.951927][ T4908] XFS (loop1): Mounting V5 Filesystem [ 126.961253][ T4911] BTRFS info (device loop4): force zlib compression, level 3 [ 127.036047][ T4911] BTRFS info (device loop4): force clearing of disk cache [ 127.088170][ T4911] BTRFS info (device loop4): setting nodatasum [ 127.105231][ T4911] BTRFS info (device loop4): doing ref verification [ 127.125606][ T4911] BTRFS info (device loop4): allowing degraded mounts [ 127.145881][ T4911] BTRFS info (device loop4): enabling disk space caching [ 127.168836][ T4911] BTRFS info (device loop4): disk space caching is enabled [ 127.198107][ T4908] XFS (loop1): Ending clean mount [ 127.207761][ T4908] XFS (loop1): Quotacheck needed: Please wait. [ 127.218877][ T4911] BTRFS info (device loop4): has skinny extents [ 127.289148][ T4908] XFS (loop1): Quotacheck: Done. [ 127.369170][ T26] audit: type=1804 audit(1741385865.560:3): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.119" name="/newroot/20/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 127.582572][ T4168] XFS (loop1): Unmounting Filesystem [ 127.588546][ T4911] BTRFS info (device loop4): enabling ssd optimizations [ 127.653650][ T4911] BTRFS info (device loop4): clearing free space tree [ 127.669166][ T4911] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.699409][ T4911] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.781964][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 128.795149][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 128.807057][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 128.825771][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 128.925354][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 128.965560][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.019516][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.059091][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.294246][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.358056][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.379121][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.697788][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.778932][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.789192][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.796642][ T21] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 129.805409][ T21] hid-generic FFF9:0000:0203.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.335195][ T4986] 9pnet_virtio: no channels available for device syz [ 130.555125][ T4988] netlink: 19 bytes leftover after parsing attributes in process `syz.4.129'. [ 131.111943][ T4997] trusted_key: encrypted_key: insufficient parameters specified [ 132.212304][ T4990] loop2: detected capacity change from 0 to 32768 [ 132.279202][ T4555] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.354262][ T4990] XFS (loop2): Mounting V5 Filesystem [ 132.442899][ T4990] XFS (loop2): Ending clean mount [ 132.614485][ T4990] XFS (loop2): Quotacheck needed: Please wait. [ 132.615709][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.659094][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.672342][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.705668][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.730043][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.738608][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.753525][ T4990] XFS (loop2): Quotacheck: Done. [ 132.759212][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.792222][ T26] audit: type=1804 audit(1741385870.990:4): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.130" name="/newroot/30/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 132.794985][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.816654][ T4555] usb 5-1: config 0 has no interfaces? [ 132.865052][ T26] audit: type=1804 audit(1741385871.030:5): pid=4990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.130" name="/newroot/30/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 132.869241][ T4999] loop0: detected capacity change from 0 to 32768 [ 132.911624][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.930447][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.945068][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.954667][ T5007] loop3: detected capacity change from 0 to 32768 [ 132.961618][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.964268][ T4999] XFS (loop0): Mounting V5 Filesystem [ 132.970235][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.970265][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.970288][ T21] hid-generic FFF9:0000:0203.0005: unknown main item tag 0x0 [ 132.971927][ T21] hid-generic FFF9:0000:0203.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 133.032461][ T5007] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.136 (5007) [ 133.051028][ T4555] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.060294][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.062825][ T4555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.067475][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084018][ T4555] usb 5-1: Product: syz [ 133.088218][ T4555] usb 5-1: Manufacturer: syz [ 133.098527][ T4555] usb 5-1: SerialNumber: syz [ 133.109615][ T4999] XFS (loop0): Ending clean mount [ 133.115823][ T4555] usb 5-1: config 0 descriptor?? [ 133.166544][ T4999] XFS (loop0): Quotacheck needed: Please wait. [ 133.220867][ T5007] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 133.234846][ T5007] BTRFS info (device loop3): force zlib compression, level 3 [ 133.242642][ T5007] BTRFS info (device loop3): force clearing of disk cache [ 133.243093][ T4174] XFS (loop2): Unmounting Filesystem [ 133.250425][ T5007] BTRFS info (device loop3): setting nodatasum [ 133.263811][ T5007] BTRFS info (device loop3): doing ref verification [ 133.297231][ T5007] BTRFS info (device loop3): allowing degraded mounts [ 133.305256][ T5007] BTRFS info (device loop3): enabling disk space caching [ 133.320879][ T4999] XFS (loop0): Quotacheck: Done. [ 133.357088][ T5007] BTRFS info (device loop3): disk space caching is enabled [ 133.402217][ T5004] loop4: detected capacity change from 0 to 512 [ 133.429302][ T5007] BTRFS info (device loop3): has skinny extents [ 133.487282][ T5004] ======================================================= [ 133.487282][ T5004] WARNING: The mand mount option has been deprecated and [ 133.487282][ T5004] and is ignored by this kernel. Remove the mand [ 133.487282][ T5004] option from the mount to silence this warning. [ 133.487282][ T5004] ======================================================= [ 133.655037][ T4179] XFS (loop0): Unmounting Filesystem [ 133.678917][ T5004] EXT4-fs (loop4): orphan cleanup on readonly fs [ 133.749457][ T5004] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.135: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 133.804923][ T5004] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.135: Bad quota inode: 4, type: 1 [ 133.834344][ T5004] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.851474][ T5004] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 133.858582][ T5004] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 133.950812][ T5004] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 134.129800][ T5007] BTRFS info (device loop3): enabling ssd optimizations [ 134.176496][ T5007] BTRFS info (device loop3): clearing free space tree [ 134.197811][ T5007] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.235859][ T5007] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.269763][ T5004] EXT4-fs warning (device loop4): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 134.269763][ T5004] [ 134.979475][ T5045] loop1: detected capacity change from 0 to 32768 [ 135.059864][ T5045] XFS: ikeep mount option is deprecated. [ 135.092929][ T5045] XFS: ikeep mount option is deprecated. [ 135.321891][ T5072] sctp: [Deprecated]: syz.3.142 (pid 5072) Use of int in max_burst socket option deprecated. [ 135.321891][ T5072] Use struct sctp_assoc_value instead [ 135.407575][ T5045] XFS (loop1): Mounting V5 Filesystem [ 135.623102][ T5082] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 135.779127][ T5045] XFS (loop1): Ending clean mount [ 135.812215][ T5045] XFS (loop1): Quotacheck needed: Please wait. [ 135.944635][ T5045] XFS (loop1): Quotacheck: Done. [ 136.043280][ T5049] ODEBUG: Out of memory. ODEBUG disabled [ 136.168764][ T4168] XFS (loop1): Unmounting Filesystem [ 136.236102][ T5087] trusted_key: encrypted_key: insufficient parameters specified [ 137.718149][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.737250][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.766997][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.842375][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.889290][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.933461][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.955830][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 137.977956][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.006870][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.047004][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.129177][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.139977][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.178735][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.312526][ T5049] Set syz1 is full, maxelem 65536 reached [ 138.399559][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.408802][ T4253] hid-generic FFF9:0000:0203.0006: unknown main item tag 0x0 [ 138.424089][ T4253] hid-generic FFF9:0000:0203.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 138.463130][ T5067] usb 5-1: USB disconnect, device number 2 [ 138.790355][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 139.093662][ T5115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 139.245050][ T5117] input: syz0 as /devices/virtual/input/input8 [ 140.284439][ T5119] loop2: detected capacity change from 0 to 32768 [ 140.415965][ T5119] XFS (loop2): Mounting V5 Filesystem [ 140.514517][ T5119] XFS (loop2): Ending clean mount [ 140.540192][ T5119] XFS (loop2): Quotacheck needed: Please wait. [ 140.742110][ T5126] loop1: detected capacity change from 0 to 32768 [ 140.751373][ T5119] XFS (loop2): Quotacheck: Done. [ 140.780802][ T26] audit: type=1804 audit(1741385878.980:6): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.157" name="/newroot/35/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 140.923949][ T4174] XFS (loop2): Unmounting Filesystem [ 141.014260][ T5126] XFS (loop1): Mounting V5 Filesystem [ 141.166757][ T5126] XFS (loop1): Ending clean mount [ 141.331420][ T5126] XFS (loop1): Quotacheck needed: Please wait. [ 141.351992][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.398413][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.403380][ T5126] XFS (loop1): Quotacheck: Done. [ 141.405976][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.428912][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.447286][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.458867][ T26] audit: type=1804 audit(1741385879.660:7): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.159" name="/newroot/27/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 141.464508][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.495122][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.503350][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.516732][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.524856][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.539214][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.546657][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.562155][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.573707][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.584000][ T4253] hid-generic FFF9:0000:0203.0007: unknown main item tag 0x0 [ 141.605030][ T4253] hid-generic FFF9:0000:0203.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 141.609141][ T26] audit: type=1804 audit(1741385879.800:8): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.159" name="/newroot/27/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 141.737566][ T4168] XFS (loop1): Unmounting Filesystem [ 141.755294][ T26] audit: type=1804 audit(1741385879.850:9): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.159" name="/newroot/27/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 141.847425][ T5161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.898400][ T5161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.045335][ T5164] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 142.692631][ T5172] trusted_key: encrypted_key: insufficient parameters specified [ 143.725571][ T5181] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 143.975995][ T4177] Bluetooth: hci5: sending frame failed (-49) [ 144.114971][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.139328][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.157251][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.157643][ T5197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 144.177519][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x3 [ 144.185450][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.194629][ T5198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.209149][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.251239][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.276253][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.310664][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.333369][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.352031][ T5195] netlink: 'syz.2.178': attribute type 4 has an invalid length. [ 144.374413][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.396838][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.438891][ T4253] hid-generic FFF9:0000:0203.0008: unknown main item tag 0x0 [ 144.500170][ T4253] hid-generic FFF9:0000:0203.