last executing test programs: 13m27.063643553s ago: executing program 1 (id=12): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m25.918417848s ago: executing program 1 (id=14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1}, 0x10000) 13m24.858538991s ago: executing program 1 (id=18): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) 13m23.679171526s ago: executing program 1 (id=22): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0xfcff, 0x0, 0x3) r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000006c0)={{0x7, 0x3, 0x2, 0x1c, 'syz0\x00'}, 0x1, [0xa4, 0x0, 0x6, 0xfffffffffffffc01, 0x2, 0x0, 0x7ff, 0x2, 0x8001, 0x8, 0x4, 0xb, 0x9, 0x7, 0x5, 0x0, 0x0, 0x6, 0xfffffffffffffff9, 0xf61e, 0x7fffffff, 0x5, 0x7ff, 0x8, 0x2, 0x3, 0xa2, 0x8, 0xb29, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7fffffff, 0x9, 0x4, 0xe6, 0x101, 0x9, 0x85, 0x7, 0x9, 0x3, 0x200, 0x5, 0xfffffffffffffffa, 0x1, 0x5000, 0x7fffffffffffffff, 0x2, 0xffffffffffffffff, 0x7, 0x2, 0x0, 0x1, 0xa, 0x7727, 0x2209, 0x7, 0x400000006f6, 0x0, 0x1, 0x8, 0x7, 0x4, 0x8, 0x0, 0x2, 0x27, 0x1ff, 0x6, 0x0, 0x8, 0x4, 0x32d, 0x28, 0xffffffff00000000, 0x4, 0x1, 0x400, 0xc, 0x3f5, 0x3, 0x40, 0xffffffffffffff09, 0x0, 0xb11a, 0x80, 0x0, 0x5, 0x4, 0x7ff, 0xfade, 0xdb, 0x3, 0x5, 0x2, 0x7, 0xfffffffffffffff8, 0xf09, 0xe4ed, 0xe, 0x3f, 0x8001, 0x4, 0xc, 0x7fffffffffffffff, 0x1, 0x10001, 0x0, 0x5ef, 0x6, 0xc, 0x3cf, 0x5, 0xc399, 0xb42d, 0x1ff, 0x15, 0x80000001, 0x6, 0x1c1, 0x1, 0x80000000, 0x4, 0x7, 0x6, 0xa3, 0x4, 0x6]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) 13m21.940054729s ago: executing program 1 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 9m52.991938758s ago: executing program 4 (id=545): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@barrier}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x31c5024, 0x0, 0x4, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x3}}, 0x24, 0x3) 9m49.73749799s ago: executing program 4 (id=550): socket$kcm(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020}, 0x2020) sendto$inet6(r3, &(0x7f00000003c0), 0x0, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7fd877140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 9m47.688157256s ago: executing program 4 (id=558): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d000000", 0x1c) 9m46.542375101s ago: executing program 4 (id=560): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@barrier}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x31c5024, 0x0, 0x4, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {}, [], {0x4, 0x3}}, 0x24, 0x3) 9m45.255784657s ago: executing program 4 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xf0}}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r4, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) unshare(0x62040200) 9m29.637271327s ago: executing program 33 (id=565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a3100000000090001007379"], 0xf0}}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r4, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) unshare(0x62040200) 24.760393802s ago: executing program 0 (id=2003): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.182958145s ago: executing program 0 (id=2007): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vcsn(0x0, 0x4da, 0x1813c0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") 20.088528302s ago: executing program 0 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340), &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000000, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200000a4}, 0x4010) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 19.851759555s ago: executing program 0 (id=2013): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d000000", 0x1c) 13.854071712s ago: executing program 6 (id=2025): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 13.010783143s ago: executing program 5 (id=2031): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 11.460613433s ago: executing program 5 (id=2032): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/fscaps', 0x0, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 10.86788725s ago: executing program 5 (id=2033): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 9.770839134s ago: executing program 3 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, 0x0, &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000000, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200000a4}, 0x4010) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 9.654612276s ago: executing program 0 (id=2037): r0 = io_uring_setup(0x23b2, &(0x7f0000000080)={0x0, 0x3256, 0x80, 0x3, 0x92}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a182083044737020001020301090212000100000000"], 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x1ff, 0x5, 0x8, 0x80000001, 0x3, 0x7, 0x2000010001, 0x7, 0x6, 0x4, 0x81, 0x3, 0x0, 0x5, 0x7fff, 0x5], 0x0, 0x12000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20008000}, 0x0) 8.777509257s ago: executing program 3 (id=2039): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0xe}) rt_sigqueueinfo(r4, 0x21, &(0x7f0000001500)) 8.451382291s ago: executing program 6 (id=2040): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000000000"], 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) flock(r3, 0x1780f9c373410de4) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000002c0)='.\x00', 0x80000201) creat(&(0x7f0000000140)='./file0\x00', 0x0) 7.955799008s ago: executing program 5 (id=2041): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x20000, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x10000}, 0x8) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r6) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) 7.955457448s ago: executing program 2 (id=2042): openat$vcsu(0xffffffffffffff9c, 0x0, 0x400200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000880)=""/214, 0xd6}], 0x1, 0x6c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x20094) landlock_create_ruleset(0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x34eb, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x14e7, 0x44, &(0x7f00000002c0)=""/68, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000480)=[{0x4, 0x3, 0x3, 0x1}, {0x2, 0x4, 0x10, 0x3}, {0x0, 0x5, 0x3, 0x5}], 0x10, 0x8, @void, @value}, 0x94) 6.533932866s ago: executing program 3 (id=2043): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 6.530628166s ago: executing program 6 (id=2053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0xe}) rt_sigqueueinfo(r4, 0x21, &(0x7f0000001500)) 6.24145114s ago: executing program 2 (id=2044): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.434193293s ago: executing program 3 (id=2045): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, &(0x7f00000000c0)=0x9, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000740)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x400c0d4, &(0x7f0000019080)={0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(0x0, 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4.375378324s ago: executing program 0 (id=2046): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) execve(0x0, &(0x7f0000000400), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x2, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x112, 0x0, &(0x7f0000000240), 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r5, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 4.369150524s ago: executing program 5 (id=2047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000c00)="1c0000001e005f0214bb7afffffffff807000000b800e6ff0d000000", 0x1c) 4.284615875s ago: executing program 2 (id=2048): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.237494878s ago: executing program 2 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) inotify_init1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, 0x0, &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x80000000, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x200000a4}, 0x4010) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 3.235949229s ago: executing program 3 (id=2050): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}}}, 0x48) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYBLOB="bb8f7f079fc5012156669aae03789258922cdb06cd91399a4e6e6e87e18f009b54c95c228ec70feb1601de807b0e9a8b55e845ac5b29e5b2a8c57b7530389a66942744e0482f2c8ecad1d41f3f260bb3e4d64faf09908a2f5195be8df4b77dcfcb0273a40783c1197b3f"], 0x20e) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x2, 0x100000000004}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 3.230997098s ago: executing program 6 (id=2060): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, &(0x7f00000000c0)=0x9, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040), 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000740)={0x0, 0x0, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r4, &(0x7f00000014c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff2c, 0x400c0d4, &(0x7f0000019080)={0xa, 0x4e23, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(0x0, 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1.323061983s ago: executing program 2 (id=2051): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1.322706283s ago: executing program 6 (id=2052): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.118468595s ago: executing program 5 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x477, &(0x7f0000000cc0)="$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") r4 = open(&(0x7f0000000140)='./file2\x00', 0x64842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.095276186s ago: executing program 3 (id=2055): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") chdir(&(0x7f0000000240)='./file0\x00') lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000000000"], 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) flock(r3, 0x1780f9c373410de4) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000002c0)='.\x00', 0x80000201) creat(&(0x7f0000000140)='./file0\x00', 0x0) 127.691488ms ago: executing program 6 (id=2056): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 2 (id=2057): r0 = io_uring_setup(0x23b2, &(0x7f0000000080)={0x0, 0x3256, 0x80, 0x3, 0x92}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a182083044737020001020301090212000100000000"], 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x1ff, 0x5, 0x8, 0x80000001, 0x3, 0x7, 0x2000010001, 0x7, 0x6, 0x4, 0x81, 0x3, 0x0, 0x5, 0x7fff, 0x5], 0x0, 0x12000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20008000}, 0x0) kernel console output (not intermixed with test programs): unable to enumerate USB device [ 429.659054][ T7974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.884'. [ 430.681477][ T7984] loop2: detected capacity change from 0 to 1024 [ 431.027896][ T7990] loop0: detected capacity change from 0 to 164 [ 431.984979][ T4231] Bluetooth: hci6: command 0x0406 tx timeout [ 432.132003][ T8005] siw: device registration error -23 [ 433.634160][ T8011] loop0: detected capacity change from 0 to 1024 [ 433.960939][ T8022] loop5: detected capacity change from 0 to 164 [ 435.287205][ T8031] loop3: detected capacity change from 0 to 164 [ 435.953974][ T6237] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 436.356034][ T6237] usb 1-1: device descriptor read/64, error -71 [ 436.474358][ T8044] loop6: detected capacity change from 0 to 1024 [ 436.625953][ T6237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 437.715978][ T6237] usb 1-1: device descriptor read/64, error -71 [ 437.784077][ T8061] loop5: detected capacity change from 0 to 1024 [ 437.846195][ T6237] usb usb1-port1: attempt power cycle [ 437.901625][ T8068] loop0: detected capacity change from 0 to 164 [ 437.913345][ T8066] loop3: detected capacity change from 0 to 1024 [ 439.496665][ T8084] siw: device registration error -23 [ 440.287565][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.293905][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.373472][ T8103] siw: device registration error -23 [ 442.754996][ T8108] siw: device registration error -23 [ 444.758779][ T8120] loop5: detected capacity change from 0 to 1024 [ 446.806024][ T8129] siw: device registration error -23 [ 446.906766][ T8131] siw: device registration error -23 [ 447.389166][ T8135] loop2: detected capacity change from 0 to 256 [ 448.157839][ T8135] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 448.289943][ T8142] loop0: detected capacity change from 0 to 128 [ 448.488646][ T8142] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.577443][ T8142] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.610698][ T8148] exFAT-fs (loop2): hint_cluster is invalid (17) [ 449.468296][ T8152] netlink: 24 bytes leftover after parsing attributes in process `syz.6.932'. [ 450.602174][ T8164] loop0: detected capacity change from 0 to 1024 [ 450.932628][ T8167] siw: device registration error -23 [ 450.955298][ T8169] siw: device registration error -23 [ 452.525003][ T8179] siw: device registration error -23 [ 454.732121][ T8192] loop6: detected capacity change from 0 to 128 [ 454.878953][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.946'. [ 454.892656][ T8192] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 454.908595][ T8192] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.880396][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 456.904782][ T8223] loop6: detected capacity change from 0 to 256 [ 457.069486][ T8223] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 457.096010][ T4231] usb 1-1: device descriptor read/64, error -71 [ 457.545908][ T4231] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 457.553611][ T8236] exFAT-fs (loop6): hint_cluster is invalid (17) [ 457.583909][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 457.751490][ T4231] usb 1-1: device descriptor read/64, error -71 [ 457.876127][ T4231] usb usb1-port1: attempt power cycle [ 457.893273][ T8242] loop3: detected capacity change from 0 to 128 [ 457.976474][ T8242] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 458.006845][ T8242] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.438151][ T4231] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 459.462843][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 459.481781][ T8259] loop5: detected capacity change from 0 to 164 [ 459.538945][ T4231] usb 1-1: device descriptor read/8, error -71 [ 461.025945][ T4231] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 461.315935][ T4231] usb 1-1: device descriptor read/8, error -71 [ 461.439265][ T4231] usb usb1-port1: unable to enumerate USB device [ 462.112901][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'. [ 463.386667][ T8301] loop2: detected capacity change from 0 to 128 [ 463.447235][ T8303] siw: device registration error -23 [ 463.484180][ T8301] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 463.506158][ T8301] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.335034][ T8309] siw: device registration error -23 [ 467.036073][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 