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 145.877485][ T5183] loop0: detected capacity change from 0 to 32768 [ 145.999107][ T4182] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 146.011061][ T4555] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.141414][ T5223] trusted_key: encrypted_key: insufficient parameters specified [ 147.049562][ T5183] XFS (loop0): Mounting V5 Filesystem [ 147.099441][ T5183] XFS (loop0): log mount failed [ 147.338054][ T4555] usb 2-1: config 0 has no interfaces? [ 147.709467][ T4555] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.729067][ T4555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.741354][ T4555] usb 2-1: Product: syz [ 147.751382][ T4555] usb 2-1: Manufacturer: syz [ 147.776374][ T4555] usb 2-1: SerialNumber: syz [ 147.797635][ T4555] usb 2-1: config 0 descriptor?? [ 147.923572][ T5235] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 148.066754][ T5212] loop1: detected capacity change from 0 to 512 [ 148.163429][ T5212] EXT4-fs (loop1): orphan cleanup on readonly fs [ 148.189368][ T5212] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.184: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 148.258477][ T5212] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.184: Bad quota inode: 4, type: 1 [ 148.321577][ T5212] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.348399][ T5212] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 148.355781][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.370983][ T5212] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 149.012081][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.043279][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.063253][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.086871][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x3 [ 149.098367][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.110610][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.118556][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.127821][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.163814][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.194471][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.204288][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.214644][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.215315][ T5251] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.193'. [ 149.223415][ T21] hid-generic FFF9:0000:0203.0009: unknown main item tag 0x0 [ 149.253709][ T21] hid-generic FFF9:0000:0203.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 149.487848][ T5258] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.615633][ T5259] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 149.730817][ T23] lo speed is unknown, defaulting to 1000 [ 149.869447][ T5212] EXT4-fs warning (device loop1): ext4_multi_mount_protect:340: MMP startup interrupted, failing mount [ 149.869447][ T5212] [ 149.870534][ T13] usb 2-1: USB disconnect, device number 4 [ 149.909391][ T4739] Bluetooth: hci5: Frame reassembly failed (-84) [ 150.395302][ T5265] 9pnet_virtio: no channels available for device syz [ 150.486364][ T5274] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 150.556511][ T4739] Bluetooth: hci6: Frame reassembly failed (-84) [ 151.234959][ T5270] loop3: detected capacity change from 0 to 32768 [ 151.919368][ T4182] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 151.919406][ T23] Bluetooth: hci5: command 0xfc11 tx timeout [ 151.998522][ T5270] XFS (loop3): Mounting V5 Filesystem [ 152.324092][ T5270] XFS (loop3): Ending clean mount [ 152.403075][ T5270] XFS (loop3): Quotacheck needed: Please wait. [ 152.559334][ T4177] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 152.571361][ T4253] Bluetooth: hci6: command 0xfc11 tx timeout [ 152.826774][ T5305] trusted_key: encrypted_key: insufficient parameters specified [ 153.599926][ T5357] lo speed is unknown, defaulting to 1000 [ 153.605787][ T5357] lo speed is unknown, defaulting to 1000 [ 153.612483][ T5357] lo speed is unknown, defaulting to 1000 [ 153.625911][ T5357] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.632155][ T5270] XFS (loop3): Quotacheck: Done. [ 153.824150][ T4167] XFS (loop3): Unmounting Filesystem [ 153.965731][ T5361] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 154.173799][ T5357] lo speed is unknown, defaulting to 1000 [ 154.217576][ T5357] lo speed is unknown, defaulting to 1000 [ 154.235091][ T5366] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 154.318108][ T5357] lo speed is unknown, defaulting to 1000 [ 154.435732][ T5357] lo speed is unknown, defaulting to 1000 [ 154.490827][ T5357] lo speed is unknown, defaulting to 1000 [ 155.050599][ T5365] loop0: detected capacity change from 0 to 32768 [ 155.113666][ T5377] netlink: 84 bytes leftover after parsing attributes in process `syz.3.216'. [ 155.122980][ T4214] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.133484][ T5365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.211 (5365) [ 155.178297][ T5365] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.219288][ T5365] BTRFS info (device loop0): turning on flush-on-commit [ 155.250956][ T5365] BTRFS info (device loop0): doing ref verification [ 155.271425][ T5365] BTRFS info (device loop0): using free space tree [ 155.320919][ T5365] BTRFS info (device loop0): has skinny extents [ 155.389117][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 155.497162][ T5365] BTRFS info (device loop0): enabling ssd optimizations [ 155.509530][ T4214] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 155.529831][ T4214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 155.529913][ T4327] Bluetooth: hci5: Frame reassembly failed (-84) [ 155.543791][ T4214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.557959][ T4214] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.571283][ T4214] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.581237][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.799694][ T5404] trusted_key: encrypted_key: insufficient parameters specified [ 155.859619][ T4214] usb 2-1: GET_CAPABILITIES returned 0 [ 155.865835][ T4214] usbtmc 2-1:16.0: can't read capabilities [ 156.089217][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 156.104056][ T5373] usbtmc 2-1:16.0: Unable to send data, error -71 [ 156.122547][ T4214] usb 2-1: USB disconnect, device number 5 [ 156.902272][ T5464] capability: warning: `syz.1.226' uses deprecated v2 capabilities in a way that may be insecure [ 157.425882][ T5471] loop0: detected capacity change from 0 to 32768 [ 157.525000][ T5471] XFS (loop0): Mounting V5 Filesystem [ 157.575064][ T5471] XFS (loop0): Ending clean mount [ 157.586290][ T5471] XFS (loop0): Quotacheck needed: Please wait. [ 157.599195][ T4182] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 157.793963][ T5471] XFS (loop0): Quotacheck: Done. [ 157.812902][ T26] audit: type=1804 audit(1741385896.013:10): pid=5471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.222" name="/newroot/46/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 157.939780][ T4179] XFS (loop0): Unmounting Filesystem [ 160.649243][ T5550] 9pnet_virtio: no channels available for device syz [ 160.809112][ T5550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.238'. [ 160.913318][ T5490] loop1: detected capacity change from 0 to 32768 [ 161.052182][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.060854][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.068593][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.076730][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.084522][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.092138][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.099853][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.107667][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.115280][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.122917][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.130494][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.138077][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.226191][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.249094][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.265238][ T23] hid-generic FFF9:0000:0203.000A: unknown main item tag 0x0 [ 161.295670][ T23] hid-generic FFF9:0000:0203.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 161.539241][ T5556] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.435438][ T5582] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.615104][ T5582] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.651864][ T5572] loop1: detected capacity change from 0 to 32768 [ 163.745134][ T5582] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.790016][ T5572] XFS (loop1): Mounting V5 Filesystem [ 163.878176][ T5572] XFS (loop1): Ending clean mount [ 163.890979][ T5572] XFS (loop1): Quotacheck needed: Please wait. [ 164.010368][ T5582] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.037857][ T5572] XFS (loop1): Quotacheck: Done. [ 164.080777][ T26] audit: type=1804 audit(1741385902.283:11): pid=5572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.245" name="/newroot/45/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 164.218318][ T4168] XFS (loop1): Unmounting Filesystem [ 164.310769][ T5597] overlayfs: failed to resolve './file0': -2 [ 164.451692][ T5582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.495943][ T5582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.514750][ T5582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.531609][ T5582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.789246][ T4329] Bluetooth: hci5: Frame reassembly failed (-84) [ 164.808586][ T5596] loop0: detected capacity change from 0 to 32768 [ 164.975912][ T5596] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.250 (5596) [ 165.038346][ T5596] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 165.077517][ T5596] BTRFS info (device loop0): turning on flush-on-commit [ 165.105657][ T5596] BTRFS info (device loop0): doing ref verification [ 165.124935][ T5596] BTRFS info (device loop0): using free space tree [ 165.139689][ T5596] BTRFS info (device loop0): has skinny extents [ 165.398828][ T5596] BTRFS info (device loop0): enabling ssd optimizations [ 165.518119][ T5635] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 165.878853][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.891729][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.906270][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.915795][ T5643] device bridge_slave_1 left promiscuous mode [ 165.973074][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.384508][ T5643] bond0: (slave bond_slave_0): Releasing backup interface [ 166.448840][ T5643] bond0: (slave bond_slave_1): Releasing backup interface [ 166.602922][ T5643] team0: Port device team_slave_0 removed [ 166.647791][ T5643] team0: Port device team_slave_1 removed [ 166.663449][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.675254][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.719361][ T5643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.823115][ T5643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.837177][ T4182] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 166.841681][ T5647] trusted_key: encrypted_key: insufficient parameters specified [ 167.184878][ T5660] syz.3.264 uses obsolete (PF_INET,SOCK_PACKET) [ 167.209899][ T5645] bridge0: port 1(vlan2) entered blocking state [ 167.217888][ T5645] bridge0: port 1(vlan2) entered disabled state [ 167.233856][ T5645] device macsec0 entered promiscuous mode [ 167.245978][ T5645] bridge0: port 1(vlan2) entered blocking state [ 167.252423][ T5645] bridge0: port 1(vlan2) entered forwarding state [ 167.575775][ T5655] loop4: detected capacity change from 0 to 32768 [ 167.776830][ T5655] XFS (loop4): Mounting V5 Filesystem [ 167.826961][ T5655] XFS (loop4): Ending clean mount [ 167.887291][ T5655] XFS (loop4): Quotacheck needed: Please wait. [ 168.045409][ T5655] XFS (loop4): Quotacheck: Done. [ 168.090873][ T26] audit: type=1804 audit(1741385906.293:12): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.262" name="/newroot/58/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 168.206865][ T4171] XFS (loop4): Unmounting Filesystem [ 168.297700][ T5689] overlayfs: failed to resolve './file0': -2 [ 169.123777][ T5723] input: syz0 as /devices/virtual/input/input9 [ 170.051586][ T5733] trusted_key: encrypted_key: insufficient parameters specified [ 171.327983][ T5744] loop4: detected capacity change from 0 to 32768 [ 171.547135][ T5744] XFS (loop4): Mounting V5 Filesystem [ 171.660524][ T5744] XFS (loop4): Ending clean mount [ 171.676864][ T5744] XFS (loop4): Quotacheck needed: Please wait. [ 171.780670][ T5744] XFS (loop4): Quotacheck: Done. [ 171.832567][ T26] audit: type=1804 audit(1741385910.033:13): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.277" name="/newroot/62/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 172.112481][ T5785] trusted_key: encrypted_key: insufficient parameters specified [ 172.232390][ T26] audit: type=1804 audit(1741385910.343:14): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.277" name="/newroot/62/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 172.308528][ T4171] XFS (loop4): Unmounting Filesystem [ 172.399117][ T4182] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 172.399238][ T2238] Bluetooth: hci5: command 0xfc11 tx timeout [ 173.275292][ T4177] block nbd3: Receive control failed (result -32) [ 173.275302][ T4182] block nbd3: Receive control failed (result -32) [ 173.283962][ T5805] block nbd3: shutting down sockets [ 174.719158][ T4678] Bluetooth: hci4: command 0x0406 tx timeout [ 176.651806][ T4734] Bluetooth: hci5: Frame reassembly failed (-84) [ 178.300965][ T5868] loop3: detected capacity change from 0 to 32768 [ 178.417906][ T5868] XFS (loop3): Mounting V5 Filesystem [ 178.719097][ T4555] Bluetooth: hci5: command 0xfc11 tx timeout [ 178.719113][ T4177] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 178.817169][ T5868] XFS (loop3): Ending clean mount [ 178.834787][ T5868] XFS (loop3): Quotacheck needed: Please wait. [ 179.011268][ T5868] XFS (loop3): Quotacheck: Done. [ 179.106639][ T26] audit: type=1804 audit(1741385917.303:15): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.298" name="/newroot/57/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 179.195931][ T26] audit: type=1804 audit(1741385917.343:16): pid=5868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.298" name="/newroot/57/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 179.779157][ T4167] XFS (loop3): Unmounting Filesystem [ 180.543553][ T26] audit: type=1326 audit(1741385918.743:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56455e8169 code=0x7ffc0000 [ 180.707859][ T26] audit: type=1326 audit(1741385918.743:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56455e8169 code=0x7ffc0000 [ 181.169210][ T26] audit: type=1326 audit(1741385918.743:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f56455e8169 code=0x7ffc0000 [ 181.249238][ T26] audit: type=1326 audit(1741385918.793:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56455e8169 code=0x7ffc0000 [ 181.284173][ T26] audit: type=1326 audit(1741385918.793:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.4.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56455e8169 code=0x7ffc0000 [ 182.472963][ T5963] loop0: detected capacity change from 0 to 32768 [ 182.639160][ T5963] XFS (loop0): Mounting V5 Filesystem [ 182.713749][ T5963] XFS (loop0): Ending clean mount [ 182.722901][ T5963] XFS (loop0): Quotacheck needed: Please wait. [ 182.788899][ T5963] XFS (loop0): Quotacheck: Done. [ 182.841284][ T26] audit: type=1804 audit(1741385921.043:22): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.319" name="/newroot/63/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 182.935063][ T4179] XFS (loop0): Unmounting Filesystem [ 183.314601][ T5986] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 183.442655][ T5968] dccp_close: ABORT with 56 bytes unread [ 184.963679][ T6039] trusted_key: encrypted_key: insufficient parameters specified [ 185.057100][ T6025] netlink: 'syz.2.336': attribute type 12 has an invalid length. [ 185.127711][ T6025] Mount JFS Failure: -22 [ 185.537822][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'. [ 185.548221][ T6055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 185.584829][ T6056] tmpfs: Unknown parameter 'hugÁ~Ä’+UÐð1844674407370955161518446744073709551615ÿÿ' [ 186.344734][ T6051] loop4: detected capacity change from 0 to 32768 [ 186.419877][ T6051] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.342 (6051) [ 186.503743][ T6051] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 186.513537][ T6051] BTRFS info (device loop4): force zlib compression, level 3 [ 186.523483][ T6051] BTRFS info (device loop4): force clearing of disk cache [ 186.541179][ T6051] BTRFS info (device loop4): setting nodatasum [ 186.562613][ T6051] BTRFS info (device loop4): doing ref verification [ 186.584285][ T6051] BTRFS info (device loop4): allowing degraded mounts [ 186.606606][ T6051] BTRFS info (device loop4): enabling disk space caching [ 186.627019][ T6051] BTRFS info (device loop4): disk space caching is enabled [ 186.648859][ T6051] BTRFS info (device loop4): has skinny extents [ 186.858453][ T6051] BTRFS info (device loop4): enabling ssd optimizations [ 186.871399][ T6051] BTRFS info (device loop4): clearing free space tree [ 186.878738][ T6051] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 186.888749][ T6051] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 186.964913][ T6051] BTRFS info (device loop4): balance: start -d -m -s [ 186.983894][ T6051] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 187.212085][ T6051] BTRFS info (device loop4): balance: paused [ 187.588924][ T6108] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 187.979707][ T6108] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.291840][ T6098] loop0: detected capacity change from 0 to 32768 [ 188.488030][ T6125] input: syz0 as /devices/virtual/input/input10 [ 190.227439][ T6098] XFS (loop0): Mounting V5 Filesystem [ 190.307732][ T6098] XFS (loop0): log mount failed [ 190.909650][ T6153] netlink: 224 bytes leftover after parsing attributes in process `syz.3.364'. [ 190.920982][ T6153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 192.189324][ T6148] loop2: detected capacity change from 0 to 32768 [ 192.257436][ T6148] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.363 (6148) [ 192.344422][ T6148] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 192.379193][ T6148] BTRFS info (device loop2): force zlib compression, level 3 [ 192.438318][ T6148] BTRFS info (device loop2): force clearing of disk cache [ 192.477621][ T6148] BTRFS info (device loop2): setting nodatasum [ 192.517676][ T6148] BTRFS info (device loop2): doing ref verification [ 192.549003][ T6148] BTRFS info (device loop2): allowing degraded mounts [ 192.583634][ T6148] BTRFS info (device loop2): enabling disk space caching [ 192.616096][ T6148] BTRFS info (device loop2): disk space caching is enabled [ 192.654304][ T6148] BTRFS info (device loop2): has skinny extents [ 192.793410][ T6157] loop0: detected capacity change from 0 to 32768 [ 192.880639][ T6157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.365 (6157) [ 192.992621][ T6157] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 193.029262][ T6148] BTRFS info (device loop2): enabling ssd optimizations [ 193.037231][ T6157] BTRFS info (device loop0): turning on flush-on-commit [ 193.057160][ T6148] BTRFS info (device loop2): clearing free space tree [ 193.070359][ T1397] block nbd3: Attempted send on invalid socket [ 193.076663][ T1397] print_req_error: 40 callbacks suppressed [ 193.076679][ T1397] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.082765][ T6157] BTRFS info (device loop0): doing ref verification [ 193.100488][ T6148] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.101666][ T1397] block nbd3: Attempted send on invalid socket [ 193.116831][ T1397] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.138763][ T6196] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 193.159372][ T1397] block nbd3: Attempted send on invalid socket [ 193.165593][ T1397] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.179011][ T6196] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 193.179083][ T6148] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.196657][ T1397] block nbd3: Attempted send on invalid socket [ 193.205806][ T1397] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.217974][ T1397] block nbd3: Attempted send on invalid socket [ 193.224371][ T1397] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.229168][ T6157] BTRFS info (device loop0): using free space tree [ 193.236536][ T6196] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 193.253092][ T1397] block nbd3: Attempted send on invalid socket [ 193.259424][ T1397] blk_update_request: I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.272927][ T6196] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 193.284728][ T1397] block nbd3: Attempted send on invalid socket [ 193.291123][ T1397] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.302783][ T1397] block nbd3: Attempted send on invalid socket [ 193.309129][ T1397] blk_update_request: I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.309152][ T6157] BTRFS info (device loop0): has skinny extents [ 193.320876][ T6196] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 193.336888][ T1397] block nbd3: Attempted send on invalid socket [ 193.343415][ T1397] blk_update_request: I/O error, dev nbd3, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 193.354616][ T6196] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 193.364577][ T6196] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 193.409677][ T6175] loop1: detected capacity change from 0 to 32768 [ 193.561211][ T6157] BTRFS info (device loop0): enabling ssd optimizations [ 193.986688][ T6175] XFS (loop1): Mounting V5 Filesystem [ 194.033201][ T6157] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 194.102362][ T6175] XFS (loop1): Ending clean mount [ 194.122209][ T6175] XFS (loop1): Quotacheck needed: Please wait. [ 194.228415][ T6175] XFS (loop1): Quotacheck: Done. [ 194.286969][ T26] audit: type=1804 audit(1741385932.483:23): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.370" name="/newroot/64/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 194.487697][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.506227][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.549855][ T6234] block nbd2: shutting down sockets [ 194.669290][ T4168] XFS (loop1): Unmounting Filesystem [ 194.978506][ T6245] netlink: 'syz.3.380': attribute type 4 has an invalid length. [ 195.298715][ T6255] input: syz0 as /devices/virtual/input/input11 [ 195.732753][ T6273] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 195.794572][ T6273] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 195.795926][ T6275] [U] : [ 195.806360][ T6275] [U] [ 195.809273][ T6275] [U] [ 195.812010][ T6275] [U] [ 195.814732][ T6275] [U] [ 195.817488][ T6275] [U] [ 195.820263][ T6275] [U] [ 195.822972][ T6275] [U] [ 195.974602][ T6275] [U] [ 195.977385][ T6275] [U] [ 195.980116][ T6275] [U] [ 195.982835][ T6275] [U] [ 195.985550][ T6275] [U] [ 195.988269][ T6275] [U] [ 195.990988][ T6275] [U] [ 195.993711][ T6275] [U] [ 196.058496][ T6275] [U] [ 196.061268][ T6275] [U] [ 196.064000][ T6275] [U] [ 196.066745][ T6275] [U] [ 196.069485][ T6275] [U] [ 196.072207][ T6275] [U] [ 196.075048][ T6275] [U] [ 196.077773][ T6275] [U] [ 196.149097][ T6275] [U] [ 196.151886][ T6275] [U] [ 196.154622][ T6275] [U] [ 196.157339][ T6275] [U] [ 196.160053][ T6275] [U] [ 196.162769][ T6275] [U] [ 196.165486][ T6275] [U] [ 196.168296][ T6275] [U] [ 196.208751][ T6265] loop2: detected capacity change from 0 to 32768 [ 196.216743][ T6275] [U] [ 196.219479][ T6275] [U] [ 196.222199][ T6275] [U] [ 196.225134][ T6275] [U] [ 196.227858][ T6275] [U] [ 196.230584][ T6275] [U] [ 196.233302][ T6275] [U] [ 196.236108][ T6275] [U] [ 196.253855][ T6275] [U] [ 196.256652][ T6275] [U] [ 196.259368][ T6275] [U] [ 196.262131][ T6275] [U] [ 196.264840][ T6275] [U] [ 196.267596][ T6275] [U] [ 196.270508][ T6275] [U] [ 196.273511][ T6275] [U] [ 196.276268][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.284883][ T6275] [U] [ 196.287627][ T6275] [U] [ 196.290353][ T6275] [U] [ 196.293689][ T6275] [U] [ 196.296543][ T6275] [U] [ 196.299267][ T6275] [U] [ 196.302007][ T6275] [U] [ 196.304724][ T6275] [U] [ 196.307517][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.314208][ T6275] [U] [ 196.316942][ T6275] [U] [ 196.319699][ T6275] [U] [ 196.322433][ T6275] [U] [ 196.325151][ T6275] [U] [ 196.327869][ T6275] [U] [ 196.330586][ T6275] [U] [ 196.333306][ T6275] [U] [ 196.355088][ T6265] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.384 (6265) [ 196.375260][ T6275] [U] [ 196.378017][ T6275] [U] [ 196.380737][ T6275] [U] [ 196.383460][ T6275] [U] [ 196.386218][ T6275] [U] [ 196.386546][ T6266] loop1: detected capacity change from 0 to 32768 [ 196.388927][ T6275] [U] [ 196.398029][ T6275] [U] [ 196.400748][ T6275] [U] [ 196.417110][ T6265] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 196.426528][ T6265] BTRFS info (device loop2): turning on flush-on-commit [ 196.445990][ T6265] BTRFS info (device loop2): doing ref verification [ 196.452867][ T6265] BTRFS info (device loop2): using free space tree [ 196.459715][ T6275] [U] [ 196.462458][ T6275] [U] [ 196.465172][ T6275] [U] [ 196.467884][ T6275] [U] [ 196.470591][ T6275] [U] [ 196.473304][ T6275] [U] [ 196.476024][ T6275] [U] [ 196.478743][ T6275] [U] [ 196.493340][ T6270] loop4: detected capacity change from 0 to 32768 [ 196.495249][ T6265] BTRFS info (device loop2): has skinny extents [ 196.526483][ T6275] [U] [ 196.529261][ T6275] [U] [ 196.531987][ T6275] [U] [ 196.534720][ T6275] [U] [ 196.537433][ T6275] [U] [ 196.540149][ T6275] [U] [ 196.542886][ T6275] [U] [ 196.545602][ T6275] [U] [ 196.556557][ T6275] [U] [ 196.559127][ T4688] Bluetooth: hci0: command 0x0406 tx timeout [ 196.559305][ T6275] [U] [ 196.568104][ T4688] Bluetooth: hci2: command 0x0406 tx timeout [ 196.568157][ T6275] [U] [ 196.577168][ T6275] [U] [ 196.579886][ T6275] [U] [ 196.582604][ T6275] [U] [ 196.585316][ T6275] [U] [ 196.585672][ T4688] Bluetooth: hci3: command 0x0406 tx timeout [ 196.588023][ T6275] [U] [ 196.596680][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.611552][ T4246] Bluetooth: hci4: command 0x0406 tx timeout [ 196.617813][ T4246] Bluetooth: hci1: command 0x0406 tx timeout [ 196.630305][ T6275] [U] [ 196.633047][ T6275] [U] [ 196.635786][ T6275] [U] [ 196.638502][ T6275] [U] [ 196.641205][ T6275] [U] [ 196.643908][ T6275] [U] [ 196.646599][ T6275] [U] [ 196.649318][ T6275] [U] [ 196.655521][ T6266] XFS (loop1): Mounting V5 Filesystem [ 196.697027][ T6266] XFS (loop1): Ending clean mount [ 196.697225][ T6270] XFS (loop4): Mounting V5 Filesystem [ 196.707850][ T6266] XFS (loop1): Quotacheck needed: Please wait. [ 196.764259][ T6275] [U] [ 196.767019][ T6275] [U] [ 196.769738][ T6275] [U] [ 196.772441][ T6275] [U] [ 196.775128][ T6275] [U] [ 196.777821][ T6275] [U] [ 196.780526][ T6275] [U] [ 196.783267][ T6275] [U] [ 196.788507][ T6266] XFS (loop1): Quotacheck: Done. [ 196.803776][ T6270] XFS (loop4): Ending clean mount [ 196.812229][ T6275] [U] [ 196.837614][ T26] audit: type=1804 audit(1741385935.033:24): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.375" name="/newroot/65/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 196.860406][ T6270] XFS (loop4): Quotacheck needed: Please wait. [ 196.897753][ T6265] BTRFS info (device loop2): enabling ssd optimizations [ 196.981153][ T6270] XFS (loop4): Quotacheck: Done. [ 197.046486][ T26] audit: type=1804 audit(1741385935.243:25): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.385" name="/newroot/86/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 197.095037][ T4168] XFS (loop1): Unmounting Filesystem [ 197.337675][ T4171] XFS (loop4): Unmounting Filesystem [ 199.315466][ T6362] [U] : [ 199.318306][ T6362] [U] [ 199.321021][ T6362] [U] [ 199.323744][ T6362] [U] [ 199.326461][ T6362] [U] [ 199.329186][ T6362] [U] [ 199.331904][ T6362] [U] [ 199.334622][ T6362] [U] [ 199.388867][ T6362] [U] [ 199.391651][ T6362] [U] [ 199.394375][ T6362] [U] [ 199.397089][ T6362] [U] [ 199.399799][ T6362] [U] [ 199.402510][ T6362] [U] [ 199.405225][ T6362] [U] [ 199.407940][ T6362] [U] [ 199.433516][ T6362] [U] [ 199.436266][ T6362] [U] [ 199.439002][ T6362] [U] [ 199.441714][ T6362] [U] [ 199.444430][ T6362] [U] [ 199.447140][ T6362] [U] [ 199.449853][ T6362] [U] [ 199.452570][ T6362] [U] [ 199.475673][ T4178] block nbd0: Receive control failed (result -32) [ 199.484520][ T6357] block nbd0: shutting down sockets [ 199.539145][ T6362] [U] [ 199.541902][ T6362] [U] [ 199.544627][ T6362] [U] [ 199.547334][ T6362] [U] [ 199.550048][ T6362] [U] [ 199.552753][ T6362] [U] [ 199.555454][ T6362] [U] [ 199.558145][ T6362] [U] [ 199.567504][ T6364] netlink: 'syz.2.401': attribute type 4 has an invalid length. [ 199.608685][ T6362] [U] [ 199.611435][ T6362] [U] [ 199.614181][ T6362] [U] [ 199.616887][ T6362] [U] [ 199.619586][ T6362] [U] [ 199.622386][ T6362] [U] [ 199.625068][ T6362] [U] [ 199.627752][ T6362] [U] [ 199.669213][ T6362] [U] [ 199.671976][ T6362] [U] [ 199.674692][ T6362] [U] [ 199.677402][ T6362] [U] [ 199.680193][ T6362] [U] [ 199.682951][ T6362] [U] [ 199.685696][ T6362] [U] [ 199.688412][ T6362] [U] [ 199.735532][ T6362] [U] [ 199.738321][ T6362] [U] [ 199.741086][ T6362] [U] [ 199.743910][ T6362] [U] [ 199.746609][ T6362] [U] [ 199.749313][ T6362] [U] [ 199.752010][ T6362] [U] [ 199.754719][ T6362] [U] [ 199.840170][ T6362] [U] [ 199.842916][ T6362] [U] [ 199.845658][ T6362] [U] [ 199.848345][ T6362] [U] [ 199.851055][ T6362] [U] [ 199.853762][ T6362] [U] [ 199.856444][ T6362] [U] [ 199.859145][ T6362] [U] [ 199.949992][ T6362] [U] [ 199.952734][ T6362] [U] [ 199.955427][ T6362] [U] [ 199.958115][ T6362] [U] [ 199.960800][ T6362] [U] [ 199.963578][ T6362] [U] [ 199.966264][ T6362] [U] [ 199.968968][ T6362] [U] [ 200.053384][ T6362] [U] [ 200.056235][ T6362] [U] [ 200.058931][ T6362] [U] [ 200.061651][ T6362] [U] [ 200.064365][ T6362] [U] [ 200.067066][ T6362] [U] [ 200.069889][ T6362] [U] [ 200.072618][ T6362] [U] [ 200.166207][ T6362] [U] [ 200.168962][ T6362] [U] [ 200.171689][ T6362] [U] [ 200.174499][ T6362] [U] [ 200.177223][ T6362] [U] [ 200.179940][ T6362] [U] [ 200.182785][ T6362] [U] [ 200.185496][ T6362] [U] [ 200.190198][ T6362] [U] [ 200.192932][ T6362] [U] [ 200.195647][ T6362] [U] [ 200.198376][ T6362] [U] [ 200.201120][ T6362] [U] [ 200.203842][ T6362] [U] [ 200.206650][ T6362] [U] [ 200.209364][ T6362] [U] [ 200.213329][ T6362] [U] [ 200.216068][ T6362] [U] [ 200.218816][ T6362] [U] [ 200.221579][ T6362] [U] [ 200.224289][ T6362] [U] [ 200.227001][ T6362] [U] [ 200.229751][ T6362] [U] [ 200.232469][ T6362] [U] [ 200.246793][ T6362] [U] [ 200.249522][ T6362] [U] [ 200.252315][ T6362] [U] [ 200.254994][ T6362] [U] [ 200.257688][ T6362] [U] [ 200.260377][ T6362] [U] [ 200.263071][ T6362] [U] [ 200.265758][ T6362] [U] [ 200.368286][ T6362] [U] [ 200.371082][ T6362] [U] [ 200.373894][ T6362] [U] [ 200.376628][ T6362] [U] [ 200.379339][ T6362] [U] [ 200.382052][ T6362] [U] [ 200.384763][ T6362] [U] [ 200.387469][ T6362] [U] [ 200.452981][ T6366] loop3: detected capacity change from 0 to 32768 [ 200.502399][ T6366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.403 (6366) [ 200.509865][ T6362] [U] [ 200.584373][ T6366] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 200.623212][ T6366] BTRFS info (device loop3): turning on flush-on-commit [ 200.655085][ T6366] BTRFS info (device loop3): doing ref verification [ 200.695604][ T6366] BTRFS info (device loop3): using free space tree [ 200.715633][ T6374] loop0: detected capacity change from 0 to 32768 [ 200.715887][ T6366] BTRFS info (device loop3): has skinny extents [ 200.759227][ T6385] block nbd4: shutting down sockets [ 200.882476][ T6374] XFS (loop0): Mounting V5 Filesystem [ 200.902167][ T6390] input: syz0 as /devices/virtual/input/input12 [ 201.150192][ T6374] XFS (loop0): Ending clean mount [ 201.158423][ T6374] XFS (loop0): Quotacheck needed: Please wait. [ 201.348252][ T6366] BTRFS info (device loop3): enabling ssd optimizations [ 201.399737][ T6374] XFS (loop0): Quotacheck: Done. [ 201.872206][ T6400] dccp_close: ABORT with 56 bytes unread [ 201.899343][ T26] audit: type=1804 audit(1741385940.103:26): pid=6374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.405" name="/newroot/75/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 202.016797][ T4179] XFS (loop0): Unmounting Filesystem [ 202.046922][ T6420] loop1: detected capacity change from 0 to 32768 [ 202.138053][ T6420] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.413 (6420) [ 202.356958][ T6420] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 202.369997][ T6420] BTRFS info (device loop1): force zlib compression, level 3 [ 202.378297][ T6420] BTRFS info (device loop1): force clearing of disk cache [ 202.386364][ T6420] BTRFS info (device loop1): setting nodatasum [ 202.393400][ T6420] BTRFS info (device loop1): doing ref verification [ 202.400758][ T6420] BTRFS info (device loop1): allowing degraded mounts [ 202.440849][ T6420] BTRFS info (device loop1): enabling disk space caching [ 202.499245][ T6420] BTRFS info (device loop1): disk space caching is enabled [ 202.697843][ T6420] BTRFS info (device loop1): has skinny extents [ 203.085733][ T6420] BTRFS info (device loop1): enabling ssd optimizations [ 203.104171][ T6420] BTRFS info (device loop1): clearing free space tree [ 203.117973][ T6420] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 203.149149][ T6420] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 203.313930][ T6420] BTRFS info (device loop1): balance: start -d -m -s [ 203.354112][ T6420] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 203.635538][ T6420] BTRFS info (device loop1): balance: paused [ 204.106380][ T6508] input: syz0 as /devices/virtual/input/input13 [ 204.970102][ T6541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 206.503850][ T6563] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.538737][ T6563] netlink: 'syz.3.435': attribute type 4 has an invalid length. [ 206.561230][ T6531] input: syz1 as /devices/virtual/input/input14 [ 206.989406][ T6573] tmpfs: Unknown parameter 'hugÁ~Ä’+UÐð1844674407370955161518446744073709551615ÿÿ' [ 207.023012][ T6554] loop0: detected capacity change from 0 to 32768 [ 207.137491][ T6554] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.434 (6554) [ 207.245427][ T6554] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 207.529362][ T6554] BTRFS info (device loop0): force zlib compression, level 3 [ 207.771773][ T6554] BTRFS info (device loop0): force clearing of disk cache [ 207.787290][ T6554] BTRFS info (device loop0): setting nodatasum [ 207.843310][ T6554] BTRFS info (device loop0): doing ref verification [ 207.890466][ T6554] BTRFS info (device loop0): allowing degraded mounts [ 207.943603][ T6554] BTRFS info (device loop0): enabling disk space caching [ 208.030383][ T6554] BTRFS info (device loop0): disk space caching is enabled [ 208.096195][ T6554] BTRFS info (device loop0): has skinny extents [ 208.269257][ T6590] input: syz0 as /devices/virtual/input/input15 [ 208.413721][ T4918] udevd[4918]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 208.655495][ T6554] BTRFS info (device loop0): enabling ssd optimizations [ 208.697417][ T6554] BTRFS info (device loop0): clearing free space tree [ 208.729262][ T6554] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.739321][ T6554] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.043441][ T6554] BTRFS info (device loop0): balance: start -d -m -s [ 209.629111][ T6631] netlink: 224 bytes leftover after parsing attributes in process `syz.1.444'. [ 209.638151][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 210.228732][ T6554] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 211.054879][ T6554] BTRFS info (device loop0): balance: paused [ 211.871206][ T6651] netlink: 'syz.1.448': attribute type 4 has an invalid length. [ 212.229493][ T6664] input: syz0 as /devices/virtual/input/input16 [ 215.029139][ T6723] trusted_key: encrypted_key: insufficient parameters specified [ 217.820982][ T6726] loop2: detected capacity change from 0 to 32768 [ 217.846339][ T6734] loop1: detected capacity change from 0 to 32768 [ 217.871929][ T6745] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 217.918219][ T6734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.465 (6734) [ 217.978078][ T6734] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 218.008222][ T6734] BTRFS info (device loop1): turning on flush-on-commit [ 218.033472][ T6726] XFS (loop2): Mounting V5 Filesystem [ 218.085394][ T6734] BTRFS info (device loop1): doing ref verification [ 218.105647][ T6734] BTRFS info (device loop1): using free space tree [ 218.146267][ T6734] BTRFS info (device loop1): has skinny extents [ 218.183716][ T6726] XFS (loop2): Ending clean mount [ 218.192784][ T6726] XFS (loop2): Quotacheck needed: Please wait. [ 218.256240][ T6726] XFS (loop2): Quotacheck: Done. [ 218.305433][ T26] audit: type=1804 audit(1741385956.503:27): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.462" name="/newroot/105/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 218.354767][ T26] audit: type=1804 audit(1741385956.553:28): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.462" name="/newroot/105/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 218.379459][ T6734] BTRFS info (device loop1): enabling ssd optimizations [ 218.400469][ T26] audit: type=1804 audit(1741385956.603:29): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.462" name="/newroot/105/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 218.468778][ T4174] XFS (loop2): Unmounting Filesystem [ 219.155344][ T6784] input: syz0 as /devices/virtual/input/input17 [ 220.130920][ T6810] trusted_key: encrypted_key: insufficient parameters specified [ 221.907683][ T6814] loop1: detected capacity change from 0 to 32768 [ 221.950700][ T6816] loop3: detected capacity change from 0 to 32768 [ 221.991950][ T6814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.482 (6814) [ 222.040694][ T6814] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 222.109099][ T6814] BTRFS info (device loop1): turning on flush-on-commit [ 222.155798][ T6814] BTRFS info (device loop1): doing ref verification [ 222.168654][ T6816] XFS (loop3): Mounting V5 Filesystem [ 222.196434][ T6814] BTRFS info (device loop1): using free space tree [ 222.239112][ T6814] BTRFS info (device loop1): has skinny extents [ 222.396002][ T6816] XFS (loop3): Ending clean mount [ 222.417779][ T6816] XFS (loop3): Quotacheck needed: Please wait. [ 222.547251][ T6816] XFS (loop3): Quotacheck: Done. [ 222.623116][ T26] audit: type=1804 audit(1741385960.823:30): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.481" name="/newroot/97/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 222.689110][ T6814] BTRFS info (device loop1): enabling ssd optimizations [ 222.790118][ T26] audit: type=1804 audit(1741385960.923:31): pid=6856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.481" name="/newroot/97/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 222.869944][ T4167] XFS (loop3): Unmounting Filesystem [ 223.458000][ T6869] overlayfs: failed to resolve './file0': -2 [ 223.713769][ T6872] input: syz0 as /devices/virtual/input/input18 [ 224.645606][ T6890] netlink: 224 bytes leftover after parsing attributes in process `syz.1.496'. [ 224.655240][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.496'. [ 224.693858][ T4177] block nbd0: Receive control failed (result -32) [ 224.693865][ T4178] block nbd0: Receive control failed (result -32) [ 224.707827][ T6875] block nbd0: shutting down sockets [ 225.535438][ T6896] loop3: detected capacity change from 0 to 32768 [ 225.558498][ T6907] input: syz0 as /devices/virtual/input/input19 [ 225.667391][ T6896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.499 (6896) [ 225.879309][ T6896] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 225.909180][ T6896] BTRFS info (device loop3): turning on flush-on-commit [ 225.916193][ T6896] BTRFS info (device loop3): doing ref verification [ 225.973349][ T6896] BTRFS info (device loop3): using free space tree [ 225.994606][ T6896] BTRFS info (device loop3): has skinny extents [ 226.318047][ T6896] BTRFS info (device loop3): enabling ssd optimizations [ 226.450059][ T6933] overlayfs: failed to resolve './file0': -2 [ 228.348601][ T6949] netlink: 224 bytes leftover after parsing attributes in process `syz.3.508'. [ 228.398246][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.508'. [ 229.458391][ T6964] loop2: detected capacity change from 0 to 32768 [ 229.554541][ T6964] XFS (loop2): Mounting V5 Filesystem [ 229.595192][ T6964] XFS (loop2): Ending clean mount [ 229.604139][ T6964] XFS (loop2): Quotacheck needed: Please wait. [ 229.658085][ T6964] XFS (loop2): Quotacheck: Done. [ 229.690730][ T26] audit: type=1804 audit(1741385967.893:32): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.513" name="/newroot/112/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 229.732847][ T26] audit: type=1804 audit(1741385967.923:33): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.513" name="/newroot/112/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 229.891458][ T4174] XFS (loop2): Unmounting Filesystem [ 230.516116][ T6995] overlayfs: failed to resolve './file0': -2 [ 230.962675][ T6977] loop4: detected capacity change from 0 to 32768 [ 231.012169][ T6977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.515 (6977) [ 231.215717][ T6977] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 231.229277][ T6977] BTRFS info (device loop4): turning on flush-on-commit [ 231.260428][ T6977] BTRFS info (device loop4): doing ref verification [ 231.267084][ T6977] BTRFS info (device loop4): using free space tree [ 231.309107][ T6977] BTRFS info (device loop4): has skinny extents [ 231.550602][ T7018] trusted_key: encrypted_key: insufficient parameters specified [ 231.736496][ T6977] BTRFS info (device loop4): enabling ssd optimizations [ 231.792658][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'. [ 233.054618][ T7041] input: syz0 as /devices/virtual/input/input20 [ 234.838317][ T7048] loop0: detected capacity change from 0 to 32768 [ 235.021511][ T7048] XFS (loop0): Mounting V5 Filesystem [ 235.193654][ T7048] XFS (loop0): Ending clean mount [ 235.200808][ T7048] XFS (loop0): Quotacheck needed: Please wait. [ 235.475599][ T7048] XFS (loop0): Quotacheck: Done. [ 235.624917][ T26] audit: type=1804 audit(1741385973.823:34): pid=7048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.529" name="/newroot/94/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 235.693131][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 235.724099][ T7063] overlayfs: failed to resolve './file0': -2 [ 235.760007][ T26] audit: type=1804 audit(1741385973.933:35): pid=7081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.529" name="/newroot/94/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 235.997699][ T4179] XFS (loop0): Unmounting Filesystem [ 236.054314][ T7065] loop3: detected capacity change from 0 to 32768 [ 236.171245][ T7065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.535 (7065) [ 236.448000][ T7086] trusted_key: encrypted_key: insufficient parameters specified [ 236.520360][ T7065] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 236.626839][ T7065] BTRFS info (device loop3): turning on flush-on-commit [ 236.675607][ T7065] BTRFS info (device loop3): doing ref verification [ 236.745729][ T7065] BTRFS info (device loop3): using free space tree [ 236.793854][ T7065] BTRFS info (device loop3): has skinny extents [ 237.915926][ T7065] BTRFS error (device loop3): open_ctree failed [ 237.958000][ T7114] input: syz0 as /devices/virtual/input/input21 [ 239.958179][ T7132] overlayfs: failed to resolve './file0': -2 [ 241.437543][ T7179] input: syz0 as /devices/virtual/input/input22 [ 242.515027][ T7192] netlink: 'syz.1.562': attribute type 12 has an invalid length. [ 242.568331][ T7197] Mount JFS Failure: -22 [ 244.195237][ T7196] overlayfs: failed to resolve './file0': -2 [ 244.225009][ T7215] trusted_key: encrypted_key: insufficient parameters specified [ 244.661831][ T7233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.569'. [ 244.671251][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.569'. [ 244.688297][ T7233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.999122][ T7242] netlink: 224 bytes leftover after parsing attributes in process `syz.0.571'. [ 246.008146][ T7242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.571'. [ 247.540139][ T26] audit: type=1326 audit(1741385985.743:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 247.695591][ T7249] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 247.707147][ T7249] XFS (loop2): SB validate failed with error -5. [ 247.734970][ T26] audit: type=1326 audit(1741385985.773:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f095c961127 code=0x7ffc0000 [ 247.812659][ T26] audit: type=1326 audit(1741385985.773:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f095c906359 code=0x7ffc0000 [ 247.925667][ T26] audit: type=1326 audit(1741385985.773:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f095c961127 code=0x7ffc0000 [ 248.042844][ T26] audit: type=1326 audit(1741385985.773:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f095c906359 code=0x7ffc0000 [ 248.183776][ T26] audit: type=1326 audit(1741385985.783:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 248.343834][ T26] audit: type=1326 audit(1741385985.783:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 248.484732][ T26] audit: type=1326 audit(1741385985.793:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f095c961127 code=0x7ffc0000 [ 248.508249][ T26] audit: type=1326 audit(1741385985.793:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f095c906359 code=0x7ffc0000 [ 248.533830][ T26] audit: type=1326 audit(1741385985.793:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7247 comm="syz.0.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 248.729032][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 248.979024][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 249.099134][ T23] usb 4-1: config 0 has no interfaces? [ 249.104669][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.189076][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.235379][ T23] usb 4-1: config 0 descriptor?? [ 249.629677][ T4678] usb 4-1: USB disconnect, device number 3 [ 250.219095][ T7298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.585'. [ 250.228097][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.585'. [ 250.795777][ T7309] netlink: 'syz.1.589': attribute type 4 has an invalid length. [ 250.924595][ T7301] loop2: detected capacity change from 0 to 32768 [ 250.981126][ T7301] XFS: ikeep mount option is deprecated. [ 251.098534][ T7301] XFS (loop2): Mounting V5 Filesystem [ 251.137745][ T7301] XFS (loop2): Ending clean mount [ 251.150291][ T7301] XFS (loop2): Quotacheck needed: Please wait. [ 251.232727][ T7301] XFS (loop2): Quotacheck: Done. [ 251.317065][ T4174] XFS (loop2): Unmounting Filesystem [ 251.542334][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 251.994166][ T7342] trusted_key: encrypted_key: insufficient parameters specified [ 252.578352][ T7350] input: syz0 as /devices/virtual/input/input23 [ 252.904486][ T7358] netlink: 'syz.4.600': attribute type 4 has an invalid length. [ 253.895247][ T7360] loop1: detected capacity change from 0 to 32768 [ 253.929670][ T7360] XFS: ikeep mount option is deprecated. [ 254.034979][ T7360] XFS (loop1): Mounting V5 Filesystem [ 254.146814][ T7360] XFS (loop1): Ending clean mount [ 254.181588][ T7360] XFS (loop1): Quotacheck needed: Please wait. [ 254.253580][ T7360] XFS (loop1): Quotacheck: Done. [ 254.281960][ T4168] XFS (loop1): Unmounting Filesystem [ 254.339228][ T7415] trusted_key: encrypted_key: insufficient parameters specified [ 254.742021][ T7418] netlink: 'syz.3.615': attribute type 4 has an invalid length. [ 254.994859][ T7422] input: syz0 as /devices/virtual/input/input25 [ 255.921261][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.927810][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.171251][ T7444] loop1: detected capacity change from 0 to 32768 [ 257.233342][ T7444] XFS (loop1): Mounting V5 Filesystem [ 257.272699][ T7444] XFS (loop1): Ending clean mount [ 257.280658][ T7444] XFS (loop1): Quotacheck needed: Please wait. [ 257.321681][ T7444] XFS (loop1): Quotacheck: Done. [ 257.340612][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 257.340629][ T26] audit: type=1804 audit(1741385995.543:105): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.624" name="/newroot/103/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 257.375843][ T26] audit: type=1804 audit(1741385995.573:106): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.624" name="/newroot/103/file0/bus" dev="loop1" ino=6155 res=1 errno=0 [ 257.464173][ T4168] XFS (loop1): Unmounting Filesystem [ 257.857467][ T7484] input: syz0 as /devices/virtual/input/input26 [ 257.903607][ T4244] udevd[4244]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 257.949599][ T7488] trusted_key: encrypted_key: insufficient parameters specified [ 260.804263][ T7542] input: syz1 as /devices/virtual/input/input27 [ 261.383760][ T7551] input: syz0 as /devices/virtual/input/input28 [ 264.198579][ T7564] overlayfs: failed to resolve './file0': -2 [ 265.817954][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 267.249088][ T7612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.661'. [ 267.258130][ T7612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.661'. [ 268.193920][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.216540][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.248544][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.311079][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.364133][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.419491][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.469291][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.492821][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.509719][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.525095][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.544709][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.563188][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.579696][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.587373][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.594969][ T23] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 268.610086][ T23] hid-generic FFF9:0000:0203.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 268.753334][ T7626] input: syz0 as /devices/virtual/input/input29 [ 269.457974][ T7634] overlayfs: failed to resolve './file0': -2 [ 269.654577][ T7636] loop1: detected capacity change from 0 to 32768 [ 269.730143][ T7636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.664 (7636) [ 269.829425][ T7636] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 270.019708][ T7636] BTRFS info (device loop1): turning on flush-on-commit [ 270.084290][ T7636] BTRFS info (device loop1): doing ref verification [ 270.292515][ T7636] BTRFS info (device loop1): using free space tree [ 270.572052][ T7636] BTRFS info (device loop1): has skinny extents [ 270.963091][ T7636] BTRFS info (device loop1): enabling ssd optimizations [ 272.796124][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.678'. [ 273.468271][ T7694] input: syz0 as /devices/virtual/input/input30 [ 276.681298][ T7706] overlayfs: failed to resolve './file0': -2 [ 277.011306][ T7712] loop3: detected capacity change from 0 to 32768 [ 277.097983][ T7712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.684 (7712) [ 277.160701][ T7712] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 277.189202][ T7712] BTRFS info (device loop3): turning on flush-on-commit [ 277.216721][ T7712] BTRFS info (device loop3): doing ref verification [ 277.239080][ T7712] BTRFS info (device loop3): using free space tree [ 277.249295][ T7712] BTRFS info (device loop3): has skinny extents [ 277.808509][ T7712] BTRFS info (device loop3): enabling ssd optimizations [ 278.383396][ T7729] loop0: detected capacity change from 0 to 32768 [ 278.957399][ T7729] XFS (loop0): Mounting V5 Filesystem [ 279.652137][ T7729] XFS (loop0): Ending clean mount [ 280.049369][ T7729] XFS (loop0): Quotacheck needed: Please wait. [ 280.153288][ T7729] XFS (loop0): Quotacheck: Done. [ 280.197260][ T4179] XFS (loop0): Unmounting Filesystem [ 280.552684][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 283.644815][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.671440][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.698711][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.709135][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.718040][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.726361][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.735478][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.743508][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.751608][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.766052][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.774148][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.796324][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.831030][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.861882][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.919072][ T23] hid-generic FFF9:0000:0203.000C: unknown main item tag 0x0 [ 283.935498][ T23] hid-generic FFF9:0000:0203.