467.359753][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 467.496503][ T7] usb 4-1: no configurations [ 467.528866][ T7] usb 4-1: can't read configurations, error -22 [ 467.741259][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 467.808560][ T8322] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 467.816777][ T8322] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 467.976771][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.983'. [ 468.015968][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 468.042634][ T8333] loop2: detected capacity change from 0 to 164 [ 468.058126][ T7] usb 4-1: no configurations [ 468.062785][ T7] usb 4-1: can't read configurations, error -22 [ 468.349346][ T7] usb usb4-port1: attempt power cycle [ 469.062162][ T8344] siw: device registration error -23 [ 469.964629][ T8350] loop5: detected capacity change from 0 to 128 [ 470.645372][ T8350] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.010426][ T8350] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.050012][ T8363] loop0: detected capacity change from 0 to 164 [ 471.089847][ T8365] loop3: detected capacity change from 0 to 164 [ 473.019148][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.998'. [ 473.443469][ T8393] siw: device registration error -23 [ 474.625906][ T4160] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 474.955921][ T4160] usb 6-1: Using ep0 maxpacket: 32 [ 475.043679][ T4160] usb 6-1: no configurations [ 475.048880][ T4160] usb 6-1: can't read configurations, error -22 [ 475.129129][ T8406] loop0: detected capacity change from 0 to 164 [ 475.205930][ T4160] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 475.479979][ T4160] usb 6-1: Using ep0 maxpacket: 32 [ 475.516238][ T4160] usb 6-1: no configurations [ 475.521157][ T4160] usb 6-1: can't read configurations, error -22 [ 475.541137][ T4160] usb usb6-port1: attempt power cycle [ 476.322307][ T8414] loop6: detected capacity change from 0 to 164 [ 476.586024][ T4160] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 477.554780][ T8421] loop0: detected capacity change from 0 to 128 [ 477.586604][ T4160] usb 6-1: device descriptor read/8, error -71 [ 478.209181][ T8421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 478.230436][ T8421] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.287587][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1012'. [ 478.571568][ T8439] loop3: detected capacity change from 0 to 256 [ 478.893447][ T8439] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 479.022564][ T8447] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 481.715943][ T6239] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 481.751109][ T8467] loop0: detected capacity change from 0 to 164 [ 482.735835][ T6239] usb 6-1: Using ep0 maxpacket: 32 [ 482.776190][ T6239] usb 6-1: no configurations [ 482.781335][ T6239] usb 6-1: can't read configurations, error -22 [ 483.046069][ T6239] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 483.057920][ T8479] loop0: detected capacity change from 0 to 164 [ 483.240704][ T8474] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 483.352546][ T6239] usb 6-1: Using ep0 maxpacket: 32 [ 483.386057][ T8474] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 484.168375][ T6239] usb 6-1: device descriptor read/all, error -71 [ 484.189510][ T6239] usb usb6-port1: attempt power cycle [ 484.267064][ T8484] loop5: detected capacity change from 0 to 128 [ 484.341445][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 484.562821][ T8484] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 484.590763][ T8484] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.783671][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 484.902608][ T8500] loop2: detected capacity change from 0 to 164 [ 486.644473][ T8510] loop3: detected capacity change from 0 to 256 [ 486.962970][ T8512] loop0: detected capacity change from 0 to 164 [ 487.030722][ T8510] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 488.092526][ T8519] loop5: detected capacity change from 0 to 164 [ 488.258877][ T8526] exFAT-fs (loop3): hint_cluster is invalid (17) [ 488.466013][ T6237] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 489.477288][ T8533] loop6: detected capacity change from 0 to 164 [ 489.698228][ T6237] usb 1-1: Using ep0 maxpacket: 32 [ 489.817408][ T8537] siw: device registration error -23 [ 490.810805][ T8540] loop5: detected capacity change from 0 to 164 [ 491.773601][ T8551] loop2: detected capacity change from 0 to 128 [ 491.796156][ T6237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.823759][ T6237] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 491.833802][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 491.957913][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1047'. [ 492.028675][ T8551] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 492.047678][ T8551] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.963659][ T8572] loop5: detected capacity change from 0 to 164 [ 493.138474][ T6237] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 493.150161][ T6237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.158468][ T6237] usb 1-1: Product: syz [ 493.162729][ T6237] usb 1-1: Manufacturer: syz [ 493.167622][ T6237] usb 1-1: SerialNumber: syz [ 493.188029][ T6237] usb 1-1: config 0 descriptor?? [ 493.337764][ T6237] usb 1-1: can't set config #0, error -71 [ 493.518304][ T6237] usb 1-1: USB disconnect, device number 13 [ 494.593827][ T8587] loop5: detected capacity change from 0 to 164 [ 495.745754][ T8593] siw: device registration error -23 [ 497.548343][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'. [ 499.175329][ T6237] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 500.641708][ T6237] usb 6-1: Using ep0 maxpacket: 32 [ 500.760337][ T8634] loop2: detected capacity change from 0 to 164 [ 500.796047][ T6237] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.950466][ T6237] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.889672][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.896149][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.955140][ T6239] Bluetooth: hci4: command 0x1003 tx timeout [ 501.970168][ T4180] Bluetooth: hci4: sending frame failed (-49) [ 502.068736][ T6237] usb 6-1: string descriptor 0 read error: -71 [ 502.075539][ T6237] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 502.084685][ T6237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.095429][ T6237] usb 6-1: config 0 descriptor?? [ 502.127645][ T6237] usb 6-1: can't set config #0, error -71 [ 502.183130][ T6237] usb 6-1: USB disconnect, device number 21 [ 503.067671][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1072'. [ 504.006132][ T7] Bluetooth: hci4: command 0x1001 tx timeout [ 504.014349][ T4180] Bluetooth: hci4: sending frame failed (-49) [ 504.346780][ T8668] loop6: detected capacity change from 0 to 164 [ 506.106405][ T8680] siw: device registration error -23 [ 506.817681][ T4215] Bluetooth: hci4: command 0x1009 tx timeout [ 507.365859][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 507.395450][ T8693] loop5: detected capacity change from 0 to 256 [ 507.483452][ T8693] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 507.635999][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 507.766285][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.786033][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 507.798890][ T8696] exFAT-fs (loop5): hint_cluster is invalid (17) [ 507.992744][ T7] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 508.026055][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.034122][ T7] usb 3-1: Product: syz [ 508.057394][ T8700] loop6: detected capacity change from 0 to 164 [ 508.071592][ T7] usb 3-1: Manufacturer: syz [ 508.077985][ T7] usb 3-1: SerialNumber: syz [ 508.084989][ T7] usb 3-1: config 0 descriptor?? [ 508.256959][ T8702] loop3: detected capacity change from 0 to 164 [ 509.152710][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 509.360792][ T4219] usb 3-1: USB disconnect, device number 5 [ 509.547603][ T8716] loop3: detected capacity change from 0 to 1024 [ 510.685234][ T8727] loop3: detected capacity change from 0 to 256 [ 510.878145][ T8727] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 511.372829][ T8735] loop2: detected capacity change from 0 to 256 [ 511.581869][ T8739] loop0: detected capacity change from 0 to 164 [ 511.604529][ T8735] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 512.678641][ T8747] loop6: detected capacity change from 0 to 256 [ 512.764007][ T8747] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 513.362266][ T8755] exFAT-fs (loop2): hint_cluster is invalid (17) [ 513.483149][ T8757] exFAT-fs (loop6): hint_cluster is invalid (17) [ 514.089294][ T8762] loop5: detected capacity change from 0 to 164 [ 515.425878][ T4231] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 515.685954][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 515.920125][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.930427][ T4231] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.216008][ T4231] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 516.286065][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.315848][ T4231] usb 1-1: Product: syz [ 516.320050][ T4231] usb 1-1: Manufacturer: syz [ 516.336011][ T4231] usb 1-1: SerialNumber: syz [ 516.351386][ T4231] usb 1-1: config 0 descriptor?? [ 516.677841][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 516.685323][ T8795] loop5: detected capacity change from 0 to 164 [ 517.042325][ T4219] usb 1-1: USB disconnect, device number 14 [ 518.002857][ T8815] loop5: detected capacity change from 0 to 256 [ 518.086383][ T8815] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 518.252846][ T8823] lo speed is unknown, defaulting to 1000 [ 518.408769][ T8826] loop6: detected capacity change from 0 to 1024 [ 518.529627][ T8826] EXT4-fs (loop6): Ignoring removed bh option [ 518.637801][ T8826] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 518.784813][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 518.784828][ T26] audit: type=1800 audit(1746258356.562:249): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1127" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 518.890721][ T8826] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1127: Allocating blocks 481-513 which overlap fs metadata [ 518.979465][ T8826] EXT4-fs (loop6): Remounting filesystem read-only [ 519.439826][ T8843] exFAT-fs (loop5): hint_cluster is invalid (17) [ 521.791290][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 521.923766][ T8861] loop3: detected capacity change from 0 to 512 [ 522.013196][ T8861] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 522.031309][ T8861] EXT4-fs (loop3): invalid journal inode [ 522.037413][ T8861] EXT4-fs (loop3): can't get journal size [ 522.103733][ T8861] EXT4-fs (loop3): 1 truncate cleaned up [ 522.109655][ T8861] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 522.225999][ T26] audit: type=1800 audit(1746258359.962:250): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1136" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 522.795843][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 522.960742][ T8876] loop3: detected capacity change from 0 to 256 [ 522.966174][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.977421][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 523.186073][ T7] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 523.198412][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.209791][ T7] usb 1-1: Product: syz [ 523.215100][ T7] usb 1-1: Manufacturer: syz [ 523.219933][ T7] usb 1-1: SerialNumber: syz [ 523.229527][ T7] usb 1-1: config 0 descriptor?? [ 523.246161][ T8878] loop5: detected capacity change from 0 to 164 [ 523.285159][ T8876] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 523.567369][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'. [ 524.579076][ T4206] usb 1-1: USB disconnect, device number 15 [ 524.922936][ T8893] exFAT-fs (loop3): hint_cluster is invalid (17) [ 525.019019][ T8895] loop2: detected capacity change from 0 to 164 [ 526.084926][ T8903] loop0: detected capacity change from 0 to 164 [ 527.889391][ T8930] ptrace attach of "./syz-executor exec"[4173] was attempted by "./syz-executor exec"[8930] [ 528.106509][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 528.555951][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 528.708138][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.809437][ T7] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.840433][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1159'. [ 528.943092][ T8938] loop2: detected capacity change from 0 to 164 [ 529.026049][ T7] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 529.045673][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.053288][ T8941] loop0: detected capacity change from 0 to 256 [ 529.068780][ T8944] loop3: detected capacity change from 0 to 164 [ 529.079186][ T7] usb 7-1: Product: syz [ 529.101910][ T7] usb 7-1: Manufacturer: syz [ 529.118385][ T7] usb 7-1: SerialNumber: syz [ 529.135071][ T7] usb 7-1: config 0 descriptor?? [ 530.156179][ T8941] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 530.172867][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1158'. [ 530.577428][ T8957] exFAT-fs (loop0): hint_cluster is invalid (17) [ 530.828907][ T8955] loop3: detected capacity change from 0 to 164 [ 531.825245][ T4231] usb 7-1: USB disconnect, device number 4 [ 532.338713][ T8965] loop0: detected capacity change from 0 to 164 [ 533.393987][ T8971] loop6: detected capacity change from 0 to 164 [ 533.557100][ T8975] loop0: detected capacity change from 0 to 256 [ 534.518902][ T8975] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 534.537744][ T8983] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1174'. [ 534.822754][ T8987] loop6: detected capacity change from 0 to 164 [ 534.903992][ T8990] exFAT-fs (loop0): hint_cluster is invalid (17) [ 537.372392][ T9008] loop6: detected capacity change from 0 to 256 [ 537.458115][ T9012] loop5: detected capacity change from 0 to 256 [ 537.562559][ T9008] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 537.624352][ T9012] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 537.647371][ T4231] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 538.047711][ T9016] exFAT-fs (loop6): hint_cluster is invalid (17) [ 538.090118][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 538.632410][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.642687][ T4231] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.752250][ T9020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1187'. [ 538.906076][ T4231] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 538.916940][ T9024] loop6: detected capacity change from 0 to 164 [ 538.923236][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.933098][ T4231] usb 4-1: Product: syz [ 538.937393][ T4231] usb 4-1: Manufacturer: syz [ 538.942150][ T4231] usb 4-1: SerialNumber: syz [ 538.963604][ T4231] usb 4-1: config 0 descriptor?? [ 539.161005][ T9030] loop0: detected capacity change from 0 to 256 [ 539.341374][ T9030] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 539.696684][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1182'. [ 540.074624][ T9037] exFAT-fs (loop0): hint_cluster is invalid (17) [ 540.774279][ T4217] usb 4-1: USB disconnect, device number 18 [ 540.874722][ T9042] loop0: detected capacity change from 0 to 164 [ 544.670475][ T9068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1199'. [ 545.062426][ T9079] loop6: detected capacity change from 0 to 256 [ 545.149885][ T9079] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 545.446047][ T4206] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 545.515536][ T9082] exFAT-fs (loop6): hint_cluster is invalid (17) [ 545.755917][ T4206] usb 1-1: Using ep0 maxpacket: 32 [ 545.876499][ T4206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.035992][ T4206] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 546.216081][ T4206] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 546.242315][ T4206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.280311][ T4206] usb 1-1: Product: syz [ 546.294737][ T9086] loop6: detected capacity change from 0 to 164 [ 546.301578][ T4206] usb 1-1: Manufacturer: syz [ 546.312277][ T4206] usb 1-1: SerialNumber: syz [ 546.340957][ T4206] usb 1-1: config 0 descriptor?? [ 546.982294][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 547.329167][ T7] usb 1-1: USB disconnect, device number 16 [ 549.079695][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 549.404636][ T9126] loop5: detected capacity change from 0 to 1024 [ 549.686924][ T9126] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 550.561829][ T9137] loop2: detected capacity change from 0 to 164 [ 550.605069][ T9126] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 550.633732][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.342113][ T9149] loop2: detected capacity change from 0 to 1024 [ 552.394861][ T9149] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 552.552960][ T9149] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 554.553860][ T4160] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 555.657257][ T4160] usb 6-1: Using ep0 maxpacket: 32 [ 555.667652][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1227'. [ 555.935995][ T4160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.041274][ T4160] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.327283][ T4160] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 556.434505][ T4160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.660429][ T9188] loop6: detected capacity change from 0 to 164 [ 556.675829][ T4160] usb 6-1: Product: syz [ 556.698097][ T4160] usb 6-1: Manufacturer: syz [ 556.726408][ T4160] usb 6-1: SerialNumber: syz [ 556.795360][ T4160] usb 6-1: config 0 descriptor?? [ 556.845046][ T9194] loop3: detected capacity change from 0 to 256 [ 556.884379][ T9195] loop2: detected capacity change from 0 to 1024 [ 557.005891][ T4160] usb 6-1: can't set config #0, error -71 [ 557.015955][ T4160] usb 6-1: USB disconnect, device number 22 [ 557.022908][ T9194] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 557.927549][ T9195] EXT4-fs (loop2): Ignoring removed bh option [ 558.912640][ T9195] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 559.102928][ T26] audit: type=1800 audit(1746258396.882:251): pid=9195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1236" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 559.156457][ T9205] lo speed is unknown, defaulting to 1000 [ 559.192418][ T9195] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.1236: Allocating blocks 481-513 which overlap fs metadata [ 559.331149][ T9195] EXT4-fs (loop2): Remounting filesystem read-only [ 559.689800][ T9218] process 'syz.6.1240' launched './file0' with NULL argv: empty string added [ 561.477917][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1242'. [ 562.901229][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.911240][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.115404][ T9246] loop5: detected capacity change from 0 to 164 [ 564.904334][ T9249] lo speed is unknown, defaulting to 1000 [ 565.013204][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1256'. [ 565.181117][ T9269] loop2: detected capacity change from 0 to 1024 [ 565.248943][ T9271] loop3: detected capacity change from 0 to 256 [ 565.272223][ T9269] EXT4-fs (loop2): Ignoring removed orlov option [ 565.278748][ T9269] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 565.334698][ T9271] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 565.418079][ T9269] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 565.689003][ T9283] loop0: detected capacity change from 0 to 512 [ 566.072382][ T9283] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 566.112125][ T9283] EXT4-fs (loop0): invalid journal inode [ 566.119102][ T9283] EXT4-fs (loop0): can't get journal size [ 566.254988][ T9283] EXT4-fs (loop0): 1 truncate cleaned up [ 566.261247][ T9283] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 566.378034][ T26] audit: type=1800 audit(1746258404.152:252): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 567.337787][ T9290] loop0: detected capacity change from 0 to 256 [ 567.765531][ T9290] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 568.011055][ T9294] loop6: detected capacity change from 0 to 164 [ 569.129026][ T9299] loop6: detected capacity change from 0 to 164 [ 570.147734][ T9308] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[9308] [ 571.107594][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1267'. [ 572.245975][ T4160] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 572.300958][ T9334] loop2: detected capacity change from 0 to 164 [ 572.314452][ T9336] loop3: detected capacity change from 0 to 256 [ 572.380422][ T9340] loop5: detected capacity change from 0 to 164 [ 572.432544][ T9336] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 572.651022][ T4160] usb 7-1: Using ep0 maxpacket: 32 [ 573.496591][ T4160] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.525973][ T4160] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.584339][ T9350] loop2: detected capacity change from 0 to 256 [ 573.716171][ T4160] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 573.735671][ T4160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.809469][ T9350] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 573.834084][ T4160] usb 7-1: Product: syz [ 573.919504][ T4160] usb 7-1: Manufacturer: syz [ 573.955527][ T4160] usb 7-1: SerialNumber: syz [ 574.162409][ T4160] usb 7-1: config 0 descriptor?? [ 574.496205][ T4160] usb 7-1: can't set config #0, error -71 [ 574.504091][ T4160] usb 7-1: USB disconnect, device number 5 [ 574.622750][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'. [ 574.905013][ T9364] exFAT-fs (loop3): hint_cluster is invalid (17) [ 576.210519][ T9377] lo speed is unknown, defaulting to 1000 [ 576.319603][ T9383] loop5: detected capacity change from 0 to 164 [ 576.532657][ T9385] exFAT-fs (loop2): hint_cluster is invalid (17) [ 576.881334][ T9388] loop5: detected capacity change from 0 to 164 [ 577.749755][ T9392] loop0: detected capacity change from 0 to 1024 [ 577.895651][ T9392] EXT4-fs (loop0): Ignoring removed bh option [ 577.987160][ T9392] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 578.011619][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.193488][ T9397] lo speed is unknown, defaulting to 1000 [ 578.228389][ T26] audit: type=1800 audit(1746258416.012:253): pid=9392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1291" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 578.298534][ T9392] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.1291: Allocating blocks 481-513 which overlap fs metadata [ 578.388420][ T9392] EXT4-fs (loop0): Remounting filesystem read-only [ 578.996182][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1295'. [ 579.256797][ T4219] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 579.495955][ T4219] usb 4-1: Using ep0 maxpacket: 32 [ 579.616408][ T4219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.688504][ T4219] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 580.006217][ T4219] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 580.031579][ T9424] loop6: detected capacity change from 0 to 164 [ 580.038286][ T4219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.092957][ T4219] usb 4-1: Product: syz [ 580.099808][ T9420] lo speed is unknown, defaulting to 1000 [ 580.150310][ T4219] usb 4-1: Manufacturer: syz [ 580.357673][ T4219] usb 4-1: SerialNumber: syz [ 580.399103][ T9426] lo speed is unknown, defaulting to 1000 [ 580.415399][ T4219] usb 4-1: config 0 descriptor?? [ 580.557510][ T9431] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[9431] [ 580.731177][ T9434] loop6: detected capacity change from 0 to 164 [ 580.758385][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 581.015529][ T6236] usb 4-1: USB disconnect, device number 19 [ 582.236258][ T9446] fuse: Bad value for 'fd' [ 582.883147][ T9451] loop3: detected capacity change from 0 to 256 [ 582.903703][ T9452] loop6: detected capacity change from 0 to 256 [ 583.027849][ T9452] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 583.040340][ T9451] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 583.257180][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 584.393309][ T9467] exFAT-fs (loop3): hint_cluster is invalid (17) [ 584.524893][ T9469] exFAT-fs (loop6): hint_cluster is invalid (17) [ 584.738103][ T9473] lo speed is unknown, defaulting to 1000 [ 586.761556][ T9488] loop0: detected capacity change from 0 to 164 [ 587.727890][ T9497] fuse: Bad value for 'fd' [ 587.755498][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 591.583144][ T9539] loop6: detected capacity change from 0 to 164 [ 591.629677][ T9530] lo speed is unknown, defaulting to 1000 [ 594.151124][ T1327] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 594.185309][ T9557] lo speed is unknown, defaulting to 1000 [ 594.405833][ T1327] usb 7-1: Using ep0 maxpacket: 32 [ 595.265908][ T1327] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.285817][ T1327] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.446118][ T1327] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 595.455200][ T1327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.527034][ T1327] usb 7-1: Product: syz [ 595.531259][ T1327] usb 7-1: Manufacturer: syz [ 595.549751][ T1327] usb 7-1: SerialNumber: syz [ 595.585544][ T1327] usb 7-1: config 0 descriptor?? [ 595.857828][ T9567] lo speed is unknown, defaulting to 1000 [ 595.975124][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1332'. [ 596.635585][ T9577] fuse: Bad value for 'group_id' [ 596.742792][ T6236] usb 7-1: USB disconnect, device number 6 [ 596.803640][ T9583] loop0: detected capacity change from 0 to 164 [ 598.383272][ T9591] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[9591] [ 599.636259][ T9610] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1347'. [ 599.692971][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 600.387690][ T9610] netlink: 'syz.6.1347': attribute type 11 has an invalid length. [ 600.591610][ T9610] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1347'. [ 600.685627][ T9623] fuse: Bad value for 'group_id' [ 600.894747][ T9631] loop5: detected capacity change from 0 to 512 [ 602.030913][ T9631] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 605.620417][ T9631] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 605.781279][ T9636] loop3: detected capacity change from 0 to 164 [ 606.639616][ T9644] loop2: detected capacity change from 0 to 512 [ 608.022893][ T9647] loop0: detected capacity change from 0 to 256 [ 608.113401][ T9644] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1357: corrupted inode contents [ 608.130991][ T9644] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.1357: mark_inode_dirty error [ 608.160136][ T9644] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1357: corrupted inode contents [ 608.175321][ T9644] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1357: mark_inode_dirty error [ 608.198511][ T9644] Quota error (device loop2): write_blk: dquota write failed [ 608.206989][ T9644] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 608.217264][ T9644] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1357: Failed to acquire dquot type 0 [ 608.266920][ T9644] EXT4-fs (loop2): 1 orphan inode deleted [ 608.272778][ T9644] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 608.284464][ T9644] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.945258][ T9644] syz.2.1357 (9644) used greatest stack depth: 20448 bytes left [ 609.322226][ T9647] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 610.303127][ T9671] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 612.326225][ T1327] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 612.517418][ T9690] loop3: detected capacity change from 0 to 164 [ 612.576988][ T1327] usb 7-1: Using ep0 maxpacket: 32 [ 612.619501][ T9695] loop5: detected capacity change from 0 to 256 [ 612.845890][ T1327] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.877298][ T1327] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 612.908991][ T9695] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 613.096074][ T1327] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 613.123225][ T1327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.127253][ T9700] loop3: detected capacity change from 0 to 256 [ 613.159022][ T9700] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 613.250478][ T9701] exFAT-fs (loop5): hint_cluster is invalid (17) [ 613.421328][ T1327] usb 7-1: Product: syz [ 613.595644][ T1327] usb 7-1: Manufacturer: syz [ 613.600367][ T1327] usb 7-1: SerialNumber: syz [ 613.819035][ T1327] usb 7-1: config 0 descriptor?? [ 613.876150][ T1327] usb 7-1: can't set config #0, error -71 [ 613.946962][ T9703] exFAT-fs (loop3): hint_cluster is invalid (17) [ 614.030005][ T1327] usb 7-1: USB disconnect, device number 7 [ 614.593500][ T9707] loop5: detected capacity change from 0 to 164 [ 614.601759][ T9709] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1377'. [ 614.662774][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 614.710047][ T9709] netlink: 'syz.3.1377': attribute type 11 has an invalid length. [ 614.750711][ T9709] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1377'. [ 616.581287][ T9727] loop5: detected capacity change from 0 to 164 [ 616.591624][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1381'. [ 618.159994][ T9747] loop5: detected capacity change from 0 to 164 [ 618.319535][ T9754] loop0: detected capacity change from 0 to 256 [ 618.415871][ T9754] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 