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 284.632851][ T7806] loop0: detected capacity change from 0 to 32768 [ 284.706499][ T7806] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.704 (7806) [ 284.721421][ T7812] loop4: detected capacity change from 0 to 32768 [ 284.736266][ T7806] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 284.758800][ T7806] BTRFS info (device loop0): turning on flush-on-commit [ 284.780456][ T7806] BTRFS info (device loop0): doing ref verification [ 284.787184][ T7806] BTRFS info (device loop0): using free space tree [ 284.828001][ T7806] BTRFS info (device loop0): has skinny extents [ 284.848107][ T7812] XFS (loop4): Mounting V5 Filesystem [ 284.916703][ T7812] XFS (loop4): Ending clean mount [ 284.927342][ T7812] XFS (loop4): Quotacheck needed: Please wait. [ 284.995068][ T7812] XFS (loop4): Quotacheck: Done. [ 285.028153][ T26] audit: type=1804 audit(1741386023.223:107): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.706" name="/newroot/160/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 285.085751][ T26] audit: type=1804 audit(1741386023.283:108): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.706" name="/newroot/160/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 285.098363][ T7806] BTRFS info (device loop0): enabling ssd optimizations [ 285.295040][ T4171] XFS (loop4): Unmounting Filesystem [ 286.689879][ T7862] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 292.177256][ T7920] netlink: 'syz.3.727': attribute type 4 has an invalid length. [ 292.925942][ T7911] loop4: detected capacity change from 0 to 32768 [ 292.975712][ T7911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.725 (7911) [ 293.056965][ T7911] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 293.141190][ T7911] BTRFS info (device loop4): turning on flush-on-commit [ 293.230801][ T7911] BTRFS info (device loop4): doing ref verification [ 293.263402][ T7911] BTRFS info (device loop4): using free space tree [ 293.297459][ T7911] BTRFS info (device loop4): has skinny extents [ 294.859344][ T7911] BTRFS error (device loop4): open_ctree failed [ 297.272182][ T7989] input: syz0 as /devices/virtual/input/input31 [ 297.590528][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.743'. [ 300.116484][ T8011] loop2: detected capacity change from 0 to 32768 [ 300.229983][ T8011] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.746 (8011) [ 300.304742][ T8011] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 300.381916][ T8011] BTRFS info (device loop2): turning on flush-on-commit [ 300.395071][ T8011] BTRFS info (device loop2): doing ref verification [ 300.423090][ T8011] BTRFS info (device loop2): using free space tree [ 300.444868][ T8011] BTRFS info (device loop2): has skinny extents [ 301.697413][ T8055] input: syz0 as /devices/virtual/input/input32 [ 302.583143][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'. [ 302.719569][ T8011] BTRFS error (device loop2): open_ctree failed [ 303.351480][ T8075] loop4: detected capacity change from 0 to 32768 [ 303.647296][ T8075] XFS (loop4): Mounting V5 Filesystem [ 303.732585][ T8075] XFS (loop4): Ending clean mount [ 303.740278][ T8075] XFS (loop4): Quotacheck needed: Please wait. [ 303.872986][ T8075] XFS (loop4): Quotacheck: Done. [ 303.915582][ T26] audit: type=1804 audit(1741386042.113:109): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.758" name="/newroot/170/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 304.047515][ T26] audit: type=1804 audit(1741386042.163:110): pid=8075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.758" name="/newroot/170/file0/bus" dev="loop4" ino=6155 res=1 errno=0 [ 304.124779][ T4171] XFS (loop4): Unmounting Filesystem [ 304.777577][ T8126] input: syz0 as /devices/virtual/input/input33 [ 305.001415][ T8131] trusted_key: encrypted_key: insufficient parameters specified [ 306.216119][ T8153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 306.534013][ T8136] loop2: detected capacity change from 0 to 32768 [ 306.613670][ T8136] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.771 (8136) [ 306.692839][ T8136] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 306.773012][ T8136] BTRFS info (device loop2): turning on flush-on-commit [ 306.845954][ T8136] BTRFS info (device loop2): doing ref verification [ 306.887624][ T8136] BTRFS info (device loop2): using free space tree [ 306.939672][ T8136] BTRFS info (device loop2): has skinny extents [ 307.404047][ T8136] BTRFS info (device loop2): enabling ssd optimizations [ 307.483737][ T8197] vivid-001: ================= START STATUS ================= [ 307.756034][ T8197] vivid-001: Test Pattern: 75% Colorbar [ 307.912570][ T8197] vivid-001: Fill Percentage of Frame: 100 [ 307.933241][ T8197] vivid-001: Horizontal Movement: Move Right Fast [ 307.942600][ T8197] vivid-001: Vertical Movement: Move Down Fast [ 307.949755][ T8197] vivid-001: OSD Text Mode: All [ 307.955834][ T8197] vivid-001: Show Border: false [ 307.962077][ T8197] vivid-001: Show Square: false [ 307.968301][ T8197] vivid-001: Sensor Flipped Horizontally: false [ 307.975407][ T8197] vivid-001: Sensor Flipped Vertically: false [ 307.982292][ T8197] vivid-001: Insert SAV Code in Image: false [ 307.989239][ T8197] vivid-001: Insert EAV Code in Image: false [ 307.995636][ T8197] vivid-001: Reduced Framerate: false [ 308.010553][ T8197] vivid-001: Enable Capture Cropping: true [ 308.017122][ T8197] vivid-001: Enable Capture Composing: true [ 308.035043][ T8197] vivid-001: Enable Capture Scaler: true [ 308.041983][ T8197] vivid-001: Timestamp Source: End of Frame [ 308.056816][ T8197] vivid-001: Colorspace: sRGB [ 308.062636][ T8197] vivid-001: Transfer Function: Default [ 308.073399][ T8197] vivid-001: Y'CbCr Encoding: Default [ 308.079688][ T8197] vivid-001: HSV Encoding: Hue 0-179 [ 308.085281][ T8197] vivid-001: Quantization: Default [ 308.091141][ T8197] vivid-001: Apply Alpha To Red Only: false [ 308.097522][ T8197] vivid-001: Standard Aspect Ratio: 4x3 [ 308.104237][ T8197] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 308.112970][ T8197] vivid-001: DV Timings: 640x480p59 inactive [ 308.120640][ T8197] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 308.128309][ T8197] vivid-001: Maximum EDID Blocks: 2 [ 308.134701][ T8197] vivid-001: Limited RGB Range (16-235): false [ 308.141562][ T8197] vivid-001: Rx RGB Quantization Range: Automatic [ 308.148627][ T8197] vivid-001: Power Present: 0x00000001 [ 308.155816][ T8197] tpg source WxH: 640x360 (Y'CbCr) [ 308.162069][ T8197] tpg field: 1 [ 308.165618][ T8197] tpg crop: 640x360@0x0 [ 308.170492][ T8197] tpg compose: 640x360@0x0 [ 308.175294][ T8197] tpg colorspace: 8 [ 308.180008][ T8197] tpg transfer function: 0/0 [ 308.184786][ T8197] tpg Y'CbCr encoding: 0/0 [ 308.189899][ T8197] tpg quantization: 0/0 [ 308.194268][ T8197] tpg RGB range: 0/2 [ 308.198316][ T8197] vivid-001: ================== END STATUS ================== [ 309.174987][ T8222] trusted_key: encrypted_key: insufficient parameters specified [ 311.558778][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 311.687276][ T8243] loop0: detected capacity change from 0 to 32768 [ 311.831948][ T8243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.792 (8243) [ 311.943020][ T8243] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 311.971683][ T8243] BTRFS info (device loop0): turning on flush-on-commit [ 312.028268][ T8243] BTRFS info (device loop0): doing ref verification [ 312.064870][ T8243] BTRFS info (device loop0): using free space tree [ 312.106572][ T8243] BTRFS info (device loop0): has skinny extents [ 312.499092][ T8243] BTRFS info (device loop0): enabling ssd optimizations [ 312.679515][ T8285] vivid-001: ================= START STATUS ================= [ 312.722001][ T8285] vivid-001: Test Pattern: 75% Colorbar [ 312.749090][ T8285] vivid-001: Fill Percentage of Frame: 100 [ 312.755257][ T8285] vivid-001: Horizontal Movement: Move Right Fast [ 312.765236][ T8285] vivid-001: Vertical Movement: Move Down Fast [ 312.779384][ T8285] vivid-001: OSD Text Mode: All [ 312.786423][ T8285] vivid-001: Show Border: false [ 312.796003][ T8285] vivid-001: Show Square: false [ 312.801241][ T8285] vivid-001: Sensor Flipped Horizontally: false [ 312.809010][ T8285] vivid-001: Sensor Flipped Vertically: false [ 312.815382][ T8285] vivid-001: Insert SAV Code in Image: false [ 312.821867][ T8285] vivid-001: Insert EAV Code in Image: false [ 312.828834][ T8285] vivid-001: Reduced Framerate: false [ 312.849080][ T8285] vivid-001: Enable Capture Cropping: true [ 312.870049][ T8285] vivid-001: Enable Capture Composing: true [ 312.901216][ T8285] vivid-001: Enable Capture Scaler: true [ 312.941744][ T8285] vivid-001: Timestamp Source: End of Frame [ 312.967312][ T8285] vivid-001: Colorspace: sRGB [ 313.015690][ T8285] vivid-001: Transfer Function: Default [ 313.024773][ T8285] vivid-001: Y'CbCr Encoding: Default [ 313.037854][ T8285] vivid-001: HSV Encoding: Hue 0-179 [ 313.045443][ T8285] vivid-001: Quantization: Default [ 313.058599][ T8285] vivid-001: Apply Alpha To Red Only: false [ 313.068742][ T8285] vivid-001: Standard Aspect Ratio: 4x3 [ 313.074567][ T8285] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 313.108956][ T8285] vivid-001: DV Timings: 640x480p59 inactive [ 313.115174][ T8285] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 313.124279][ T8285] vivid-001: Maximum EDID Blocks: 2 [ 313.129667][ T8285] vivid-001: Limited RGB Range (16-235): false [ 313.136074][ T8285] vivid-001: Rx RGB Quantization Range: Automatic [ 313.142773][ T8285] vivid-001: Power Present: 0x00000001 [ 313.148277][ T8285] tpg source WxH: 640x360 (Y'CbCr) [ 313.153725][ T8285] tpg field: 1 [ 313.157135][ T8285] tpg crop: 640x360@0x0 [ 313.173783][ T8285] tpg compose: 640x360@0x0 [ 313.212004][ T8285] tpg colorspace: 8 [ 313.215979][ T8285] tpg transfer function: 0/0 [ 313.356329][ T8285] tpg Y'CbCr encoding: 0/0 [ 313.371254][ T8285] tpg quantization: 0/0 [ 313.375458][ T8285] tpg RGB range: 0/2 [ 313.407977][ T8285] vivid-001: ================== END STATUS ================== [ 314.309118][ T8294] trusted_key: encrypted_key: insufficient parameters specified [ 317.420443][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.427108][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.264436][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'. [ 320.749093][ T8354] trusted_key: encrypted_key: insufficient parameters specified [ 322.295102][ T8356] vivid-001: ================= START STATUS ================= [ 322.325405][ T8356] vivid-001: Test Pattern: 75% Colorbar [ 322.370388][ T8356] vivid-001: Fill Percentage of Frame: 100 [ 322.520279][ T8356] vivid-001: Horizontal Movement: Move Right Fast [ 322.526769][ T8356] vivid-001: Vertical Movement: Move Down Fast [ 322.635888][ T8356] vivid-001: OSD Text Mode: All [ 322.688227][ T8356] vivid-001: Show Border: false [ 322.814879][ T8356] vivid-001: Show Square: false [ 322.854965][ T8356] vivid-001: Sensor Flipped Horizontally: false [ 323.536019][ T8356] vivid-001: Sensor Flipped Vertically: false [ 323.736028][ T8356] vivid-001: Insert SAV Code in Image: false [ 323.746188][ T8356] vivid-001: Insert EAV Code in Image: false [ 323.754664][ T8356] vivid-001: Reduced Framerate: false [ 323.777337][ T8356] vivid-001: Enable Capture Cropping: true [ 323.783765][ T8356] vivid-001: Enable Capture Composing: true [ 323.790589][ T8356] vivid-001: Enable Capture Scaler: true [ 323.796421][ T8356] vivid-001: Timestamp Source: End of Frame [ 323.807120][ T8356] vivid-001: Colorspace: sRGB [ 323.812240][ T8356] vivid-001: Transfer Function: Default [ 323.818287][ T8356] vivid-001: Y'CbCr Encoding: Default [ 323.824437][ T8356] vivid-001: HSV Encoding: Hue 0-179 [ 323.830232][ T8356] vivid-001: Quantization: Default [ 323.835420][ T8356] vivid-001: Apply Alpha To Red Only: false [ 323.843854][ T8356] vivid-001: Standard Aspect Ratio: 4x3 [ 323.850039][ T8356] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 323.894132][ T8356] vivid-001: DV Timings: 640x480p59 inactive [ 323.954201][ T8356] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 323.979032][ T8356] vivid-001: Maximum EDID Blocks: 2 [ 324.038624][ T8356] vivid-001: Limited RGB Range (16-235): false [ 324.072909][ T8356] vivid-001: Rx RGB Quantization Range: Automatic [ 324.113554][ T8356] vivid-001: Power Present: 0x00000001 [ 324.114607][ T8382] input: syz0 as /devices/virtual/input/input34 [ 324.166244][ T8356] tpg source WxH: 640x360 (Y'CbCr) [ 324.196047][ T8356] tpg field: 1 [ 324.228338][ T8356] tpg crop: 640x360@0x0 [ 324.261053][ T8356] tpg compose: 640x360@0x0 [ 324.307762][ T8356] tpg colorspace: 8 [ 324.340418][ T8356] tpg transfer function: 0/0 [ 324.375870][ T8356] tpg Y'CbCr encoding: 0/0 [ 324.457580][ T8356] tpg quantization: 0/0 [ 324.491928][ T8356] tpg RGB range: 0/2 [ 324.520317][ T8356] vivid-001: ================== END STATUS ================== [ 324.607858][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.621020][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.641195][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.652215][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.660284][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.668005][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.676364][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.685165][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.693727][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.701861][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.709888][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.739884][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.757658][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.779122][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.815292][ T21] hid-generic FFF9:0000:0203.000D: unknown main item tag 0x0 [ 324.844539][ T21] hid-generic FFF9:0000:0203.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 326.869092][ T8402] trusted_key: encrypted_key: insufficient parameters specified [ 329.835733][ T8423] input: syz0 as /devices/virtual/input/input35 [ 330.892780][ T8417] loop3: detected capacity change from 0 to 32768 [ 331.175889][ T8417] XFS (loop3): Mounting V5 Filesystem [ 331.275847][ T8446] vivid-001: ================= START STATUS ================= [ 331.293147][ T8446] vivid-001: Test Pattern: 75% Colorbar [ 331.299447][ T8446] vivid-001: Fill Percentage of Frame: 100 [ 331.306068][ T8446] vivid-001: Horizontal Movement: Move Right Fast [ 331.314785][ T8446] vivid-001: Vertical Movement: Move Down Fast [ 331.321441][ T8446] vivid-001: OSD Text Mode: All [ 331.327361][ T8446] vivid-001: Show Border: false [ 331.332853][ T8446] vivid-001: Show Square: false [ 331.338366][ T8446] vivid-001: Sensor Flipped Horizontally: false [ 331.343128][ T8417] XFS (loop3): Ending clean mount [ 331.345149][ T8446] vivid-001: Sensor Flipped Vertically: false [ 331.357001][ T8446] vivid-001: Insert SAV Code in Image: false [ 331.364558][ T8446] vivid-001: Insert EAV Code in Image: false [ 331.369672][ T8417] XFS (loop3): Quotacheck needed: Please wait. [ 331.370868][ T8446] vivid-001: Reduced Framerate: false [ 331.382880][ T8446] vivid-001: Enable Capture Cropping: true [ 331.389157][ T8446] vivid-001: Enable Capture Composing: true [ 331.395417][ T8446] vivid-001: Enable Capture Scaler: true [ 331.403749][ T8446] vivid-001: Timestamp Source: End of Frame [ 331.410556][ T8446] vivid-001: Colorspace: sRGB [ 331.415590][ T8446] vivid-001: Transfer Function: Default [ 331.421402][ T8446] vivid-001: Y'CbCr Encoding: Default [ 331.427320][ T8446] vivid-001: HSV Encoding: Hue 0-179 [ 331.435318][ T8446] vivid-001: Quantization: Default [ 331.452282][ T8446] vivid-001: Apply Alpha To Red Only: false [ 331.466211][ T8446] vivid-001: Standard Aspect Ratio: 4x3 [ 331.472134][ T8446] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 331.480108][ T8446] vivid-001: DV Timings: 640x480p59 inactive [ 331.486320][ T8446] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 331.493878][ T8446] vivid-001: Maximum EDID Blocks: 2 [ 331.499377][ T8446] vivid-001: Limited RGB Range (16-235): false [ 331.505743][ T8446] vivid-001: Rx RGB Quantization Range: Automatic [ 331.513837][ T8446] vivid-001: Power Present: 0x00000001 [ 331.519579][ T8446] tpg source WxH: 640x360 (Y'CbCr) [ 331.524861][ T8446] tpg field: 1 [ 331.526044][ T8417] XFS (loop3): Quotacheck: Done. [ 331.544552][ T8446] tpg crop: 640x360@0x0 [ 331.583873][ T8446] tpg compose: 640x360@0x0 [ 331.593286][ T26] audit: type=1804 audit(1741386069.793:111): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.835" name="/newroot/166/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 331.644626][ T8446] tpg colorspace: 8 [ 331.668946][ T8446] tpg transfer function: 0/0 [ 331.692837][ T4167] XFS (loop3): Unmounting Filesystem [ 331.696810][ T26] audit: type=1804 audit(1741386069.793:112): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.835" name="/newroot/166/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 331.765045][ T8446] tpg Y'CbCr encoding: 0/0 [ 331.794860][ T8446] tpg quantization: 0/0 [ 331.835101][ T8446] tpg RGB range: 0/2 [ 331.894805][ T8446] vivid-001: ================== END STATUS ================== [ 332.545612][ T8458] trusted_key: encrypted_key: insufficient parameters specified [ 334.682259][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 334.784633][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 334.823418][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 334.931448][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 334.960526][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 334.990816][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.013582][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.030471][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.038038][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.058297][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.081874][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.159423][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.181954][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.198961][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.206637][ T21] hid-generic FFF9:0000:0203.000E: unknown main item tag 0x0 [ 335.216322][ T21] hid-generic FFF9:0000:0203.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 336.555366][ T8489] loop3: detected capacity change from 0 to 32768 [ 336.853373][ T8489] XFS (loop3): Mounting V5 Filesystem [ 337.074882][ T8489] XFS (loop3): Ending clean mount [ 337.240366][ T8489] XFS (loop3): Quotacheck needed: Please wait. [ 337.417212][ T8489] XFS (loop3): Quotacheck: Done. [ 337.509782][ T26] audit: type=1804 audit(1741386075.710:113): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.852" name="/newroot/171/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 337.574114][ T26] audit: type=1804 audit(1741386075.750:114): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.852" name="/newroot/171/file0/bus" dev="loop3" ino=6155 res=1 errno=0 [ 337.768204][ T4167] XFS (loop3): Unmounting Filesystem [ 338.140404][ T8525] input: syz0 as /devices/virtual/input/input36 [ 338.425073][ T8530] vivid-001: ================= START STATUS ================= [ 338.487368][ T8530] vivid-001: Test Pattern: 75% Colorbar [ 338.550005][ T8530] vivid-001: Fill Percentage of Frame: 100 [ 338.569079][ T8530] vivid-001: Horizontal Movement: Move Right Fast [ 338.575727][ T8530] vivid-001: Vertical Movement: Move Down Fast [ 338.582590][ T8530] vivid-001: OSD Text Mode: All [ 338.587633][ T8530] vivid-001: Show Border: false [ 338.635173][ T8530] vivid-001: Show Square: false [ 338.703147][ T8530] vivid-001: Sensor Flipped Horizontally: false [ 338.788167][ T8530] vivid-001: Sensor Flipped Vertically: false [ 338.831590][ T8530] vivid-001: Insert SAV Code in Image: false [ 338.873522][ T8530] vivid-001: Insert EAV Code in Image: false [ 338.911402][ T8530] vivid-001: Reduced Framerate: false [ 339.116394][ T8530] vivid-001: Enable Capture Cropping: true [ 339.122658][ T8530] vivid-001: Enable Capture Composing: true [ 339.128689][ T8530] vivid-001: Enable Capture Scaler: true [ 339.147406][ T8530] vivid-001: Timestamp Source: End of Frame [ 339.169022][ T8530] vivid-001: Colorspace: sRGB [ 339.174077][ T8530] vivid-001: Transfer Function: Default [ 339.649081][ T8540] trusted_key: encrypted_key: insufficient parameters specified [ 340.626698][ T8530] vivid-001: Y'CbCr Encoding: Default [ 340.663770][ T8530] vivid-001: HSV Encoding: Hue 0-179 [ 340.957231][ T8530] vivid-001: Quantization: Default [ 340.963760][ T8530] vivid-001: Apply Alpha To Red Only: false [ 340.969962][ T8530] vivid-001: Standard Aspect Ratio: 4x3 [ 340.975657][ T8530] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 340.983556][ T8530] vivid-001: DV Timings: 640x480p59 inactive [ 340.991017][ T8530] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 340.998541][ T8530] vivid-001: Maximum EDID Blocks: 2 [ 341.004466][ T8530] vivid-001: Limited RGB Range (16-235): false [ 341.012170][ T8530] vivid-001: Rx RGB Quantization Range: Automatic [ 341.018763][ T8530] vivid-001: Power Present: 0x00000001 [ 341.027371][ T8530] tpg source WxH: 640x360 (Y'CbCr) [ 341.034011][ T8530] tpg field: 1 [ 341.038618][ T8530] tpg crop: 640x360@0x0 [ 341.043409][ T8530] tpg compose: 640x360@0x0 [ 341.047985][ T8530] tpg colorspace: 8 [ 341.052424][ T8530] tpg transfer function: 0/0 [ 341.057831][ T8530] tpg Y'CbCr encoding: 0/0 [ 341.064494][ T8530] tpg quantization: 0/0 [ 341.068806][ T8530] tpg RGB range: 0/2 [ 341.141751][ T8530] vivid-001: ================== END STATUS ================== [ 343.100315][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.133480][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.166060][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.211824][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.243832][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.310488][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.363527][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.415896][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.465271][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.514810][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.568407][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.622974][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.679284][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.741318][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.797033][ T21] hid-generic FFF9:0000:0203.000F: unknown main item tag 0x0 [ 343.877320][ T8562] loop0: detected capacity change from 0 to 32768 [ 343.886381][ T21] hid-generic FFF9:0000:0203.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 345.067513][ T8562] XFS (loop0): Mounting V5 Filesystem [ 345.171405][ T8562] XFS (loop0): Ending clean mount [ 345.332275][ T8562] XFS (loop0): Quotacheck needed: Please wait. [ 345.445354][ T8562] XFS (loop0): Quotacheck: Done. [ 345.483155][ T26] audit: type=1804 audit(1741386083.680:115): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.872" name="/newroot/175/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 345.566257][ T26] audit: type=1804 audit(1741386083.710:116): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.872" name="/newroot/175/file0/bus" dev="loop0" ino=6155 res=1 errno=0 [ 345.598728][ T4179] XFS (loop0): Unmounting Filesystem [ 346.630641][ T8609] vivid-001: ================= START STATUS ================= [ 346.638317][ T8609] vivid-001: Test Pattern: 75% Colorbar [ 346.644282][ T8609] vivid-001: Fill Percentage of Frame: 100 [ 346.650829][ T8609] vivid-001: Horizontal Movement: Move Right Fast [ 346.659176][ T8609] vivid-001: Vertical Movement: Move Down Fast [ 346.665379][ T8609] vivid-001: OSD Text Mode: All [ 346.930825][ T8609] vivid-001: Show Border: false [ 346.935758][ T8609] vivid-001: Show Square: false [ 347.009431][ T8609] vivid-001: Sensor Flipped Horizontally: false [ 347.015740][ T8609] vivid-001: Sensor Flipped Vertically: false [ 347.022954][ T8609] vivid-001: Insert SAV Code in Image: false [ 347.063889][ T8609] vivid-001: Insert EAV Code in Image: false [ 347.076045][ T8609] vivid-001: Reduced Framerate: false [ 347.094270][ T8609] vivid-001: Enable Capture Cropping: true [ 347.285323][ T8609] vivid-001: Enable Capture Composing: true [ 347.291740][ T8609] vivid-001: Enable Capture Scaler: true [ 347.297596][ T8609] vivid-001: Timestamp Source: End of Frame [ 347.304514][ T8609] vivid-001: Colorspace: sRGB [ 347.309654][ T8609] vivid-001: Transfer Function: Default [ 347.315382][ T8609] vivid-001: Y'CbCr Encoding: Default [ 347.321300][ T8609] vivid-001: HSV Encoding: Hue 0-179 [ 347.326992][ T8609] vivid-001: Quantization: Default [ 347.344369][ T8609] vivid-001: Apply Alpha To Red Only: false [ 347.363609][ T8609] vivid-001: Standard Aspect Ratio: 4x3 [ 347.379192][ T8609] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 347.399945][ T8609] vivid-001: DV Timings: 640x480p59 inactive [ 347.415646][ T8609] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 347.436203][ T8609] vivid-001: Maximum EDID Blocks: 2 [ 347.459603][ T8609] vivid-001: Limited RGB Range (16-235): false [ 347.482756][ T8609] vivid-001: Rx RGB Quantization Range: Automatic [ 347.515319][ T8609] vivid-001: Power Present: 0x00000001 [ 347.535302][ T8609] tpg source WxH: 640x360 (Y'CbCr) [ 347.548851][ T8609] tpg field: 1 [ 347.559278][ T8609] tpg crop: 640x360@0x0 [ 347.563608][ T8609] tpg compose: 640x360@0x0 [ 347.568103][ T8609] tpg colorspace: 8 [ 347.579110][ T8609] tpg transfer function: 0/0 [ 347.583810][ T8609] tpg Y'CbCr encoding: 0/0 [ 347.588395][ T8609] tpg quantization: 0/0 [ 347.598280][ T8609] tpg RGB range: 0/2 [ 347.622231][ T8609] vivid-001: ================== END STATUS ================== [ 349.561042][ T8635] input: syz0 as /devices/virtual/input/input37 [ 350.942438][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 350.964660][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 350.992614][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.010725][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.027488][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.046761][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.069098][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.091394][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.107016][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.134322][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.158107][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.182659][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.254923][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.294460][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.314428][ T21] hid-generic FFF9:0000:0203.0010: unknown main item tag 0x0 [ 351.452875][ T21] hid-generic FFF9:0000:0203.