618.604672][ T4218] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 618.644770][ T9756] loop5: detected capacity change from 0 to 256 [ 618.747548][ T9758] exFAT-fs (loop0): hint_cluster is invalid (17) [ 618.845930][ T4218] usb 4-1: Using ep0 maxpacket: 32 [ 618.966346][ T4218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.993797][ T4218] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 619.259449][ T4218] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 619.386485][ T4218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.408097][ T4218] usb 4-1: Product: syz [ 619.420744][ T4218] usb 4-1: Manufacturer: syz [ 619.433613][ T4218] usb 4-1: SerialNumber: syz [ 619.452483][ T9756] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 619.696829][ T4218] usb 4-1: config 0 descriptor?? [ 620.355834][ T9765] ptrace attach of "./syz-executor exec"[4173] was attempted by "./syz-executor exec"[9765] [ 621.232820][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 621.700605][ T6237] usb 4-1: USB disconnect, device number 20 [ 621.839512][ T9784] lo speed is unknown, defaulting to 1000 [ 622.457617][ T9790] lo speed is unknown, defaulting to 1000 [ 623.157358][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1398'. [ 623.407451][ T9802] loop3: detected capacity change from 0 to 164 [ 623.604720][ T9804] loop6: detected capacity change from 0 to 256 [ 623.800103][ T9804] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 624.398123][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.404464][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.817140][ T9810] exFAT-fs (loop6): hint_cluster is invalid (17) [ 624.835417][ T9812] loop3: detected capacity change from 0 to 256 [ 625.032610][ T9812] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 625.612467][ T9814] exFAT-fs (loop3): hint_cluster is invalid (17) [ 626.585762][ T9820] lo speed is unknown, defaulting to 1000 [ 627.795426][ T9825] lo speed is unknown, defaulting to 1000 [ 628.978702][ T9833] lo speed is unknown, defaulting to 1000 [ 630.211638][ T9841] lo speed is unknown, defaulting to 1000 [ 630.965880][ T6237] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 631.107680][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1413'. [ 631.165941][ T9846] loop2: detected capacity change from 0 to 164 [ 631.395925][ T6237] usb 4-1: Using ep0 maxpacket: 32 [ 632.140750][ T9856] loop6: detected capacity change from 0 to 256 [ 632.336770][ T9856] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 632.361329][ T6237] usb 4-1: device descriptor read/all, error -71 [ 634.179008][ T9877] loop0: detected capacity change from 0 to 256 [ 634.393256][ T9877] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 634.802340][ T9882] exFAT-fs (loop0): hint_cluster is invalid (17) [ 634.822951][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1425'. [ 635.071927][ T9888] loop3: detected capacity change from 0 to 512 [ 635.265883][ T9888] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #3: comm syz.3.1424: corrupted inode contents [ 635.313099][ T9888] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #3: comm syz.3.1424: mark_inode_dirty error [ 635.328090][ T9888] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #3: comm syz.3.1424: corrupted inode contents [ 635.340551][ T9888] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1424: mark_inode_dirty error [ 635.354740][ T9888] Quota error (device loop3): write_blk: dquota write failed [ 635.362433][ T9888] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 635.372673][ T9888] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.1424: Failed to acquire dquot type 0 [ 635.390137][ T9888] EXT4-fs (loop3): 1 orphan inode deleted [ 635.396057][ T9888] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 635.407286][ T9888] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.629736][ T9897] loop6: detected capacity change from 0 to 164 [ 637.595965][ T6239] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 637.886148][ T6239] usb 4-1: Using ep0 maxpacket: 32 [ 638.096385][ T6239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.137166][ T6239] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 638.248680][ T9915] loop6: detected capacity change from 0 to 256 [ 638.411231][ T6239] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 638.438681][ T6239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.450130][ T9915] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 638.455786][ T6239] usb 4-1: Product: syz [ 638.480439][ T6239] usb 4-1: Manufacturer: syz [ 638.485084][ T6239] usb 4-1: SerialNumber: syz [ 638.500653][ T6239] usb 4-1: config 0 descriptor?? [ 638.894542][ T9921] exFAT-fs (loop6): hint_cluster is invalid (17) [ 639.453810][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 639.683844][ T9934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1436'. [ 640.942136][ T9937] lo speed is unknown, defaulting to 1000 [ 641.231509][ T9919] usb 4-1: USB disconnect, device number 23 [ 641.411734][ T9946] loop3: detected capacity change from 0 to 164 [ 643.070165][ T9959] loop5: detected capacity change from 0 to 256 [ 643.233745][ T9959] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 643.574790][ T9972] loop0: detected capacity change from 0 to 256 [ 643.681717][ T9974] exFAT-fs (loop5): hint_cluster is invalid (17) [ 643.765341][ T9972] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 645.673585][ T9981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1448'. [ 646.205797][ T4160] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 646.445786][ T4160] usb 7-1: Using ep0 maxpacket: 32 [ 646.566095][ T4160] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.580882][ T4160] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 646.745929][ T4160] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 646.762360][ T4160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.798957][ T4160] usb 7-1: Product: syz [ 646.813788][ T4160] usb 7-1: Manufacturer: syz [ 646.827457][ T4160] usb 7-1: SerialNumber: syz [ 646.854242][ T4160] usb 7-1: config 0 descriptor?? [ 647.144895][T10001] loop2: detected capacity change from 0 to 164 [ 647.283658][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1450'. [ 648.187361][ T9922] usb 7-1: USB disconnect, device number 8 [ 648.370264][T10017] loop5: detected capacity change from 0 to 256 [ 648.437908][T10019] loop2: detected capacity change from 0 to 512 [ 651.389680][T10017] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 651.403815][T10019] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 651.925359][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1461'. [ 652.512140][T10038] loop2: detected capacity change from 0 to 256 [ 652.627371][T10040] loop5: detected capacity change from 0 to 164 [ 652.661972][T10038] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 652.893726][T10038] exFAT-fs (loop2): hint_cluster is invalid (17) [ 653.467424][T10047] loop0: detected capacity change from 0 to 256 [ 653.642002][T10047] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 654.134963][T10047] exFAT-fs (loop0): hint_cluster is invalid (17) [ 654.777195][T10061] loop2: detected capacity change from 0 to 256 [ 654.852424][T10066] loop0: detected capacity change from 0 to 512 [ 654.925303][T10061] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 655.004154][T10066] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.1472: corrupted inode contents [ 655.022383][T10066] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #3: comm syz.0.1472: mark_inode_dirty error [ 655.036343][T10066] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.1472: corrupted inode contents [ 655.049070][T10066] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1472: mark_inode_dirty error [ 655.061166][ T9919] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 655.072944][T10066] Quota error (device loop0): write_blk: dquota write failed [ 655.080558][T10066] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 655.090636][T10066] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.1472: Failed to acquire dquot type 0 [ 655.178430][T10066] EXT4-fs (loop0): 1 orphan inode deleted [ 655.184217][T10066] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 655.195480][T10066] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.335910][ T9919] usb 6-1: Using ep0 maxpacket: 32 [ 655.456727][ T9919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.480417][T10073] exFAT-fs (loop2): hint_cluster is invalid (17) [ 655.493297][ T9919] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.677385][ T9919] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 655.739485][ T9919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.748236][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1474'. [ 655.785343][ T9919] usb 6-1: Product: syz [ 655.806177][ T9919] usb 6-1: Manufacturer: syz [ 655.810854][ T9919] usb 6-1: SerialNumber: syz [ 655.846944][ T9919] usb 6-1: config 0 descriptor?? [ 656.151831][T10084] loop6: detected capacity change from 0 to 512 [ 656.587934][T10084] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.1476: corrupted inode contents [ 656.602742][T10084] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.1476: mark_inode_dirty error [ 656.625874][T10084] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.1476: corrupted inode contents [ 656.639757][T10084] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.1476: mark_inode_dirty error [ 656.659144][T10084] Quota error (device loop6): write_blk: dquota write failed [ 656.667224][T10084] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 656.678165][T10084] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1476: Failed to acquire dquot type 0 [ 656.714188][T10084] EXT4-fs (loop6): 1 orphan inode deleted [ 656.720158][T10084] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 656.731763][T10084] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.632887][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'. [ 659.362626][ T4217] usb 6-1: USB disconnect, device number 23 [ 659.603805][T10099] loop5: detected capacity change from 0 to 164 [ 659.872401][T10103] loop6: detected capacity change from 0 to 512 [ 660.893725][T10110] ptrace attach of "./syz-executor exec"[4174] was attempted by "./syz-executor exec"[10110] [ 661.701029][T10103] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.1483: corrupted inode contents [ 661.713415][T10103] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.1483: mark_inode_dirty error [ 661.727974][T10103] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.1483: corrupted inode contents [ 661.786430][T10103] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.1483: mark_inode_dirty error [ 661.800997][T10103] Quota error (device loop6): write_blk: dquota write failed [ 661.808559][T10103] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 661.818622][T10103] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1483: Failed to acquire dquot type 0 [ 661.834150][T10103] EXT4-fs (loop6): 1 orphan inode deleted [ 661.840727][T10103] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 661.849089][T10112] loop5: detected capacity change from 0 to 256 [ 661.852932][T10103] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.977414][T10112] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 662.301705][T10112] exFAT-fs (loop5): hint_cluster is invalid (17) [ 662.752728][T10123] lo speed is unknown, defaulting to 1000 [ 663.431978][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1488'. [ 664.503659][ T4285] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 665.165176][T10144] loop2: detected capacity change from 0 to 164 [ 665.395805][ T4285] usb 6-1: Using ep0 maxpacket: 32 [ 666.885860][ T4285] usb 6-1: unable to read config index 0 descriptor/all [ 666.892880][ T4285] usb 6-1: can't read configurations, error -71 [ 666.965637][T10161] loop2: detected capacity change from 0 to 256 [ 667.143717][T10161] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 668.270424][T10169] exFAT-fs (loop2): hint_cluster is invalid (17) [ 668.570775][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1503'. [ 669.875065][T10193] loop0: detected capacity change from 0 to 164 [ 670.169738][ T1327] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 670.204358][T10198] loop6: detected capacity change from 0 to 1024 [ 670.350363][T10198] EXT4-fs (loop6): Ignoring removed orlov option [ 670.365441][T10198] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 670.582813][T10198] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 670.848220][T10207] loop3: detected capacity change from 0 to 256 [ 670.876794][ T1327] usb 6-1: Using ep0 maxpacket: 32 [ 671.016472][T10207] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 671.039495][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1516'. [ 671.499938][ T1327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.991112][ T1327] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 673.056663][T10226] exFAT-fs (loop3): hint_cluster is invalid (17) [ 673.378282][ T1327] usb 6-1: string descriptor 0 read error: -71 [ 673.384598][ T1327] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 673.394198][ T1327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.535114][ T1327] usb 6-1: config 0 descriptor?? [ 674.323690][ T1327] usb 6-1: can't set config #0, error -71 [ 674.339966][ T1327] usb 6-1: USB disconnect, device number 26 [ 674.741506][ T9922] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 674.791381][T10246] loop5: detected capacity change from 0 to 164 [ 675.005897][ T9922] usb 1-1: Using ep0 maxpacket: 32 [ 675.126056][ T9922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.160434][ T9922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 675.350200][ T9922] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 675.403494][ T9922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.423394][ T9922] usb 1-1: Product: syz [ 675.428035][ T9922] usb 1-1: Manufacturer: syz [ 675.432651][ T9922] usb 1-1: SerialNumber: syz [ 675.478907][ T9922] usb 1-1: config 0 descriptor?? [ 675.516937][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1533'. [ 676.110081][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 676.874612][ T6652] usb 1-1: USB disconnect, device number 17 [ 678.770748][T10293] loop5: detected capacity change from 0 to 256 [ 678.901144][T10293] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 678.939042][T10296] loop3: detected capacity change from 0 to 164 [ 679.361826][T10293] exFAT-fs (loop5): hint_cluster is invalid (17) [ 679.510224][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 680.085294][T10320] loop3: detected capacity change from 0 to 256 [ 680.095852][ T9922] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 680.324300][T10320] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 680.574898][T10325] exFAT-fs (loop3): hint_cluster is invalid (17) [ 680.975845][ T9922] usb 6-1: Using ep0 maxpacket: 32 [ 681.155997][ T9922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.189222][ T9922] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 681.251642][T10334] loop0: detected capacity change from 0 to 256 [ 682.185879][ T9922] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 682.194975][ T9922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.230276][T10334] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 682.265807][ T9922] usb 6-1: Product: syz [ 682.279989][ T9922] usb 6-1: Manufacturer: syz [ 682.325564][ T9922] usb 6-1: SerialNumber: syz [ 682.333516][T10338] loop2: detected capacity change from 0 to 164 [ 682.372428][ T9922] usb 6-1: config 0 descriptor?? [ 682.590765][T10334] exFAT-fs (loop0): hint_cluster is invalid (17) [ 682.814400][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1547'. [ 683.021328][ T9922] usb 6-1: USB disconnect, device number 27 [ 683.050852][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 683.365240][T10362] loop2: detected capacity change from 0 to 512 [ 683.517739][T10362] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1565: corrupted inode contents [ 683.530201][T10362] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.1565: mark_inode_dirty error [ 683.543303][T10362] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1565: corrupted inode contents [ 683.555636][T10362] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1565: mark_inode_dirty error [ 683.568897][T10362] Quota error (device loop2): write_blk: dquota write failed [ 683.576454][T10362] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 683.586511][T10362] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1565: Failed to acquire dquot type 0 [ 683.609353][T10362] EXT4-fs (loop2): 1 orphan inode deleted [ 683.615140][T10362] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 683.626397][T10362] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.912165][T10380] loop0: detected capacity change from 0 to 164 [ 684.912850][T10382] loop6: detected capacity change from 0 to 256 [ 684.968144][T10382] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 685.571083][T10389] exFAT-fs (loop6): hint_cluster is invalid (17) [ 685.769072][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.775433][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.848577][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1575'. [ 686.246033][T10405] loop6: detected capacity change from 0 to 512 [ 686.351845][T10405] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.1576: corrupted inode contents [ 686.495986][ T4217] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 686.528489][T10405] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.1576: mark_inode_dirty error [ 686.635508][T10405] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.1576: corrupted inode contents [ 686.664291][T10412] loop5: detected capacity change from 0 to 512 [ 686.696212][T10405] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.1576: mark_inode_dirty error [ 686.728144][T10405] Quota error (device loop6): write_blk: dquota write failed [ 686.755814][ T4217] usb 1-1: Using ep0 maxpacket: 32 [ 686.842804][T10405] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 686.887436][T10412] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #3: comm syz.5.1581: corrupted inode contents [ 686.893945][T10405] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.1576: Failed to acquire dquot type 0 [ 686.900996][ T4217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.925794][ T4217] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 686.936595][T10412] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #3: comm syz.5.1581: mark_inode_dirty error [ 686.949569][T10412] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #3: comm syz.5.1581: corrupted inode contents [ 686.962414][T10412] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.1581: mark_inode_dirty error [ 687.007818][T10412] Quota error (device loop5): write_blk: dquota write failed [ 687.015364][T10412] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 687.023387][T10405] EXT4-fs (loop6): 1 orphan inode deleted [ 687.025555][T10412] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.1581: Failed to acquire dquot type 0 [ 687.045262][T10405] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.057061][T10405] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.074054][T10412] EXT4-fs (loop5): 1 orphan inode deleted [ 687.080021][T10412] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.091857][T10412] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.145939][ T4217] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 687.155276][ T4217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.200983][ T4217] usb 1-1: Product: syz [ 687.217919][ T4217] usb 1-1: Manufacturer: syz [ 687.223052][ T4217] usb 1-1: SerialNumber: syz [ 687.233583][ T4217] usb 1-1: config 0 descriptor?? [ 687.370444][T10422] loop2: detected capacity change from 0 to 164 [ 687.397192][T10424] loop3: detected capacity change from 0 to 256 [ 687.526133][T10424] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 687.819809][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'. [ 688.526085][T10435] exFAT-fs (loop3): hint_cluster is invalid (17) [ 688.742792][T10442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1588'. [ 688.805162][ T9920] usb 1-1: USB disconnect, device number 18 [ 688.822192][T10445] loop2: detected capacity change from 0 to 512 [ 689.126528][T10445] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1591: corrupted inode contents [ 689.141663][T10445] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.1591: mark_inode_dirty error [ 689.162111][T10445] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1591: corrupted inode contents [ 689.175482][T10445] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1591: mark_inode_dirty error [ 689.333305][T10445] Quota error (device loop2): write_blk: dquota write failed [ 689.341304][T10445] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 689.351289][T10445] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1591: Failed to acquire dquot type 0 [ 689.365880][T10445] EXT4-fs (loop2): 1 orphan inode deleted [ 689.371771][T10445] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.382940][T10445] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.433028][T10457] syz.3.1593[10457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.433769][T10457] syz.3.1593[10457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 689.517951][T10457] loop3: detected capacity change from 0 to 512 [ 690.328624][T10457] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 692.338514][T10457] EXT4-fs: error -4 creating inode table initialization thread [ 692.347928][T10457] EXT4-fs (loop3): mount failed [ 692.581824][T10468] loop2: detected capacity change from 0 to 512 [ 692.631561][T10472] loop3: detected capacity change from 0 to 164 [ 692.692984][T10468] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1595: corrupted inode contents [ 692.743078][T10468] EXT4-fs error (device loop2): ext4_dirty_inode:6039: inode #3: comm syz.2.1595: mark_inode_dirty error [ 692.822859][T10468] EXT4-fs error (device loop2): ext4_do_update_inode:5203: inode #3: comm syz.2.1595: corrupted inode contents [ 692.847446][T10468] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1595: mark_inode_dirty error [ 692.860423][T10468] Quota error (device loop2): write_blk: dquota write failed [ 692.868249][T10468] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 692.892311][T10468] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.1595: Failed to acquire dquot type 0 [ 692.984428][T10468] EXT4-fs (loop2): 1 orphan inode deleted [ 693.044608][T10468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 693.125427][T10468] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.255317][T10485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'. [ 693.299469][T10484] loop0: detected capacity change from 0 to 1024 [ 693.389695][T10488] loop5: detected capacity change from 0 to 256 [ 693.470418][T10484] EXT4-fs (loop0): Ignoring removed orlov option [ 693.487683][T10488] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 693.505738][T10484] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 693.686553][T10484] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 694.142069][T10501] exFAT-fs (loop5): hint_cluster is invalid (17) [ 695.916862][ T6652] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 695.982715][T10517] loop3: detected capacity change from 0 to 164 [ 696.815848][ T6652] usb 3-1: Using ep0 maxpacket: 32 [ 697.287623][ T6652] usb 3-1: unable to read config index 0 descriptor/all [ 697.304674][ T6652] usb 3-1: can't read configurations, error -71 [ 699.161646][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'. [ 699.228342][T10542] loop6: detected capacity change from 0 to 256 [ 699.316262][T10542] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 699.380582][T10547] loop3: detected capacity change from 0 to 256 [ 699.936613][T10553] exFAT-fs (loop6): hint_cluster is invalid (17) [ 700.138575][T10547] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 701.458871][T10563] loop5: detected capacity change from 0 to 164 [ 701.713875][T10569] loop2: detected capacity change from 0 to 1024 [ 701.846722][T10567] exFAT-fs (loop3): hint_cluster is invalid (17) [ 702.651140][T10569] EXT4-fs (loop2): Ignoring removed orlov option [ 702.715513][T10569] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 703.065483][ T4285] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 704.705994][T10569] EXT4-fs: failed to create workqueue [ 704.711412][T10569] EXT4-fs (loop2): mount failed [ 705.090892][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1632'. [ 705.375551][T10598] syz.5.1634[10598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.375902][T10598] syz.5.1634[10598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.450947][T10598] loop5: detected capacity change from 0 to 512 [ 706.940192][T10598] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 707.938491][T10605] loop6: detected capacity change from 0 to 256 [ 707.953198][T10598] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 708.055094][T10608] loop0: detected capacity change from 0 to 256 [ 708.074780][T10598] EXT4-fs (loop5): 1 truncate cleaned up [ 708.081422][T10598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 708.153717][T10605] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 708.166021][T10608] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 708.502930][T10610] exFAT-fs (loop6): hint_cluster is invalid (17) [ 709.856390][T10617] loop5: detected capacity change from 0 to 164 [ 710.334730][T10628] syz.6.1642[10628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.335458][T10628] syz.6.1642[10628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.415470][T10628] loop6: detected capacity change from 0 to 512 [ 710.552992][T10628] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 710.773449][T10628] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 710.797505][T10628] EXT4-fs (loop6): 1 truncate cleaned up [ 710.803278][T10628] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 710.959326][T10628] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.1642: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 711.652360][T10631] loop3: detected capacity change from 0 to 512 [ 711.793808][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1647'. [ 712.695802][ T5638] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 713.281062][T10631] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 714.459662][T10654] loop3: detected capacity change from 0 to 256 [ 714.611556][T10659] syz.0.1652[10659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.612251][T10659] syz.0.1652[10659] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.687459][T10659] loop0: detected capacity change from 0 to 512 [ 715.381902][T10659] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 715.947434][T10659] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 716.909649][T10654] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 716.922094][T10659] EXT4-fs (loop0): 1 truncate cleaned up [ 716.927911][T10659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 716.990638][T10659] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.1652: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 718.444205][T10668] loop0: detected capacity change from 0 to 164 [ 718.813715][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1659'. [ 720.187798][T10696] syz.3.1661[10696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 720.188491][T10696] syz.3.1661[10696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 720.275222][T10696] loop3: detected capacity change from 0 to 512 [ 720.396339][T10696] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 720.575117][T10696] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 720.599169][T10696] EXT4-fs (loop3): 1 truncate cleaned up [ 720.604971][T10696] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 720.755726][T10696] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.1661: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 721.584151][T10702] loop5: detected capacity change from 0 to 256 [ 721.672443][T10702] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 721.915746][ T9922] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 722.212288][T10707] exFAT-fs (loop5): hint_cluster is invalid (17) [ 722.383432][T10710] loop2: detected capacity change from 0 to 164 [ 722.387079][ T9922] usb 7-1: Using ep0 maxpacket: 32 [ 722.616125][ T9922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.658688][ T9922] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.966148][T10723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'. [ 723.035951][ T9922] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 723.095027][ T9922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.171974][ T9922] usb 7-1: config 0 descriptor?? [ 723.278310][ T9922] usb 7-1: can't set config #0, error -71 [ 723.380797][ T9922] usb 7-1: USB disconnect, device number 10 [ 723.713204][T10737] loop2: detected capacity change from 0 to 256 [ 723.717215][T10734] loop5: detected capacity change from 0 to 256 [ 723.784643][T10737] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 723.862375][T10734] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 724.216325][T10742] exFAT-fs (loop2): hint_cluster is invalid (17) [ 724.273553][T10743] exFAT-fs (loop5): hint_cluster is invalid (17) [ 725.582515][T10761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 725.724918][T10763] loop5: detected capacity change from 0 to 1024 [ 726.164040][T10763] EXT4-fs (loop5): Ignoring removed orlov option [ 726.209796][T10763] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 726.495954][ T4215] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 726.522063][T10763] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 726.745761][ T4215] usb 7-1: Using ep0 maxpacket: 32 [ 729.905957][ T4215] usb 7-1: unable to read config index 0 descriptor/all [ 729.913485][ T4215] usb 7-1: can't read configurations, error -71 [ 730.137710][T10789] loop6: detected capacity change from 0 to 256 [ 730.146920][T10788] loop0: detected capacity change from 0 to 256 [ 731.943841][T10788] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 731.983420][T10789] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 732.262170][T10797] exFAT-fs (loop0): hint_cluster is invalid (17) [ 732.281027][T10799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'. [ 736.085839][ T9922] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 736.286247][T10842] loop3: detected capacity change from 0 to 256 [ 736.307202][T10841] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1715'. [ 736.346032][ T9922] usb 3-1: Using ep0 maxpacket: 32 [ 736.397308][T10842] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 736.467080][ T9922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.521657][ T9922] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 736.705927][ T9922] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 736.715234][ T9922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.734009][ T9922] usb 3-1: Product: syz [ 736.738945][ T9922] usb 3-1: Manufacturer: syz [ 736.743561][ T9922] usb 3-1: SerialNumber: syz [ 736.757821][ T9922] usb 3-1: config 0 descriptor?? [ 737.009085][T10848] exFAT-fs (loop3): hint_cluster is invalid (17) [ 737.629719][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1706'. [ 737.832120][ T9920] usb 3-1: USB disconnect, device number 8 [ 738.202256][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1727'. [ 738.246240][T10875] loop0: detected capacity change from 0 to 256 [ 738.281686][T10878] loop3: detected capacity change from 0 to 256 [ 738.311462][T10875] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 738.413572][T10878] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 742.401190][T10918] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1742'. [ 742.427830][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1742'. [ 742.450389][T10918] netlink: 'syz.6.1742': attribute type 11 has an invalid length. [ 742.505474][T10918] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1742'. [ 742.565783][T10921] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1753'. [ 742.575772][ T1327] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 743.180475][T10921] netlink: 'syz.0.1753': attribute type 11 has an invalid length. [ 743.524044][T10928] loop6: detected capacity change from 0 to 1024 [ 743.572233][T10921] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1753'. [ 743.609053][T10930] loop5: detected capacity change from 0 to 1024 [ 743.625858][ T1327] usb 4-1: Using ep0 maxpacket: 32 [ 743.626518][T10928] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 743.660565][T10930] EXT4-fs (loop5): Ignoring removed bh option [ 743.719394][T10930] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 743.743974][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.756074][ T1327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.775969][ T1327] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.791654][T10928] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 743.820547][ C0] vkms_vblank_simulate: vblank timer overrun [ 743.837660][T10936] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1746'. [ 743.878083][ T26] audit: type=1800 audit(1746258581.662:254): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1745" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 744.047164][ T1327] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 744.060208][T10938] netlink: 'syz.0.1746': attribute type 11 has an invalid length. [ 744.068445][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.077064][T10938] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1746'. [ 744.102293][ T1327] usb 4-1: Product: syz [ 744.126580][ T1327] usb 4-1: Manufacturer: syz [ 744.136509][ T1327] usb 4-1: SerialNumber: syz [ 744.312581][T10940] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.1745: Allocating blocks 481-513 which overlap fs metadata [ 744.422475][T10940] EXT4-fs (loop5): Remounting filesystem read-only [ 744.826883][ T1327] usb 4-1: config 0 descriptor?? [ 745.133695][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1741'. [ 745.212421][T10958] loop2: detected capacity change from 0 to 1024 [ 745.231861][ T4218] usb 4-1: USB disconnect, device number 24 [ 745.336405][T10958] EXT4-fs (loop2): Ignoring removed bh option [ 745.336804][T10960] lo speed is unknown, defaulting to 1000 [ 745.472611][T10958] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 745.838969][ T26] audit: type=1800 audit(1746258583.622:255): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1751" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 746.323014][T10958] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.1751: Allocating blocks 481-513 which overlap fs metadata [ 746.474549][T10958] EXT4-fs (loop2): Remounting filesystem read-only [ 746.653626][T10971] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1752'. [ 746.750456][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 746.946295][T10974] netlink: 'syz.3.1752': attribute type 11 has an invalid length. [ 747.025445][T10974] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1752'. [ 747.218052][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.224906][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.831659][T10979] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1755'. [ 747.864420][T10983] loop3: detected capacity change from 0 to 1024 [ 749.096452][T10979] netlink: 'syz.2.1755': attribute type 11 has an invalid length. [ 749.137476][T10979] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1755'. [ 749.437162][T10983] EXT4-fs (loop3): Ignoring removed bh option [ 749.930849][T10983] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 750.268788][T11001] loop6: detected capacity change from 0 to 1024 [ 750.446117][T11008] loop2: detected capacity change from 0 to 512 [ 750.539321][T11008] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 750.599545][T11008] EXT4-fs (loop2): invalid journal inode [ 750.605347][T11008] EXT4-fs (loop2): can't get journal size [ 750.691371][T11001] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 750.813576][T11008] EXT4-fs (loop2): 1 truncate cleaned up [ 750.819462][T11008] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 750.906406][ T26] audit: type=1800 audit(1746258588.682:256): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1761" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 751.529007][T11001] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 751.651891][T11015] loop5: detected capacity change from 0 to 512 [ 751.820411][T11015] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 751.845881][T11015] EXT4-fs (loop5): invalid journal inode [ 751.851644][T11015] EXT4-fs (loop5): can't get journal size [ 751.893361][T11015] EXT4-fs (loop5): 1 truncate cleaned up [ 751.899142][T11015] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 751.964176][ T26] audit: type=1800 audit(1746258589.742:257): pid=11015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1762" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 754.303283][T11023] loop6: detected capacity change from 0 to 256 [ 754.382370][T11023] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 754.462903][T11028] loop0: detected capacity change from 0 to 1024 [ 756.012085][T11028] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 756.061290][ T6652] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 756.536262][T11028] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 757.312435][T11048] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1770'. [ 757.946582][ T6652] usb 3-1: Using ep0 maxpacket: 32 [ 757.968495][T11051] loop3: detected capacity change from 0 to 1024 [ 758.042853][T11049] loop6: detected capacity change from 0 to 1024 [ 758.110015][T11051] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 758.135351][ T6652] usb 3-1: device descriptor read/all, error -71 [ 758.161560][T11049] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 758.169761][T11045] netlink: 'syz.5.1770': attribute type 11 has an invalid length. [ 758.230231][T11051] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 758.259013][ C1] vkms_vblank_simulate: vblank timer overrun [ 758.282653][T11045] netlink: 428 bytes leftover after parsing attributes in process `syz.5.1770'. [ 758.346466][T11049] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 758.375307][ C1] vkms_vblank_simulate: vblank timer overrun [ 758.621907][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1774'. [ 758.632818][T11063] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1773'. [ 760.936635][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1773'. [ 761.666212][T11063] netlink: 'syz.5.1773': attribute type 11 has an invalid length. [ 761.674190][T11063] netlink: 428 bytes leftover after parsing attributes in process `syz.5.1773'. [ 761.773743][T11074] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1776'. [ 761.842850][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1776'. [ 761.923895][T11077] loop3: detected capacity change from 0 to 1024 [ 762.029905][T11074] netlink: 'syz.6.1776': attribute type 11 has an invalid length. [ 762.038042][T11077] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 762.840213][T11074] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1776'. [ 762.864210][T11085] loop5: detected capacity change from 0 to 256 [ 762.907766][T11077] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 763.194129][T11090] lo speed is unknown, defaulting to 1000 [ 764.069983][T11085] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 764.095148][T11096] loop6: detected capacity change from 0 to 1024 [ 764.320682][T11096] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 764.617668][T11100] exFAT-fs (loop5): hint_cluster is invalid (17) [ 764.717776][T11102] loop3: detected capacity change from 0 to 256 [ 764.767861][T11096] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 764.954467][T11102] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 766.871363][T11115] loop6: detected capacity change from 0 to 1024 [ 766.929452][T11115] EXT4-fs (loop6): Ignoring removed bh option [ 766.988140][T11115] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 767.055731][ T6239] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 767.144737][ T26] audit: type=1800 audit(1746258604.922:258): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1784" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 767.158080][T11115] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1784: Allocating blocks 481-513 which overlap fs metadata [ 767.247153][T11115] EXT4-fs (loop6): Remounting filesystem read-only [ 767.465599][ T6239] usb 6-1: Using ep0 maxpacket: 32 [ 767.631524][ T6239] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.699464][ T6239] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 768.726307][ T6239] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 768.740257][ T6239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.768443][ T6239] usb 6-1: Product: syz [ 768.784597][ T6239] usb 6-1: Manufacturer: syz [ 768.802020][ T6239] usb 6-1: SerialNumber: syz [ 768.940562][ T6239] usb 6-1: config 0 descriptor?? [ 768.983928][T11130] loop0: detected capacity change from 0 to 1024 [ 769.110669][T11130] EXT4-fs (loop0): Ignoring removed bh option [ 769.173345][T11130] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 769.296638][ T26] audit: type=1800 audit(1746258607.082:259): pid=11130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1787" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 769.304181][T11130] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.1787: Allocating blocks 481-513 which overlap fs metadata [ 769.319276][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1783'. [ 769.777921][T11130] EXT4-fs (loop0): Remounting filesystem read-only [ 770.137066][ T6239] usb 6-1: USB disconnect, device number 28 [ 771.002317][T11161] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1794'. [ 771.060005][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1794'. [ 771.163021][T11164] netlink: 'syz.6.1794': attribute type 11 has an invalid length. [ 771.173524][T11163] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1797'. [ 771.187632][T11164] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1794'. [ 771.203982][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 771.242115][T11163] netlink: 'syz.0.1797': attribute type 11 has an invalid length. [ 771.289371][T11163] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1797'. [ 775.005299][T11190] loop0: detected capacity change from 0 to 256 [ 775.171901][T11190] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 775.237596][T11193] loop6: detected capacity change from 0 to 1024 [ 775.323227][T11193] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 775.530498][T11196] loop2: detected capacity change from 0 to 1024 [ 776.020330][T11196] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 776.066676][T11193] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 776.095396][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.206678][T11196] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 776.527319][ T4285] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 778.225871][ T4285] usb 6-1: Using ep0 maxpacket: 32 [ 778.243332][T11219] loop6: detected capacity change from 0 to 1024 [ 778.348814][T11221] loop2: detected capacity change from 0 to 1024 [ 778.363689][T11219] EXT4-fs (loop6): Ignoring removed bh option [ 778.370087][ T4285] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.387711][ T4285] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.418797][T11221] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 778.452587][T11219] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 778.533731][T11221] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 778.636124][ T4285] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 778.646350][ T4285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.646408][ T26] audit: type=1800 audit(1746258616.422:260): pid=11219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1811" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 778.654444][ T4285] usb 6-1: Product: syz [ 778.679423][ T4285] usb 6-1: Manufacturer: syz [ 778.685078][ T4285] usb 6-1: SerialNumber: syz [ 778.691841][ T4285] usb 6-1: config 0 descriptor?? [ 778.922273][T11219] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1811: Allocating blocks 481-513 which overlap fs metadata [ 778.956347][T11219] EXT4-fs (loop6): Remounting filesystem