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 351.467683][ T8640] loop4: detected capacity change from 0 to 32768 [ 351.989077][ T8658] trusted_key: encrypted_key: insufficient parameters specified [ 353.792814][ T8666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.902'. [ 354.287792][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.901'. [ 354.298043][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.901'. [ 354.770432][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.904'. [ 355.538669][ T8693] vivid-001: ================= START STATUS ================= [ 355.550645][ T8693] vivid-001: Test Pattern: 75% Colorbar [ 355.556255][ T8693] vivid-001: Fill Percentage of Frame: 100 [ 355.591584][ T8693] vivid-001: Horizontal Movement: Move Right Fast [ 355.629118][ T8693] vivid-001: Vertical Movement: Move Down Fast [ 355.648596][ T8693] vivid-001: OSD Text Mode: All [ 355.659251][ T8693] vivid-001: Show Border: false [ 355.673124][ T8693] vivid-001: Show Square: false [ 355.729820][ T8693] vivid-001: Sensor Flipped Horizontally: false [ 355.745570][ T8693] vivid-001: Sensor Flipped Vertically: false [ 355.833928][ T8693] vivid-001: Insert SAV Code in Image: false [ 355.859154][ T8693] vivid-001: Insert EAV Code in Image: false [ 355.869085][ T8693] vivid-001: Reduced Framerate: false [ 355.874625][ T8693] vivid-001: Enable Capture Cropping: true [ 355.880649][ T8693] vivid-001: Enable Capture Composing: true [ 355.899947][ T8693] vivid-001: Enable Capture Scaler: true [ 355.918533][ T8693] vivid-001: Timestamp Source: End of Frame [ 356.155812][ T8693] vivid-001: Colorspace: sRGB [ 356.254340][ T8693] vivid-001: Transfer Function: Default [ 356.346818][ T8693] vivid-001: Y'CbCr Encoding: Default [ 356.382986][ T8693] vivid-001: HSV Encoding: Hue 0-179 [ 356.403256][ T8693] vivid-001: Quantization: Default [ 356.413417][ T8693] vivid-001: Apply Alpha To Red Only: false [ 356.419451][ T8693] vivid-001: Standard Aspect Ratio: 4x3 [ 356.425758][ T8693] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 356.433926][ T8693] vivid-001: DV Timings: 640x480p59 inactive [ 356.440248][ T8693] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 356.447715][ T8693] vivid-001: Maximum EDID Blocks: 2 [ 356.453199][ T8693] vivid-001: Limited RGB Range (16-235): false [ 356.466783][ T8693] vivid-001: Rx RGB Quantization Range: Automatic [ 356.481291][ T8693] vivid-001: Power Present: 0x00000001 [ 356.501064][ T8693] tpg source WxH: 640x360 (Y'CbCr) [ 356.517708][ T8693] tpg field: 1 [ 356.521814][ T8693] tpg crop: 640x360@0x0 [ 356.531774][ T8693] tpg compose: 640x360@0x0 [ 356.563418][ T8693] tpg colorspace: 8 [ 356.579968][ T8693] tpg transfer function: 0/0 [ 356.603117][ T8693] tpg Y'CbCr encoding: 0/0 [ 356.617951][ T8693] tpg quantization: 0/0 [ 356.638181][ T8693] tpg RGB range: 0/2 [ 356.792234][ T8693] vivid-001: ================== END STATUS ================== [ 357.992420][ T8701] loop2: detected capacity change from 0 to 32768 [ 358.796552][ T8701] XFS (loop2): Mounting V5 Filesystem [ 359.000640][ T8701] XFS (loop2): Ending clean mount [ 359.061085][ T8701] XFS (loop2): Quotacheck needed: Please wait. [ 359.132530][ T8701] XFS (loop2): Quotacheck: Done. [ 359.183678][ T26] audit: type=1804 audit(1741386097.380:117): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.911" name="/newroot/191/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 359.269777][ T26] audit: type=1804 audit(1741386097.440:118): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.911" name="/newroot/191/file0/bus" dev="loop2" ino=6155 res=1 errno=0 [ 359.431588][ T4174] XFS (loop2): Unmounting Filesystem [ 359.471594][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.531636][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.643896][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.718147][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.776867][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.866190][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.977321][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 359.994789][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'. [ 360.060206][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.122892][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.139093][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.146682][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.154656][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.175559][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.193511][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.222672][ T6670] hid-generic FFF9:0000:0203.0011: unknown main item tag 0x0 [ 360.273915][ T6670] hid-generic FFF9:0000:0203.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 361.269074][ T8750] trusted_key: encrypted_key: insufficient parameters specified [ 363.688991][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 363.706223][ T8770] vivid-001: ================= START STATUS ================= [ 363.719137][ T8770] vivid-001: Test Pattern: 75% Colorbar [ 363.724873][ T8770] vivid-001: Fill Percentage of Frame: 100 [ 363.731298][ T8770] vivid-001: Horizontal Movement: Move Right Fast [ 363.737985][ T8770] vivid-001: Vertical Movement: Move Down Fast [ 363.756073][ T8770] vivid-001: OSD Text Mode: All [ 363.761928][ T8770] vivid-001: Show Border: false [ 363.790213][ T8770] vivid-001: Show Square: false [ 363.803951][ T8770] vivid-001: Sensor Flipped Horizontally: false [ 363.819190][ T8770] vivid-001: Sensor Flipped Vertically: false [ 363.825645][ T8770] vivid-001: Insert SAV Code in Image: false [ 363.834795][ T8770] vivid-001: Insert EAV Code in Image: false [ 363.842018][ T8770] vivid-001: Reduced Framerate: false [ 363.848122][ T8770] vivid-001: Enable Capture Cropping: true [ 363.949101][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 363.968989][ T8770] vivid-001: Enable Capture Composing: true [ 363.983046][ T8770] vivid-001: Enable Capture Scaler: true [ 363.989080][ T8770] vivid-001: Timestamp Source: End of Frame [ 363.995138][ T8770] vivid-001: Colorspace: sRGB [ 364.000797][ T8770] vivid-001: Transfer Function: Default [ 364.006756][ T8770] vivid-001: Y'CbCr Encoding: Default [ 364.013906][ T8770] vivid-001: HSV Encoding: Hue 0-179 [ 364.020336][ T8770] vivid-001: Quantization: Default [ 364.025973][ T8770] vivid-001: Apply Alpha To Red Only: false [ 364.032386][ T8770] vivid-001: Standard Aspect Ratio: 4x3 [ 364.038356][ T8770] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 364.055657][ T8770] vivid-001: DV Timings: 640x480p59 inactive [ 364.080585][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.097593][ T8770] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 364.108307][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 364.136517][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.153734][ T8770] vivid-001: Maximum EDID Blocks: 2 [ 364.171268][ T21] usb 5-1: config 0 descriptor?? [ 364.208595][ T8770] vivid-001: Limited RGB Range (16-235): false [ 364.258424][ T8770] vivid-001: Rx RGB Quantization Range: Automatic [ 364.311412][ T8770] vivid-001: Power Present: 0x00000001 [ 364.360934][ T8770] tpg source WxH: 640x360 (Y'CbCr) [ 364.398285][ T8770] tpg field: 1 [ 364.433106][ T8770] tpg crop: 640x360@0x0 [ 364.474062][ T21] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 364.488073][ T8770] tpg compose: 640x360@0x0 [ 364.551111][ T8770] tpg colorspace: 8 [ 364.555025][ T8770] tpg transfer function: 0/0 [ 364.560332][ T8770] tpg Y'CbCr encoding: 0/0 [ 364.568714][ T8770] tpg quantization: 0/0 [ 364.589135][ T8770] tpg RGB range: 0/2 [ 364.597995][ T8770] vivid-001: ================== END STATUS ================== [ 364.698068][ T21] usb 5-1: USB disconnect, device number 3 [ 364.703985][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 366.657882][ T8798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.938'. [ 367.191210][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.212063][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.225041][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.237306][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.263421][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.340495][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.356770][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.420798][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.484163][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.559058][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.608993][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.649450][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.656896][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.705272][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.735468][ T21] hid-generic FFF9:0000:0203.0012: unknown main item tag 0x0 [ 367.791174][ T21] hid-generic FFF9:0000:0203.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 369.289018][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz.1.942'. [ 369.298013][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.942'. [ 371.547763][ T26] audit: type=1326 audit(1741386109.740:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 371.750592][ T26] audit: type=1326 audit(1741386109.770:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 371.780788][ T26] audit: type=1326 audit(1741386109.770:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f095c968ad0 code=0x7ffc0000 [ 371.937163][ T26] audit: type=1326 audit(1741386109.770:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f095c968ad0 code=0x7ffc0000 [ 371.999841][ T26] audit: type=1326 audit(1741386109.770:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 372.022056][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.279610][ T26] audit: type=1326 audit(1741386109.770:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 372.301906][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.419750][ T26] audit: type=1326 audit(1741386109.770:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 372.568522][ T26] audit: type=1326 audit(1741386109.780:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 372.635642][ T26] audit: type=1326 audit(1741386109.780:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 372.694580][ T26] audit: type=1326 audit(1741386109.790:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f095c96a169 code=0x7ffc0000 [ 372.716968][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.777767][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.953'. [ 374.166953][ T8870] netlink: 224 bytes leftover after parsing attributes in process `syz.3.957'. [ 374.176364][ T8870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'. [ 378.819474][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.825792][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.240802][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247143][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 479.888837][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 479.895810][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5340/1:b..l [ 479.904235][ C1] (detected by 1, t=10502 jiffies, g=40217, q=230) [ 479.910822][ C1] task:kworker/u4:21 state:R running task stack:20120 pid: 5340 ppid: 2 flags:0x00004000 [ 479.922817][ C1] Workqueue: bat_events batadv_nc_worker [ 479.928498][ C1] Call Trace: [ 479.931772][ C1] [ 479.934717][ C1] __schedule+0x12c4/0x45b0 [ 479.939237][ C1] ? __mod_timer+0xa8e/0xeb0 [ 479.943833][ C1] ? mark_lock+0x98/0x340 [ 479.948159][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 479.954131][ C1] ? release_firmware_map_entry+0x190/0x190 [ 479.960027][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 479.965307][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 479.970416][ C1] ? __cond_resched+0x20/0x20 [ 479.975119][ C1] irqentry_exit+0x53/0x80 [ 479.979528][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 479.985500][ C1] RIP: 0010:rcu_is_watching+0x63/0xa0 [ 479.990890][ C1] Code: 89 f7 e8 30 34 5f 00 48 c7 c3 c8 b2 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 1a 8b 03 65 ff 0d e5 35 97 7e <74> 08 24 01 5b 41 5e 41 5f c3 e8 c6 52 95 ff eb f1 89 d9 80 e1 07 [ 480.010704][ C1] RSP: 0018:ffffc90004b77bd8 EFLAGS: 00000286 [ 480.016776][ C1] RAX: 000000000007d243 RBX: ffff8880b8e3b2c8 RCX: ffff888023bc9dc0 [ 480.024760][ C1] RDX: ffff888023bc9dc0 RSI: ffffffff8af9f2a0 RDI: ffffffff8af9f260 [ 480.032723][ C1] RBP: 0000000000000001 R08: ffffffff8a1c2661 R09: fffffbfff2131821 [ 480.040689][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000000ff [ 480.048683][ C1] R13: dffffc0000000000 R14: ffffffff8c5cc810 R15: dffffc0000000000 [ 480.056692][ C1] ? batadv_nc_worker+0xd1/0x5b0 [ 480.061659][ C1] ? rcu_is_watching+0x11/0xa0 [ 480.066434][ C1] batadv_nc_worker+0xda/0x5b0 [ 480.071222][ C1] process_one_work+0x8a1/0x10c0 [ 480.076195][ C1] ? worker_detach_from_pool+0x260/0x260 [ 480.081831][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 480.087391][ C1] ? kthread_data+0x4e/0xc0 [ 480.091917][ C1] ? wq_worker_running+0x97/0x170 [ 480.096952][ C1] worker_thread+0xaca/0x1280 [ 480.101674][ C1] kthread+0x3f6/0x4f0 [ 480.105867][ C1] ? rcu_lock_release+0x20/0x20 [ 480.110821][ C1] ? kthread_blkcg+0xd0/0xd0 [ 480.115433][ C1] ret_from_fork+0x1f/0x30 [ 480.119874][ C1] [ 480.122898][ C1] rcu: rcu_preempt kthread starved for 9862 jiffies! g40217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 480.134025][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 480.143985][ C1] rcu: RCU grace-period kthread stack dump: [ 480.149881][ C1] task:rcu_preempt state:R running task stack:26776 pid: 15 ppid: 2 flags:0x00004000 [ 480.160666][ C1] Call Trace: [ 480.163938][ C1] [ 480.166874][ C1] __schedule+0x12c4/0x45b0 [ 480.171511][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 480.177502][ C1] ? release_firmware_map_entry+0x190/0x190 [ 480.183407][ C1] ? mod_timer_pending+0x20/0x20 [ 480.188381][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 480.193766][ C1] schedule+0x11b/0x1f0 [ 480.197940][ C1] schedule_timeout+0x1b9/0x300 [ 480.202810][ C1] ? console_conditional_schedule+0x40/0x40 [ 480.208730][ C1] ? update_process_times+0x200/0x200 [ 480.214110][ C1] ? prepare_to_swait_event+0x321/0x340 [ 480.219674][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 480.224649][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 480.229854][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 480.236018][ C1] ? rcu_gp_init+0xdae/0x1140 [ 480.240710][ C1] ? rcu_gp_init+0x1140/0x1140 [ 480.245484][ C1] ? finish_swait+0xc5/0x1d0 [ 480.250087][ C1] rcu_gp_kthread+0xa4/0x360 [ 480.254680][ C1] ? _raw_spin_unlock+0x40/0x40 [ 480.259539][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 480.264670][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 480.270585][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 480.275609][ C1] kthread+0x3f6/0x4f0 [ 480.279694][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 480.284819][ C1] ? kthread_blkcg+0xd0/0xd0 [ 480.289406][ C1] ret_from_fork+0x1f/0x30 [ 480.294142][ C1] [ 480.297185][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 480.303521][ C1] Sending NMI from CPU 1 to CPUs 0: [ 480.308772][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340