read-only [ 779.021446][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 779.986963][T11235] loop2: detected capacity change from 0 to 1024 [ 780.019854][ T7] usb 6-1: USB disconnect, device number 29 [ 780.077093][T11235] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 780.205024][T11235] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 780.216374][T11243] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1815'. [ 780.233723][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.265578][T11244] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1814'. [ 780.297793][T11243] netlink: 'syz.3.1815': attribute type 11 has an invalid length. [ 780.326071][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1814'. [ 780.341101][T11243] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1815'. [ 781.024511][T11245] netlink: 'syz.6.1814': attribute type 11 has an invalid length. [ 781.063953][T11245] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1814'. [ 782.668803][T11263] loop0: detected capacity change from 0 to 256 [ 782.863299][T11263] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 783.362238][T11270] loop5: detected capacity change from 0 to 1024 [ 783.975028][T11275] loop2: detected capacity change from 0 to 1024 [ 784.676225][T11280] loop3: detected capacity change from 0 to 512 [ 787.170248][T11270] EXT4-fs (loop5): Ignoring removed bh option [ 787.240526][T11270] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 788.421302][T11289] loop0: detected capacity change from 0 to 512 [ 788.468927][T11291] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1829'. [ 789.536571][T11300] netlink: 'syz.6.1829': attribute type 11 has an invalid length. [ 789.678528][T11300] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1829'. [ 789.692119][T11289] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 789.702956][T11289] EXT4-fs (loop0): invalid journal inode [ 789.708773][T11289] EXT4-fs (loop0): can't get journal size [ 789.773314][T11289] EXT4-fs (loop0): 1 truncate cleaned up [ 789.779073][T11289] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 789.982324][ T26] audit: type=1800 audit(1746258627.612:261): pid=11289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1824" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 790.147993][T11309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1834'. [ 790.241531][T11313] loop2: detected capacity change from 0 to 256 [ 790.256586][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1834'. [ 790.294073][T11309] netlink: 'syz.0.1834': attribute type 11 has an invalid length. [ 790.350785][T11309] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1834'. [ 790.364702][T11318] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1838'. [ 790.376287][T11313] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 790.394882][T11317] loop5: detected capacity change from 0 to 1024 [ 790.704129][T11317] EXT4-fs (loop5): Ignoring removed bh option [ 791.269546][T11326] exFAT-fs (loop2): hint_cluster is invalid (17) [ 791.378804][T11317] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 791.771009][ T26] audit: type=1800 audit(1746258629.552:262): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1837" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 791.787349][T11317] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.1837: Allocating blocks 481-513 which overlap fs metadata [ 791.812945][T11330] loop6: detected capacity change from 0 to 1024 [ 791.823344][T11317] EXT4-fs (loop5): Remounting filesystem read-only [ 792.812606][T11330] EXT4-fs (loop6): Ignoring removed bh option [ 792.823931][T11336] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1841'. [ 792.881905][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 792.892532][T11338] lo speed is unknown, defaulting to 1000 [ 792.898264][T11330] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,usrjquota=,barrier=0x0000000000000002,dioread_lock,data_err=ignore,grpquota,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 792.954285][ T26] audit: type=1800 audit(1746258630.732:263): pid=11330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1840" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 792.974335][T11330] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1840: Allocating blocks 481-513 which overlap fs metadata [ 792.994351][T11330] EXT4-fs (loop6): Remounting filesystem read-only [ 793.026611][T11343] netlink: 'syz.2.1841': attribute type 11 has an invalid length. [ 793.092011][T11343] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1841'. [ 794.263621][T11352] ptrace attach of "./syz-executor exec"[4501] was attempted by "./syz-executor exec"[11352] [ 796.037797][T11362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1847'. [ 796.904399][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 797.125570][T11362] netlink: 'syz.2.1847': attribute type 11 has an invalid length. [ 797.140153][T11375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1849'. [ 797.204033][T11362] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1847'. [ 797.392215][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 797.404613][T11375] netlink: 'syz.0.1849': attribute type 11 has an invalid length. [ 797.413057][T11375] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1849'. [ 797.832576][T11385] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1851'. [ 797.993622][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1851'. [ 798.036361][T11385] netlink: 'syz.6.1851': attribute type 11 has an invalid length. [ 798.109355][T11385] netlink: 428 bytes leftover after parsing attributes in process `syz.6.1851'. [ 799.080003][T11401] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1858'. [ 799.298945][T11401] netlink: 'syz.0.1858': attribute type 11 has an invalid length. [ 799.331342][T11408] lo speed is unknown, defaulting to 1000 [ 799.449815][T11413] loop6: detected capacity change from 0 to 256 [ 799.552228][T11413] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 800.928075][T11425] netlink: 'syz.3.1864': attribute type 11 has an invalid length. [ 802.553731][T11447] ptrace attach of "./syz-executor exec"[6676] was attempted by "./syz-executor exec"[11447] [ 802.589910][T11448] __nla_validate_parse: 5 callbacks suppressed [ 802.589952][T11448] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1870'. [ 803.259704][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 803.298566][T11444] netlink: 'syz.2.1870': attribute type 11 has an invalid length. [ 803.339873][T11444] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1870'. [ 803.355120][T11451] lo speed is unknown, defaulting to 1000 [ 803.383744][T11453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1873'. [ 803.428429][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1873'. [ 803.512435][T11453] netlink: 'syz.3.1873': attribute type 11 has an invalid length. [ 803.522369][T11457] loop2: detected capacity change from 0 to 256 [ 803.535940][T11453] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1873'. [ 803.675568][T11457] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 803.918927][T11465] lo speed is unknown, defaulting to 1000 [ 804.034747][T11470] exFAT-fs (loop2): hint_cluster is invalid (17) [ 804.837920][T11478] loop2: detected capacity change from 0 to 256 [ 804.969991][T11478] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 805.811889][T11486] loop6: detected capacity change from 0 to 256 [ 806.097527][T11486] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 806.189737][T11494] ptrace attach of "./syz-executor exec"[4501] was attempted by "./syz-executor exec"[11494] [ 807.875556][T11498] exFAT-fs (loop6): hint_cluster is invalid (17) [ 808.587318][T11512] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1894'. [ 808.658743][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.665114][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.701427][T11520] xt_connbytes: Forcing CT accounting to be enabled [ 808.709319][T11520] Cannot find del_set index 1 as target [ 809.743766][T11528] loop0: detected capacity change from 0 to 256 [ 809.797761][T11530] loop5: detected capacity change from 0 to 256 [ 809.876762][T11528] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 809.895286][T11530] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 812.356480][T11562] xt_connbytes: Forcing CT accounting to be enabled [ 812.364975][T11562] Cannot find del_set index 1 as target [ 812.838754][T11560] overlayfs: statfs failed on './file0' [ 813.143333][T11578] loop6: detected capacity change from 0 to 256 [ 813.218626][T11578] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 813.437907][T11580] xt_connbytes: Forcing CT accounting to be enabled [ 813.444598][T11580] Cannot find del_set index 1 as target [ 814.743254][ T9922] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 815.764028][ T9922] usb 3-1: Using ep0 maxpacket: 32 [ 816.587383][ T9922] usb 3-1: device descriptor read/all, error -71 [ 816.712318][T11603] fuse: Unknown parameter 'user_i00000000000000000000' [ 816.823165][T11605] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1927'. [ 816.944045][T11610] loop3: detected capacity change from 0 to 256 [ 817.053132][T11610] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 817.214221][T11620] loop0: detected capacity change from 0 to 512 [ 818.614770][T11628] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1936'. [ 818.638030][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 818.667513][T11628] netlink: 'syz.2.1936': attribute type 11 has an invalid length. [ 818.715099][T11628] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1936'. [ 818.742587][T11620] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.1932: corrupted inode contents [ 818.754768][T11620] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #3: comm syz.0.1932: mark_inode_dirty error [ 818.767154][T11620] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.1932: corrupted inode contents [ 818.780669][T11620] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1932: mark_inode_dirty error [ 818.793424][T11620] Quota error (device loop0): write_blk: dquota write failed [ 818.800889][T11620] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 818.810891][T11620] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.1932: Failed to acquire dquot type 0 [ 818.826885][T11620] EXT4-fs (loop0): 1 orphan inode deleted [ 818.832790][T11620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 818.844018][T11620] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 819.240438][T11640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1940'. [ 819.329156][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 819.380941][T11643] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1938'. [ 819.403690][T11640] netlink: 'syz.2.1940': attribute type 11 has an invalid length. [ 819.428975][T11640] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1940'. [ 819.472844][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 819.747763][T11643] netlink: 'syz.0.1938': attribute type 11 has an invalid length. [ 819.747843][T11643] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1938'. [ 820.704587][T11657] loop6: detected capacity change from 0 to 512 [ 823.519919][T11657] EXT4-fs: error -4 creating inode table initialization thread [ 823.528461][T11657] EXT4-fs (loop6): mount failed [ 824.767474][T11678] ptrace attach of "./syz-executor exec"[4173] was attempted by "./syz-executor exec"[11678] [ 828.783224][T11696] loop0: detected capacity change from 0 to 512 [ 828.796391][T11702] loop3: detected capacity change from 0 to 512 [ 829.922834][T11696] EXT4-fs: error -4 creating inode table initialization thread [ 829.930739][T11696] EXT4-fs (loop0): mount failed [ 829.941063][T11702] EXT4-fs: error -4 creating inode table initialization thread [ 829.948988][T11702] EXT4-fs (loop3): mount failed [ 831.515855][ T9918] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 831.705086][T11733] loop3: detected capacity change from 0 to 256 [ 831.852323][T11733] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 831.875811][ T9918] usb 7-1: Using ep0 maxpacket: 32 [ 832.026000][ T9918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.208813][ T9918] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 833.865123][T11748] loop0: detected capacity change from 0 to 512 [ 833.895897][ T9918] usb 7-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 833.905030][ T9918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.114621][ T9918] usb 7-1: config 0 descriptor?? [ 834.175861][ T9918] usb 7-1: can't set config #0, error -71 [ 834.186835][ T9918] usb 7-1: USB disconnect, device number 13 [ 834.409312][T11755] lo speed is unknown, defaulting to 1000 [ 835.331491][T11748] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.1963: corrupted inode contents [ 835.903819][T11763] loop3: detected capacity change from 0 to 512 [ 836.925392][T11748] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #3: comm syz.0.1963: mark_inode_dirty error [ 836.938422][T11748] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.1963: corrupted inode contents [ 837.946009][T11748] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1963: mark_inode_dirty error [ 837.981201][T11763] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #3: comm syz.3.1967: corrupted inode contents [ 838.001214][T11763] EXT4-fs error (device loop3): ext4_dirty_inode:6039: inode #3: comm syz.3.1967: mark_inode_dirty error [ 838.019422][T11763] EXT4-fs error (device loop3): ext4_do_update_inode:5203: inode #3: comm syz.3.1967: corrupted inode contents [ 838.229288][T11763] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1967: mark_inode_dirty error [ 838.270611][T11763] Quota error (device loop3): write_blk: dquota write failed [ 838.278716][T11763] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 838.289047][T11763] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.1967: Failed to acquire dquot type 0 [ 838.310295][T11748] Quota error (device loop0): write_blk: dquota write failed [ 838.331492][T11763] EXT4-fs (loop3): 1 orphan inode deleted [ 838.337373][T11763] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 838.349023][T11763] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.976261][T11748] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 838.997364][T11748] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.1963: Failed to acquire dquot type 0 [ 839.531815][T11748] EXT4-fs (loop0): 1 orphan inode deleted [ 839.563661][T11748] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 840.006560][T11748] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.030677][T11797] loop6: detected capacity change from 0 to 256 [ 843.977123][ T6652] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 844.823188][T11797] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 844.856090][ T6652] usb 3-1: Using ep0 maxpacket: 32 [ 845.586924][T11827] ptrace attach of "./syz-executor exec"[4170] was attempted by "./syz-executor exec"[11827] [ 847.046922][ T6652] usb 3-1: device descriptor read/all, error -71 [ 848.562368][T11861] loop6: detected capacity change from 0 to 256 [ 848.667248][T11861] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 849.995215][T11873] exFAT-fs (loop6): hint_cluster is invalid (17) [ 850.712253][T11884] loop6: detected capacity change from 0 to 512 [ 850.885848][ T6652] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 852.155726][ T6652] usb 4-1: Using ep0 maxpacket: 32 [ 852.275932][ T6652] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.229350][T11884] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.2000: corrupted inode contents [ 853.245695][T11884] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.2000: mark_inode_dirty error [ 853.264438][T11884] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.2000: corrupted inode contents [ 853.278095][T11884] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.2000: mark_inode_dirty error [ 853.303512][T11884] Quota error (device loop6): write_blk: dquota write failed [ 853.311653][T11884] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 853.321923][T11884] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.2000: Failed to acquire dquot type 0 [ 853.349799][T11884] EXT4-fs (loop6): 1 orphan inode deleted [ 853.355725][T11884] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 853.367348][T11884] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.945742][ T6652] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 854.541333][ T6652] usb 4-1: string descriptor 0 read error: -71 [ 854.553749][ T6652] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 854.612375][ T6652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.804450][ T6652] usb 4-1: config 0 descriptor?? [ 854.845847][ T6652] usb 4-1: can't set config #0, error -71 [ 854.902064][T11904] loop0: detected capacity change from 0 to 512 [ 854.921466][ T6652] usb 4-1: USB disconnect, device number 25 [ 855.887037][T11904] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.2007: corrupted inode contents [ 856.067879][T11904] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #3: comm syz.0.2007: mark_inode_dirty error [ 856.086867][T11904] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #3: comm syz.0.2007: corrupted inode contents [ 856.147793][T11904] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.2007: mark_inode_dirty error [ 856.202364][T11904] Quota error (device loop0): write_blk: dquota write failed [ 856.224210][T11904] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 856.241094][T11916] loop6: detected capacity change from 0 to 512 [ 856.291706][T11904] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.2007: Failed to acquire dquot type 0 [ 856.346497][T11904] EXT4-fs (loop0): 1 orphan inode deleted [ 856.363124][T11904] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 856.381455][T11904] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.399853][T11916] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.2010: corrupted inode contents [ 856.421588][T11916] EXT4-fs error (device loop6): ext4_dirty_inode:6039: inode #3: comm syz.6.2010: mark_inode_dirty error [ 856.434371][T11916] EXT4-fs error (device loop6): ext4_do_update_inode:5203: inode #3: comm syz.6.2010: corrupted inode contents [ 856.447661][T11916] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #3: comm syz.6.2010: mark_inode_dirty error [ 856.463064][T11916] Quota error (device loop6): write_blk: dquota write failed [ 856.470669][T11916] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 856.480676][T11916] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.2010: Failed to acquire dquot type 0 [ 856.496812][T11916] EXT4-fs (loop6): 1 orphan inode deleted [ 856.502653][T11916] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 856.513847][T11916] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.599247][T11922] loop5: detected capacity change from 0 to 512 [ 856.662000][T11922] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #3: comm syz.5.2011: corrupted inode contents [ 856.674791][T11922] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #3: comm syz.5.2011: mark_inode_dirty error [ 856.688766][T11922] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #3: comm syz.5.2011: corrupted inode contents [ 856.701325][T11922] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.2011: mark_inode_dirty error [ 856.719374][T11922] Quota error (device loop5): write_blk: dquota write failed [ 856.727058][T11922] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 856.737089][T11922] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.2011: Failed to acquire dquot type 0 [ 856.751277][T11922] EXT4-fs (loop5): 1 orphan inode deleted [ 856.757136][T11922] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 856.768950][T11922] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 858.246094][T11939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2018'. [ 858.360205][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 858.508012][T11939] netlink: 'syz.3.2018': attribute type 11 has an invalid length. [ 858.544839][T11939] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2018'. [ 859.525692][ T6237] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 859.549772][T11952] loop2: detected capacity change from 0 to 1024 [ 859.850329][T11952] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 860.201996][T11952] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 860.645791][ T6237] usb 6-1: Using ep0 maxpacket: 32 [ 860.877842][ T6237] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.949585][ T6237] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 861.168347][ T6237] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 861.205894][ T6237] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.232133][ T6237] usb 6-1: Product: syz [ 861.246827][ T6237] usb 6-1: Manufacturer: syz [ 861.251489][ T6237] usb 6-1: SerialNumber: syz [ 862.007494][ T6237] usb 6-1: config 0 descriptor?? [ 863.015933][ T6237] usb 6-1: can't set config #0, error -71 [ 863.045889][ T6237] usb 6-1: USB disconnect, device number 30 [ 868.078964][T12017] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2038'. [ 868.211359][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 868.244423][T12017] netlink: 'syz.2.2038': attribute type 11 has an invalid length. [ 868.273035][ T4215] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 868.293531][T12017] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2038'. [ 868.413877][T12025] loop6: detected capacity change from 0 to 1024 [ 868.721693][T12025] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 868.779873][T12025] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 869.010221][ T4215] usb 1-1: Using ep0 maxpacket: 32 [ 870.576184][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.582515][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.501252][ T4215] usb 1-1: device descriptor read/all, error -71 [ 876.811458][T12092] loop3: detected capacity change from 0 to 1024 [ 981.805608][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 981.812610][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11214/1:b..l [ 981.821180][ C1] (detected by 1, t=10502 jiffies, g=51305, q=385) [ 981.827783][ C1] task:kworker/u4:3 state:R running task stack:24000 pid:11214 ppid: 2 flags:0x00004000 [ 981.839724][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 981.847605][ C1] Call Trace: [ 981.850904][ C1] [ 981.853854][ C1] __schedule+0x11b8/0x43b0 [ 981.858386][ C1] ? stack_trace_save+0x98/0xe0 [ 981.863269][ C1] ? mark_lock+0x94/0x320 [ 981.867623][ C1] ? batadv_tvlv_container_ogm_append+0x19f/0x480 [ 981.874063][ C1] ? release_firmware_map_entry+0x190/0x190 [ 981.879982][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 981.885375][ C1] preempt_schedule_irq+0xb1/0x150 [ 981.890506][ C1] ? __cond_resched+0xb0/0xb0 [ 981.895197][ C1] ? rcu_is_watching+0x11/0xa0 [ 981.899982][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 981.905807][ C1] irqentry_exit+0x63/0x70 [ 981.910239][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 981.916250][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 981.921559][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 981.941177][ C1] RSP: 0000:ffffc9000348f900 EFLAGS: 00000206 [ 981.947262][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2453d09eb57ec100 [ 981.955245][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2260 RDI: ffffffff8a59a2c0 [ 981.963226][ C1] RBP: ffffc9000348fa20 R08: dffffc0000000000 R09: fffffbfff1ff3219 [ 981.971229][ C1] R10: fffffbfff1ff3219 R11: 1ffffffff1ff3218 R12: ffffffff8c11be60 [ 981.979314][ C1] R13: 1ffff92000691f2c R14: 0000000000000246 R15: dffffc0000000000 [ 981.987331][ C1] ? rcu_lock_release+0x5/0x20 [ 981.992124][ C1] ? read_lock_is_recursive+0x10/0x10 [ 981.997523][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 982.002579][ C1] rcu_lock_acquire+0x2a/0x30 [ 982.007272][ C1] ? rcu_lock_acquire+0x5/0x30 [ 982.012131][ C1] batadv_iv_ogm_schedule+0x432/0xe90 [ 982.017538][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 982.024764][ C1] ? batadv_send_skb_packet+0x392/0x5f0 [ 982.030346][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72d/0x840 [ 982.037420][ C1] process_one_work+0x863/0x1000 [ 982.042488][ C1] ? worker_detach_from_pool+0x240/0x240 [ 982.048136][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 982.053443][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 982.058487][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 982.063882][ C1] ? wq_worker_running+0x97/0x170 [ 982.068922][ C1] worker_thread+0xaa8/0x12a0 [ 982.073620][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 982.078841][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 982.084059][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 982.089980][ C1] kthread+0x436/0x520 [ 982.094073][ C1] ? rcu_lock_release+0x20/0x20 [ 982.098936][ C1] ? kthread_blkcg+0xd0/0xd0 [ 982.103538][ C1] ret_from_fork+0x1f/0x30 [ 982.107999][ C1] [ 982.111036][ C1] rcu: rcu_preempt kthread starved for 9340 jiffies! g51305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 982.122149][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 982.132140][ C1] rcu: RCU grace-period kthread stack dump: [ 982.138034][ C1] task:rcu_preempt state:R running task stack:27200 pid: 15 ppid: 2 flags:0x00004000 [ 982.148828][ C1] Call Trace: [ 982.152117][ C1] [ 982.155064][ C1] __schedule+0x11b8/0x43b0 [ 982.159621][ C1] ? release_firmware_map_entry+0x190/0x190 [ 982.165659][ C1] schedule+0x11b/0x1e0 [ 982.169845][ C1] schedule_timeout+0x15c/0x280 [ 982.174717][ C1] ? console_conditional_schedule+0x40/0x40 [ 982.180634][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 982.186649][ C1] ? update_process_times+0x200/0x200 [ 982.192070][ C1] ? prepare_to_swait_event+0x331/0x350 [ 982.197652][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 982.202533][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 982.207755][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 982.213950][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 982.218734][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 982.223951][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 982.229166][ C1] rcu_gp_kthread+0x98/0x350 [ 982.233778][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 982.238906][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 982.244819][ C1] ? __kthread_parkme+0x157/0x1b0 [ 982.249866][ C1] kthread+0x436/0x520 [ 982.253961][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 982.259086][ C1] ? kthread_blkcg+0xd0/0xd0 [ 982.263694][ C1] ret_from_fork+0x1f/0x30 [ 982.268162][ C1] [ 982.271188][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 982.277534][ C1] NMI backtrace for cpu 1 [ 982.281887][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.181-syzkaller #0 [ 982.289732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 982.299839][ C1] Call Trace: [ 982.303162][ C1] [ 982.306034][ C1] dump_stack_lvl+0x168/0x230 [ 982.310750][ C1] ? show_regs_print_info+0x20/0x20 [ 982.315983][ C1] ? load_image+0x3b0/0x3b0 [ 982.320527][ C1] ? irq_work_queue+0xbf/0x140 [ 982.325334][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 982.330314][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 982.336504][ C1] ? _printk+0xcc/0x110 [ 982.340681][ C1] ? cpu_online+0x1d/0x30 [ 982.345028][ C1] ? load_image+0x3b0/0x3b0 [ 982.349746][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 982.355848][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 982.361862][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 982.368061][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 982.373559][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 982.378549][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 982.384020][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 982.389251][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 982.394132][ C1] ? account_process_tick+0x227/0x3a0 [ 982.399537][ C1] update_process_times+0x193/0x200 [ 982.404777][ C1] tick_sched_timer+0x37d/0x560 [ 982.409660][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 982.414894][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 982.420483][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 982.425628][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 982.431724][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 982.436708][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 982.442715][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 982.448377][ C1] [ 982.451318][ C1] [ 982.454260][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 982.460253][ C1] RIP: 0010:default_idle+0xb/0x10 [ 982.465298][ C1] Code: bf 48 89 df e8 16 c3 12 f8 eb b5 e8 4f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 57 53 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 982.484915][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 982.491005][ C1] RAX: ba91cd0dc3a58300 RBX: ffff88813fe48000 RCX: ba91cd0dc3a58300 [ 982.499075][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b0fc0 RDI: ffffffff8a59a2c0 [ 982.507068][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 982.515049][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d68aae8 [ 982.523031][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc9000 [ 982.531039][ C1] default_idle_call+0x81/0xc0 [ 982.535820][ C1] do_idle+0x21b/0x5b0 [ 982.539915][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 982.545125][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 982.550338][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 982.555997][ C1] cpu_startup_entry+0x14/0x20 [ 982.560779][ C1] start_secondary+0x31f/0x430 [ 982.565563][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 982.570962][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 982.576884][ C1]